This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
File:                     FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft (raw, json)
Hash identifier:          zQrcKJji0mHaxObHJT46OGtMQciepCp5ul5+EU6TX7o=
Subject key identifier:   6B:DA:CA:BD:81:EC:7F:B8:73:76:C3:CA:A1:CE:E0:DC:0C:87:0D:98
Authority key identifier: 15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA
Certificate issuer:       /CN=A919887F/serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
Certificate serial:       0918
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
Manifest number:          090F
Signing time:             Mon 22 Dec 2025 19:39:10 +0000
Manifest this update:     Mon 22 Dec 2025 19:39:10 +0000
Manifest next update:     Mon 29 Dec 2025 19:39:10 +0000
Files and hashes:         1: FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl (hash: PsYhyUnOENOCML/N6v4MksZbmcziHuwFV6OM/+Se4+s=)
                          2: 1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa (hash: pJayBxxRJWCzWhsXsVewXSgwV3tW3WYJIkIORAZIGdQ=)
                          3: 4D2299ECF7C611EF92C34E4AC4F9AE02.roa (hash: UPxtnvqn+XnWITXkdADWZf+oTAAZ7ogJ1IFuU/0UKTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl
                          rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328 (0x918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919887F, serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
        Validity
            Not Before: Dec 22 19:39:10 2025 GMT
            Not After : Dec 29 19:39:10 2025 GMT
        Subject: CN=69499e5e-8951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:73:6a:d5:11:08:b3:02:da:4c:3c:6c:e4:
                    01:62:45:8a:bb:af:03:ec:fa:e4:37:eb:92:94:66:
                    1f:53:00:15:e2:29:14:b5:b3:de:ff:e0:9e:f5:7b:
                    c4:fb:ee:12:de:d8:6e:25:d4:e1:73:1f:e1:6a:6f:
                    88:9e:3f:0e:fc:e6:58:12:3d:1f:7c:ce:fb:0c:d2:
                    c5:23:ac:9d:be:d9:f2:a1:bd:7e:0c:31:8a:6c:a1:
                    63:7f:80:a5:66:84:5b:46:ef:c1:67:21:ed:cf:e3:
                    69:c1:3b:ca:d9:d0:45:7d:2e:a5:c9:51:6f:5e:1c:
                    46:44:b0:96:a3:b1:77:48:89:7c:af:5d:ec:f5:f4:
                    c2:d5:99:a9:2b:b7:d3:59:41:f1:b4:53:7d:e2:ef:
                    b7:f8:e5:2e:6d:3b:98:89:79:9d:b1:7e:a3:f0:a7:
                    30:d8:d6:ac:89:4e:d7:93:83:73:6d:2c:0c:3c:d6:
                    27:71:0b:0a:cd:f2:39:06:2c:9e:39:9d:d9:81:75:
                    e8:4a:fe:bd:07:e5:cb:44:99:a3:56:59:82:b4:d5:
                    d9:06:36:1d:e4:4c:1a:da:77:80:46:c0:d0:c1:27:
                    2d:e2:b3:92:72:9c:61:0c:c8:72:e9:b0:93:c5:9e:
                    a7:29:67:1a:d8:8c:48:0b:96:02:d5:64:91:e0:4a:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DA:CA:BD:81:EC:7F:B8:73:76:C3:CA:A1:CE:E0:DC:0C:87:0D:98
            X509v3 Authority Key Identifier:
                keyid:15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:59:db:8a:4d:2a:8b:44:29:76:69:2e:40:05:d4:4a:e9:66:
         1a:95:6e:69:f2:09:4a:8e:67:aa:94:37:aa:26:13:bf:8a:94:
         5c:6c:71:8d:8d:d3:b2:a8:3e:82:c4:0b:ac:d0:9a:60:20:c9:
         73:b1:7b:1b:ce:bf:aa:18:83:5e:c3:dc:70:c5:24:af:d9:17:
         22:14:d3:1b:91:5c:6e:d8:34:f8:89:99:f0:c7:86:a5:6c:b0:
         fd:e3:3c:67:81:fd:67:71:ea:dd:4f:9e:33:19:13:95:ea:5d:
         dc:72:21:6a:ea:46:32:ff:9d:1d:86:f4:a7:bb:3b:77:e5:30:
         30:0b:96:29:f7:aa:5c:c0:c2:ce:c1:73:f2:4f:98:e3:f5:ee:
         fd:5c:bb:a0:c1:74:dd:27:b5:8f:16:a6:42:0b:a6:b4:48:46:
         1c:4d:32:b0:11:9f:df:cb:b9:56:51:5f:91:ff:48:70:40:85:
         d7:cf:c0:a5:c0:9f:b5:a7:db:da:c7:2c:c7:b7:72:f4:2f:fe:
         b5:8e:23:aa:23:4a:15:ac:77:d8:77:01:41:d7:6a:d7:8f:88:
         6a:52:c3:e0:d9:89:ba:36:7c:7b:93:e3:a6:0e:be:cc:d3:2a:
         39:a4:ab:6e:1b:6a:45:fa:da:53:fc:d8:a6:4b:e5:ed:95:13:
         35:58:cd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:52:52 2025 by rpki-client