This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
File:                     fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json)
Hash identifier:          u/Saykft8mTtL1/3gk4P6szPn7vBCczIRuUdiqUnfdY=
Subject key identifier:   F0:E1:EE:12:41:C0:CE:40:5E:E4:C4:09:F2:44:B4:F2:2C:3D:5C:B0
Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
Certificate issuer:       /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Certificate serial:       04BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
Manifest number:          04B6
Signing time:             Sat 20 Dec 2025 23:11:57 +0000
Manifest this update:     Sat 20 Dec 2025 23:11:57 +0000
Manifest next update:     Sat 27 Dec 2025 23:11:57 +0000
Files and hashes:         1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: KFQqVnXmQCI2/xmYLGkFZyPZo8paa8DBqxlozLa/OQM=)
                          2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: c5NMAe1CqQurJqS1H1w7Md/EROAKq1xZbqnKJkldnUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
        Validity
            Not Before: Dec 20 23:11:57 2025 GMT
            Not After : Dec 27 23:11:57 2025 GMT
        Subject: CN=69472d3d-7a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:96:0a:64:05:e1:61:5e:7e:40:e5:10:40:
                    73:16:01:83:b7:b7:6c:2f:8f:df:b8:1d:95:3e:35:
                    73:b9:6d:ad:9f:b5:93:4f:07:6c:f6:1b:83:ba:29:
                    84:b9:b0:5b:51:18:71:1d:ce:1f:68:ba:cf:5a:6b:
                    04:76:cc:20:a5:5c:b6:bf:50:ce:12:c5:c1:3b:d5:
                    a3:15:b5:ec:ea:e0:74:18:df:3f:24:6b:69:c7:ba:
                    7c:82:e1:d3:6a:2a:8a:e3:39:69:ae:f6:50:84:78:
                    34:2c:f9:17:da:d9:20:78:83:c8:26:67:2f:2c:88:
                    45:34:ce:f2:68:f5:5c:63:39:a8:51:84:8f:2b:dc:
                    6b:e9:a7:66:97:f1:0a:90:d8:50:07:b7:07:74:4d:
                    07:47:71:97:00:b3:cb:30:0e:e2:88:d4:22:70:06:
                    3e:9a:e5:01:0b:fd:98:76:d5:4c:12:66:1c:5b:e6:
                    c0:9b:89:9c:7a:af:bc:0d:9b:b7:a3:15:83:7e:eb:
                    60:61:ae:20:20:ac:d0:77:b2:c7:5d:d4:8e:de:55:
                    92:b4:7a:4c:c5:1e:b0:71:d4:92:b4:9a:d9:26:ef:
                    66:11:92:a3:60:bd:b5:90:ef:ac:48:7f:a1:cc:5d:
                    82:b1:ab:05:f0:6a:09:6d:6c:6e:76:71:d2:16:b2:
                    6a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E1:EE:12:41:C0:CE:40:5E:E4:C4:09:F2:44:B4:F2:2C:3D:5C:B0
            X509v3 Authority Key Identifier:
                keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2e:10:44:ad:c6:9f:87:29:82:7f:d6:2a:89:ec:7a:d0:94:
         78:7a:eb:90:f1:36:eb:ce:5c:24:18:50:7a:73:78:57:80:7c:
         bc:90:78:fc:c3:a3:d1:2c:7e:2e:68:b7:f9:5c:e9:c7:a5:cb:
         3b:c1:fd:12:9c:ba:14:fe:a8:72:a2:3f:fe:ad:ad:be:e8:d8:
         e1:22:9a:71:7b:f2:c6:95:0d:a0:3d:c7:c2:72:98:df:79:ef:
         57:bf:ad:a3:63:d5:5b:27:23:f3:39:80:25:e9:b3:76:4d:0f:
         e5:70:b9:b5:f1:af:8b:1f:64:5c:d0:71:34:4e:d6:f9:c4:70:
         6c:5a:ca:5e:a4:30:55:7f:a1:39:51:9a:db:20:44:06:9f:ca:
         80:7e:48:b2:c9:7d:62:7c:2b:e8:cc:ec:aa:4a:04:80:ba:b3:
         07:0f:d9:46:f4:ad:01:84:02:5f:f8:6a:70:a8:41:a0:54:cc:
         bf:62:16:fa:42:2c:f3:0e:41:b0:61:99:06:4e:95:c3:0f:84:
         0f:c6:eb:53:c7:e7:1c:7a:b4:b1:55:dd:50:34:4b:2c:0a:0c:
         ef:ee:81:f1:18:97:82:45:58:f1:9f:bd:d2:38:4c:e2:20:76:
         af:26:4c:1e:3e:7f:3d:55:3c:39:2b:f4:a5:ed:20:8e:9a:69:
         af:e6:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:59:02 2025 by rpki-client