This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
File:                     FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json)
Hash identifier:          E08+I/L+XtBDmfi5X+rC1+ItQHNzO+2OKUjyNPM08Gw=
Subject key identifier:   9D:EB:04:98:3A:37:A0:98:25:B6:01:34:D7:77:E7:45:64:37:93:FC
Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E
Certificate issuer:       /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
Manifest number:          016B
Signing time:             Wed 31 Dec 2025 03:04:29 +0000
Manifest this update:     Wed 31 Dec 2025 03:04:29 +0000
Manifest next update:     Wed 07 Jan 2026 03:04:29 +0000
Files and hashes:         1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: lS2hSSuCC4B+8XxQ8PAccZkVZwD7ORdXlpt2/H14cF4=)
                          2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: dUufcGrEf1g89p6hQjifaNkQf1XSBUMLG147+uIrEko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 03:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
        Validity
            Not Before: Dec 31 03:04:29 2025 GMT
            Not After : Jan  7 03:04:29 2026 GMT
        Subject: CN=695492bd-6b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:5e:2f:36:d3:63:f2:ce:33:75:23:e0:0a:
                    aa:b8:2a:8b:dc:a0:7f:b1:e2:9d:e2:94:71:26:36:
                    a7:18:1b:eb:6b:15:4f:3d:f3:0f:4f:37:32:49:1e:
                    78:f5:2c:92:33:3c:f4:55:49:25:22:f2:5e:2a:cb:
                    4e:1e:d2:e9:35:71:64:d8:5a:57:f7:be:49:49:72:
                    04:55:5d:2d:98:db:d7:02:98:50:59:ca:fc:c9:a8:
                    fa:63:64:80:36:3c:03:26:97:19:5c:24:75:3b:f6:
                    17:bb:42:20:85:8c:09:84:cd:c2:d2:d0:07:3a:2e:
                    63:5f:71:97:d2:0b:27:d2:b5:84:60:5c:5d:a1:63:
                    6d:18:33:35:e6:ca:cf:af:c6:8e:0e:4c:68:94:aa:
                    5d:a4:f2:54:c4:f7:34:50:a3:e4:52:59:97:85:e6:
                    e6:f2:cd:c0:d6:6e:d1:22:6c:7e:5e:d3:cf:ca:ad:
                    3b:18:fd:bb:f8:57:c2:9c:1a:e5:40:ff:c3:ea:f6:
                    9e:5c:3a:30:14:20:7a:45:db:69:3c:eb:10:2e:ed:
                    47:34:dd:72:32:53:4b:0b:bb:f7:76:ba:c4:1a:84:
                    aa:25:8d:f2:9d:d0:49:e7:91:73:79:aa:f3:ad:5f:
                    4a:5e:6e:4c:20:1c:1b:ad:3b:e6:6a:4c:4e:ed:32:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EB:04:98:3A:37:A0:98:25:B6:01:34:D7:77:E7:45:64:37:93:FC
            X509v3 Authority Key Identifier:
                keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9d:a5:af:b9:5d:92:86:dc:c4:af:55:ef:cc:3d:40:59:da:
         67:ea:0d:2e:c9:2e:da:aa:51:d5:7d:6d:eb:4f:7b:48:2f:b8:
         40:ef:1b:d8:ca:1f:21:7c:02:2d:6e:6c:d0:56:f2:80:d6:3a:
         6a:5c:25:83:61:5a:ac:b9:f6:55:12:fd:11:54:17:7d:0d:54:
         0a:fa:33:dd:35:61:a8:4b:cf:c3:ef:ff:df:b7:b0:b5:ab:75:
         8d:82:25:87:ec:e8:a4:3c:9e:30:a9:04:d6:de:e6:81:6c:c8:
         5f:e1:d4:1a:10:13:b2:ad:d3:01:96:35:4e:94:2f:6d:bd:34:
         40:74:1a:d5:c1:6b:ca:78:1a:d8:9f:37:55:6d:4b:a4:ee:a1:
         8f:18:2d:8d:be:79:f4:90:7f:38:17:1a:d3:bd:5f:be:75:0f:
         70:ec:b3:f6:26:29:06:84:a2:17:48:7c:39:e8:54:54:44:d5:
         48:fb:5c:51:2f:d5:10:d2:c0:74:8c:7b:39:0b:09:17:7f:26:
         14:d7:68:c6:3c:b6:6e:17:e0:02:a8:4a:78:7e:94:4c:37:b5:
         43:7e:5c:0a:8d:8a:18:7e:49:25:66:00:bd:12:0e:35:d3:36:
         80:6f:47:a6:bf:4f:65:b8:2f:b0:f8:4c:77:8c:52:95:45:7d:
         52:f7:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 08:03:12 2025 by rpki-client