This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
File:                     Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json)
Hash identifier:          cCBHmKxvNZyK2IR/H4ldUfjkj2DXAnbPoB0Mon9LAM4=
Subject key identifier:   68:20:FF:EB:8B:83:73:4E:30:49:AD:C9:43:4E:84:9B:D2:E4:92:F9
Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
Certificate issuer:       /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
Manifest number:          C5
Signing time:             Fri 19 Dec 2025 04:58:47 +0000
Manifest this update:     Fri 19 Dec 2025 04:58:47 +0000
Manifest next update:     Fri 26 Dec 2025 04:58:47 +0000
Files and hashes:         1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: eSiU45p3OU2rFXdwBPJW2eqyOfHLi96yJQ+uCpANTco=)
                          2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: 3iz7wj1YXwc+8ZUE8ZccL2zY0SUrahR9tPAyGcy55nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl
                          rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
        Validity
            Not Before: Dec 19 04:58:47 2025 GMT
            Not After : Dec 26 04:58:47 2025 GMT
        Subject: CN=6944db87-96ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:27:bc:28:5f:79:87:14:1a:8d:fa:bd:55:88:
                    ce:a2:75:d3:7a:ae:de:a1:8c:01:4a:f2:dd:80:fd:
                    3c:31:a9:db:4b:0d:bb:1d:50:18:35:f3:03:0d:ac:
                    5a:f0:de:8a:d3:00:21:5e:95:70:d9:42:c5:92:e4:
                    33:46:cb:43:0d:03:08:10:6a:f6:33:bd:74:83:8d:
                    e4:1f:4b:f9:25:d4:8b:cd:cb:a0:ae:57:2f:cd:ff:
                    12:36:55:b6:e3:a5:50:f0:41:8e:b0:30:99:83:f8:
                    e1:8b:37:f4:3f:08:d4:c2:61:ca:b3:09:7a:db:2f:
                    88:0f:8c:f0:98:a3:2d:57:51:f6:e6:fb:45:8c:9f:
                    26:8c:07:3a:9b:a1:fe:3d:7c:99:a7:61:a0:f9:5f:
                    d6:4d:ad:93:ea:c9:55:c2:8e:3d:08:cc:11:0b:b3:
                    95:27:da:b2:11:f2:65:7e:aa:eb:74:18:c0:25:85:
                    08:b9:d3:23:91:4f:e2:3c:4d:33:9b:42:6e:ec:14:
                    de:26:4f:fd:1b:c2:16:39:93:98:75:d9:4c:73:96:
                    35:7a:ca:59:1c:0b:ef:84:f4:b7:51:bf:05:10:19:
                    7f:a3:c0:58:dc:bd:fd:1a:79:5b:92:66:42:47:52:
                    d1:62:3b:a6:25:56:dd:4c:81:c7:bc:45:f4:6a:0c:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:20:FF:EB:8B:83:73:4E:30:49:AD:C9:43:4E:84:9B:D2:E4:92:F9
            X509v3 Authority Key Identifier:
                keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c2:ed:d8:f7:ea:c6:e2:59:6c:67:9d:a3:04:17:4c:7f:19:
         e7:84:56:de:72:a6:10:08:b5:e0:b5:aa:41:92:e3:ed:97:f7:
         3a:c6:27:04:a9:ed:8b:9d:c6:8a:1c:1b:d8:91:38:74:d9:7b:
         11:5f:60:54:e2:b2:a1:4e:03:ec:94:8f:a5:a0:dd:ed:fc:37:
         a2:f8:ad:79:36:b2:28:0b:fc:63:9e:c7:45:f4:06:bc:a5:5c:
         98:20:18:1c:48:fa:2b:92:1b:a2:96:de:49:f4:e6:32:79:b0:
         71:02:5b:3f:ef:52:45:46:6e:e7:2e:de:5f:1a:4c:e0:66:69:
         27:51:cd:cf:84:5b:c8:8f:01:3d:e5:65:7e:9d:9c:3b:53:e6:
         c1:a5:1d:34:07:e4:8f:5a:95:a4:75:55:31:40:d1:30:8e:e1:
         a5:4d:ec:8f:d2:ab:41:02:e4:fc:66:be:0b:c5:46:c8:c6:45:
         e6:69:3a:90:1c:b5:d6:1e:3b:4d:f0:ea:6b:71:ea:71:cc:60:
         b0:55:dd:55:55:76:b6:44:fc:27:1f:6b:3e:c9:72:2b:c7:05:
         09:7f:c6:2a:be:bd:3c:23:c0:b8:f2:e2:fb:01:b4:51:be:f8:
         ad:f7:43:24:91:93:be:5f:53:d1:07:37:69:7a:69:0f:62:a0:
         cb:37:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:00:02 2025 by rpki-client