This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
File:                     FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json)
Hash identifier:          5QVz9afvfbHn2GwIgZtEx4boUfdD4BG4wz5tqlwXgHk=
Subject key identifier:   39:2D:7F:B2:1D:1B:A3:D0:49:7E:16:4D:6F:47:B8:B7:AE:7E:FC:C1
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Certificate issuer:       /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial:       35B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
Manifest number:          354A
Signing time:             Sat 20 Dec 2025 14:25:29 +0000
Manifest this update:     Sat 20 Dec 2025 14:25:28 +0000
Manifest next update:     Sat 27 Dec 2025 14:25:28 +0000
Files and hashes:         1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: OkTZBPcz6Uu+e5lMfJ5ioG+09BYfssrnKD0BRnEPt0g=)
                          2: CE0E8E88D63E11F09685A732A6248E41.roa (hash: +SrI+C6jBI8k+HemItHqiKp0Ap1j9FHZeHONesJdVWk=)
                          3: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: X7IQZ58omWK+gIrKdat0h/5c8or0W6ntGEo9z6naCo8=)
                          4: A4C78624D4CC11F083620C83C4F9AE02.roa (hash: RMhtKWFizFNhImSOlDSqnOlsBhuPDi9/8pnyDBHx2dI=)
                          5: 4214F694D4CF11F0822D643BC4F9AE02.roa (hash: xrPMTyxZfW4JtLoXbO3lxa5rJuoLn0DNA6PUd1wUBGc=)
                          6: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: IzD5q2GzmuV18q1dnBjmacTQl4qcdKe2UsljJfilqlM=)
                          7: 427996B2D4CF11F0BFE5643BC4F9AE02.roa (hash: 4VNLn+x8t23/JHL3ZOopb+YwUiMDsvRa6dDINvkfAVI=)
                          8: 1BFF9222D63F11F0B4EDAD32A6248E41.roa (hash: hXTHEmZmsLFD450rdp2qtQHAv48s6cbNoFsPBYhdZ8A=)
                          9: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: 1DqkZy0Sr7x/NV3lD1tkE7OMsC3mnmbQH1B1oR6rOnw=)
                          10: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: qTYeOx6pg1ogjikS/4HOIDZ4QqzqAPHZTv7DK6zo/c4=)
                          11: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: snvd+5sq9m/YOaEHMBb2pxjCYxt/qvZ6KU5dEMOAGDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
                          rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13749 (0x35b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
        Validity
            Not Before: Dec 20 14:25:28 2025 GMT
            Not After : Dec 27 14:25:28 2025 GMT
        Subject: CN=6946b1d8-3a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:15:a6:23:98:1f:08:b8:72:3f:3a:6e:23:
                    29:62:08:19:a7:0c:0b:dd:f4:75:3d:c5:0e:50:29:
                    d3:3f:65:08:b4:f3:f3:53:14:55:1f:30:57:2a:40:
                    e2:10:aa:fd:f9:e2:f5:b8:c7:58:3e:5f:eb:0b:a3:
                    dc:10:9d:3b:c2:fd:c2:3e:b6:cc:db:fb:53:79:c1:
                    c1:c1:a6:8f:5e:ad:da:23:47:9f:a8:62:87:c6:97:
                    c8:13:e7:00:63:a9:7b:7c:73:c1:c8:22:9b:e2:18:
                    68:b8:77:9a:c4:88:31:3d:b5:54:b4:e5:98:97:cd:
                    fc:4e:81:d3:03:48:96:d0:8d:df:63:66:db:c5:d0:
                    5b:d5:0f:1c:64:93:c5:12:b2:10:66:ff:a4:bb:47:
                    d3:99:52:ee:8e:7a:8e:ce:f5:4e:b5:41:b6:c6:d4:
                    f5:63:9c:9a:de:23:4f:d1:24:65:5f:96:e6:e0:6e:
                    9d:46:b1:fa:4f:8e:cf:fb:88:6d:af:22:99:53:c6:
                    2a:ed:0a:ee:1c:8c:24:1a:1b:83:61:cc:b5:f0:fb:
                    58:0b:7a:7e:3b:cb:34:1e:06:c5:88:61:dd:4f:e1:
                    cd:a0:55:1e:66:c4:d6:da:1d:d6:b2:a4:c9:d1:53:
                    8b:c7:03:6f:70:06:58:1c:75:4a:ce:42:eb:64:87:
                    05:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2D:7F:B2:1D:1B:A3:D0:49:7E:16:4D:6F:47:B8:B7:AE:7E:FC:C1
            X509v3 Authority Key Identifier:
                keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8d:58:b7:da:3d:18:21:9d:98:37:c7:85:80:dc:cf:39:15:
         56:94:1d:01:15:45:0e:11:f7:92:4f:3e:04:9f:c3:51:b7:fd:
         ff:d7:82:3f:a1:71:30:57:b8:5e:70:bb:60:bb:6b:da:58:97:
         62:02:3f:2a:b4:89:0e:46:34:0e:7b:20:0f:ed:4b:00:ef:b7:
         4a:57:de:f5:0b:ac:8a:11:42:26:57:78:07:e6:59:f4:18:8f:
         95:54:fb:76:2b:6a:c3:c9:6a:bf:4c:f0:5f:78:a7:44:32:d0:
         06:e3:1d:b7:00:87:00:40:ad:6d:98:15:d7:cb:36:7b:f7:b9:
         97:33:22:57:a5:99:ea:da:08:c4:1a:b2:18:20:b1:38:0a:08:
         7b:91:37:1a:51:d3:84:42:61:e7:3f:25:72:d9:fd:37:92:62:
         d3:5d:fe:2f:db:f6:ac:8f:d1:0d:29:60:14:8d:d2:f7:cb:65:
         8b:57:2a:b3:8b:dc:93:8d:ea:22:7a:74:93:52:18:9a:d4:ea:
         95:8e:8f:5e:1c:e7:89:07:95:cf:bd:20:f2:3e:53:49:be:65:
         43:c2:30:14:d4:4d:fd:27:5f:1d:b1:c1:c2:85:28:37:25:61:
         84:b6:69:7a:96:66:9f:7f:6a:b0:58:03:d8:7b:17:07:8d:39:
         4c:28:6e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:08:31 2025 by rpki-client