This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
File:                     fuv673m_iD6_Bwd6m_QQ6jHv98o.mft (raw, json)
Hash identifier:          WSWVWblhcww6HHvqFPAdLCk4XVOuADxRaLKYwo/6ecg=
Subject key identifier:   36:FC:5A:9C:1F:AC:C7:80:B2:9C:83:39:D5:BA:B8:D9:22:BB:99:34
Authority key identifier: 7E:EB:FA:EF:79:BF:88:3E:BF:07:07:7A:9B:F4:10:EA:31:EF:F7:CA
Certificate issuer:       /CN=A91BA0DE/serialNumber=7EEBFAEF79BF883EBF07077A9BF410EA31EFF7CA
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
Manifest number:          01B5
Signing time:             Mon 29 Dec 2025 02:15:12 +0000
Manifest this update:     Mon 29 Dec 2025 02:15:12 +0000
Manifest next update:     Mon 05 Jan 2026 02:15:12 +0000
Files and hashes:         1: fuv673m_iD6_Bwd6m_QQ6jHv98o.crl (hash: 2+GX9YY0aEvEkIsMfrlA5kJF6m2yaG2/oRVHCYGE748=)
                          2: 049C5BF84ACB11EE9CB50538C4F9AE02.roa (hash: yL6ZRwTXhyUQOCbmgwdpXW/cxXexzW0IC+NCYSMtGY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 02:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0DE, serialNumber=7EEBFAEF79BF883EBF07077A9BF410EA31EFF7CA
        Validity
            Not Before: Dec 29 02:15:12 2025 GMT
            Not After : Jan  5 02:15:12 2026 GMT
        Subject: CN=6951e430-84b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:4a:a5:e6:29:22:77:c6:ca:90:9e:39:0f:
                    5f:e5:de:44:89:49:e2:20:67:44:f8:7a:2d:43:5f:
                    b5:17:59:61:de:58:16:4d:5d:9f:0a:bc:23:e3:02:
                    ed:e9:32:a1:d7:a1:c9:75:3b:1e:a9:c9:7a:d1:1e:
                    bd:a6:f7:bc:48:20:af:1e:9f:9e:d5:50:fb:c1:ee:
                    67:75:83:51:f5:67:f3:c2:9f:ab:a3:1b:b0:69:e8:
                    ae:cc:4a:28:60:d1:2b:a4:30:4b:2b:b5:93:67:83:
                    dc:df:e7:ca:32:5e:04:62:64:07:3a:84:3f:a4:ea:
                    ed:aa:53:6c:fb:3d:58:21:8a:3b:ff:c2:c5:06:aa:
                    6b:80:d4:ef:ef:29:dd:ac:7c:11:a9:ae:a0:02:9f:
                    d6:ad:7e:65:fd:0e:2b:d0:cb:3e:59:79:a5:5c:89:
                    fe:64:78:de:6c:67:8e:6a:3a:50:4d:88:2d:9c:db:
                    e0:89:98:6c:cc:25:a1:0a:1a:bb:09:87:21:01:e5:
                    41:48:8b:75:4d:f4:66:95:12:33:c6:1d:5c:8f:3e:
                    20:82:cb:e5:3d:31:49:e6:9a:48:6f:96:e5:bb:4a:
                    04:df:1b:2b:23:68:94:b8:cb:0f:60:7d:22:5a:48:
                    fa:b8:1c:53:e4:52:8b:2c:ca:fb:69:8f:f7:76:a0:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FC:5A:9C:1F:AC:C7:80:B2:9C:83:39:D5:BA:B8:D9:22:BB:99:34
            X509v3 Authority Key Identifier:
                keyid:7E:EB:FA:EF:79:BF:88:3E:BF:07:07:7A:9B:F4:10:EA:31:EF:F7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cd:80:49:e3:8b:15:f3:ef:2c:ce:fe:90:4a:d5:bf:28:b1:
         0d:d8:75:ee:e3:a2:b0:ec:0a:07:9d:d8:59:cc:78:6b:36:cc:
         29:c5:45:33:3a:5e:00:f4:05:f9:10:97:b4:e5:15:2d:3a:15:
         22:c0:a1:d3:80:5b:1b:e2:13:58:96:c4:75:e6:32:aa:d9:79:
         04:0d:02:2d:be:72:bb:b2:bd:6b:57:b3:aa:81:c9:e6:27:82:
         51:b6:11:3a:8e:32:d7:cc:ee:5e:44:98:0a:38:db:1b:f8:7f:
         a0:91:72:94:17:e3:a3:15:54:30:63:32:62:43:59:5b:7b:df:
         5b:d1:95:c1:dc:5a:6c:c1:89:b7:d0:0d:cb:ed:89:ef:dd:69:
         43:47:04:41:6d:fa:42:9c:fe:38:62:17:ff:87:e4:f5:4d:5f:
         0f:16:f1:c8:77:88:2f:6f:b7:ea:1d:95:a4:9f:26:eb:c9:7f:
         fd:3e:20:6d:55:7d:4c:a0:f8:c8:b0:c7:32:76:4f:78:0a:95:
         a0:99:e7:ec:f2:b3:cb:29:e3:98:88:28:23:c6:8b:23:23:63:
         98:01:bc:8d:47:01:8d:d4:88:55:61:bc:7b:bf:f7:a3:ad:7a:
         a2:1b:8b:b7:39:a9:ca:72:d3:15:fe:dd:72:38:72:81:aa:3f:
         f4:60:de:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:27:42 2025 by rpki-client