This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
File:                     fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json)
Hash identifier:          QrrsGOriN9OCQkmr+FdEOHTrm7pRf10iPzG9gyeL79Q=
Subject key identifier:   DB:08:DD:0E:51:BF:01:00:C7:F3:BC:57:A2:A9:81:30:08:67:EA:C0
Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
Certificate issuer:       /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
Manifest number:          D8
Signing time:             Fri 19 Dec 2025 04:44:19 +0000
Manifest this update:     Fri 19 Dec 2025 04:44:19 +0000
Manifest next update:     Fri 26 Dec 2025 04:44:19 +0000
Files and hashes:         1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: M/zmuEiAErfExNnL/pujKXTv7F5o1CD/GvSLRxtQzQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC, serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
        Validity
            Not Before: Dec 19 04:44:19 2025 GMT
            Not After : Dec 26 04:44:19 2025 GMT
        Subject: CN=6944d823-3185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:ea:9d:b7:42:13:de:26:ca:f8:4e:e3:0a:
                    1c:b6:10:a1:61:df:cf:7c:53:41:b0:b3:e7:e6:24:
                    be:af:d6:20:e3:c2:27:b4:28:1a:89:09:d2:60:3b:
                    f4:39:96:fd:f8:47:fb:ff:c2:c3:95:41:75:a0:dc:
                    a0:65:d0:5e:7e:08:11:2f:f8:b8:08:9b:cb:1b:66:
                    8e:48:10:ce:d0:79:94:de:b4:ed:65:6d:da:74:99:
                    50:24:dc:62:d5:c3:2b:2e:85:e1:2d:6f:3f:a8:b1:
                    6c:45:a9:75:9a:88:8b:c9:ce:bf:83:e2:8c:37:b4:
                    f2:af:47:0c:4b:72:07:c1:e1:09:d9:00:1e:47:a8:
                    4f:24:51:49:06:4f:a6:57:11:a8:8c:12:78:5f:82:
                    8f:a9:30:38:17:0f:32:6f:f3:c3:a2:04:ca:97:ee:
                    9e:d7:f1:dd:ab:a8:e3:e7:99:53:98:fb:cd:78:08:
                    e0:52:79:80:9a:1e:a3:c6:40:f7:27:7d:f1:e6:17:
                    99:37:77:1a:ec:ac:7f:c5:c2:fe:65:6e:53:43:19:
                    8d:2c:ee:da:df:57:4b:61:51:9d:0f:74:b3:5e:78:
                    c6:61:29:df:fd:98:4d:11:20:a4:ef:2d:a0:bf:e8:
                    cb:d7:92:64:a1:30:d0:e6:4d:94:bd:b3:8b:3d:d0:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:08:DD:0E:51:BF:01:00:C7:F3:BC:57:A2:A9:81:30:08:67:EA:C0
            X509v3 Authority Key Identifier:
                keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:73:a5:84:4f:fa:cd:9b:78:e3:5d:b8:17:ad:3b:c7:3b:
         b7:8b:72:da:e4:f8:de:46:f5:90:7f:e7:75:4a:a5:dc:4b:59:
         96:5c:0f:88:e8:c7:79:cc:cb:ad:52:bd:35:c2:0c:86:21:0f:
         48:5f:2d:f7:30:a1:27:0f:35:71:5d:df:11:dd:05:0d:df:b0:
         35:d0:b6:e2:6e:85:81:3c:c8:ff:e1:66:01:6d:39:ed:a4:fa:
         b8:d8:da:96:b5:e6:c7:b5:3d:37:92:e0:50:ae:89:02:29:94:
         52:bb:be:11:5e:ed:be:a3:ec:80:ee:1c:0d:20:59:df:a8:d8:
         e6:4c:2a:82:2d:cc:57:fe:82:4c:77:92:5c:fe:29:91:37:5a:
         ad:35:1b:98:fc:b1:52:0b:ca:99:a8:ba:ee:80:ae:08:0f:6a:
         c9:3e:11:e1:1d:a7:d3:59:73:d2:1f:d2:25:bf:10:6e:82:fa:
         ff:b4:ad:77:f9:68:bd:fb:e4:6f:cf:e4:ae:7f:32:3f:78:4a:
         d4:de:2c:76:9c:23:fc:52:50:2b:e5:0e:57:6b:a7:9a:e0:fa:
         08:76:6f:17:4a:d0:2b:2b:fe:d6:1a:80:e4:4b:d5:66:08:4f:
         53:cd:fc:d1:d9:51:1f:a1:38:51:53:09:b9:7e:34:10:6a:c9:
         47:e1:a0:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY0Q0MxMTAvBgNVBAUTKDdFMzlGRTIxRjlEMTU4NUNBRUY1OThGQjdENkEwNkVC
RkQzMTA2QzIwHhcNMjUxMjE5MDQ0NDE5WhcNMjUxMjI2MDQ0NDE5WjAYMRYwFAYD
VQQDDA02OTQ0ZDgyMy0zMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAziXqnbdCE94myvhO4wocthChYd/PfFNBsLPn5iS+r9Yg48IntCgaiQnSYDv0
OZb9+Ef7/8LDlUF1oNygZdBefggRL/i4CJvLG2aOSBDO0HmU3rTtZW3adJlQJNxi
1cMrLoXhLW8/qLFsRal1moiLyc6/g+KMN7Tyr0cMS3IHweEJ2QAeR6hPJFFJBk+m
VxGojBJ4X4KPqTA4Fw8yb/PDogTKl+6e1/Hdq6jj55lTmPvNeAjgUnmAmh6jxkD3
J33x5heZN3ca7Kx/xcL+ZW5TQxmNLO7a31dLYVGdD3SzXnjGYSnf/ZhNESCk7y2g
v+jL15JkoTDQ5k2UvbOLPdDdRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsI3Q5R
vwEAx/O8V6KpgTAIZ+rAMB8GA1UdIwQYMBaAFH45/iH50VhcrvWY+31qBuv9MQbC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjRDQy9ENTgxQzFCQzkx
NDgxMUVGODdFQURENTJDNEY5QUUwMi9mam4tSWZuUldGeXU5Wmo3ZldvRzZfMHhC
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Zqbi1JZm5SV0Z5dTlaajdmV29HNl8weEJzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjRDQy9ENTgxQzFCQzkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9mam4tSWZuUldG
eXU5Wmo3ZldvRzZfMHhCc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcmHOlhE/6zZt44124F607xzu3i3La5PjeRvWQf+d1SqXcS1mWXA+I
6Md5zMutUr01wgyGIQ9IXy33MKEnDzVxXd8R3QUN37A10LbiboWBPMj/4WYBbTnt
pPq42NqWtebHtT03kuBQrokCKZRSu74RXu2+o+yA7hwNIFnfqNjmTCqCLcxX/oJM
d5Jc/imRN1qtNRuY/LFSC8qZqLrugK4ID2rJPhHhHafTWXPSH9IlvxBugvr/tK13
+Wi9++Rvz+SufzI/eErU3ix2nCP8UlAr5Q5Xa6ea4PoIdm8XStArK/7WGoDkS9Vm
CE9TzfzR2VEfoThRUwm5fjQQaslH4aCB
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:11 2025 by rpki-client