This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft
File:                     FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json)
Hash identifier:          nwqScfY5dK8mmLDBbaDGmb3+Z89bqI0blbvnAUC3p88=
Subject key identifier:   3E:38:51:FA:AE:5A:8D:30:0F:92:00:26:0F:20:16:F8:C7:11:E2:17
Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3
Certificate issuer:       /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3
Certificate serial:       0469
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft
Manifest number:          045B
Signing time:             Mon 22 Dec 2025 23:17:14 +0000
Manifest this update:     Mon 22 Dec 2025 23:17:14 +0000
Manifest next update:     Mon 29 Dec 2025 23:17:14 +0000
Files and hashes:         1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: qPNgHArieNPn5nbcrDf48Uw2onjdKpIE+lhQVXOODv0=)
                          2: 2D81FF3680BB11EC8FD7663DC4F9AE02.roa (hash: 93hMZoZD1IeR9WgZB4O3EInu2uvTAMcqxAyD5/FgSlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl
                          rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE4A1, serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3
        Validity
            Not Before: Dec 22 23:17:14 2025 GMT
            Not After : Dec 29 23:17:14 2025 GMT
        Subject: CN=6949d17a-a510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:f9:50:bd:d7:3d:f0:bd:44:a2:7f:4b:3b:
                    3d:70:16:ed:a1:9b:a5:ec:37:08:44:70:70:7c:f0:
                    bb:d5:26:56:89:7f:ef:80:da:4e:ae:30:99:98:01:
                    80:3f:fb:b0:d2:bc:01:fd:42:ef:54:f8:5d:4a:46:
                    d1:eb:38:0e:52:9f:d9:db:63:7d:46:0f:6c:ea:6d:
                    6b:67:3c:f7:3e:59:38:51:42:0d:25:22:6b:ad:40:
                    62:4b:76:c9:dd:07:27:cf:cb:15:b0:b2:e3:d5:e0:
                    ca:84:fa:ec:8b:56:c2:76:8a:b0:6a:6e:8b:30:d3:
                    65:91:09:ee:03:17:e3:7c:d5:58:7f:01:c7:fe:55:
                    c1:bd:ef:ed:86:34:2c:7c:03:6e:57:7c:c9:bd:25:
                    71:ed:d2:5f:47:1b:83:b6:65:0d:6b:fc:7f:95:b0:
                    34:f4:f7:01:c4:ea:ae:c3:b0:3d:38:76:a7:03:04:
                    ad:66:fa:46:59:29:bd:e7:6f:20:d5:72:11:7f:75:
                    1e:08:bb:6a:11:08:f8:89:cd:7d:9c:95:21:33:fa:
                    9b:15:25:7e:6e:8b:ba:88:9f:2b:85:17:f4:94:32:
                    d0:0f:43:05:47:44:af:15:e3:2c:2b:89:ba:40:b7:
                    a3:46:2c:ec:17:91:92:52:aa:02:ec:b3:5c:5c:46:
                    d4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:38:51:FA:AE:5A:8D:30:0F:92:00:26:0F:20:16:F8:C7:11:E2:17
            X509v3 Authority Key Identifier:
                keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:76:fa:29:9f:aa:55:7b:4d:19:40:35:08:d1:23:b7:2a:75:
         4e:21:de:76:4f:7f:07:69:31:9e:c9:33:3f:d5:1a:b6:fa:47:
         6e:dc:74:8b:49:7c:75:cb:d8:a7:3e:85:bd:63:bf:b4:37:01:
         fd:a4:1e:1c:df:5c:a3:92:72:82:6c:a0:a9:79:3f:ad:ed:b1:
         44:be:26:35:ed:10:0c:4d:46:5a:ff:d5:e3:e6:3f:d8:f6:41:
         14:76:5e:46:e6:0f:b6:07:d7:fc:16:eb:cb:ae:f6:9e:53:6a:
         c7:02:6a:4f:a9:df:31:e6:dc:cd:ae:e3:dc:8f:46:7f:81:37:
         a9:f7:ca:3d:5b:03:2d:23:ba:40:a5:cf:c9:da:d3:0b:12:52:
         8e:e8:1b:53:10:d6:30:48:b8:24:06:c1:8b:6d:b8:11:7f:57:
         da:13:70:fc:65:a7:75:fb:77:47:c9:cd:06:86:c3:77:33:bf:
         83:1d:b0:64:9d:68:df:6c:49:fc:ca:22:1c:13:68:7d:ee:2e:
         3a:5b:3f:cb:93:a4:a3:01:f7:c2:22:96:3d:d1:f4:da:38:6e:
         0e:dc:1d:00:5a:78:9f:49:68:2c:24:ea:c5:80:4c:f3:9b:7e:
         c5:69:41:c2:35:7f:32:74:4b:2b:87:c2:41:61:fd:bd:43:38:
         b0:9c:52:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:42:23 2025 by rpki-client