This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
File:                     ficJop5GIOVCf3NfN8A0c-NrWXo.mft (raw, json)
Hash identifier:          h0BSSTih/3B8A/nF5VZLFLJcfLVRygucIL2Pc68NqcI=
Subject key identifier:   FA:2A:8C:92:FA:F4:A4:F3:AF:3A:61:4E:8C:9F:3B:84:B7:6B:6E:B0
Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A
Certificate issuer:       /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
Certificate serial:       0974
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
Manifest number:          096B
Signing time:             Thu 18 Dec 2025 19:40:51 +0000
Manifest this update:     Thu 18 Dec 2025 19:40:50 +0000
Manifest next update:     Thu 25 Dec 2025 19:40:50 +0000
Files and hashes:         1: ficJop5GIOVCf3NfN8A0c-NrWXo.crl (hash: lkV/fUPNQmOGihYQyXX/YaKo8pN5UuOmAKC4wHE8DQQ=)
                          2: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (hash: EY5IebdCRceAV1N2Sno2htu2PUjjGh0mWkvzE1zUnnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl
                          rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2420 (0x974)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD0A4, serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
        Validity
            Not Before: Dec 18 19:40:50 2025 GMT
            Not After : Dec 25 19:40:50 2025 GMT
        Subject: CN=694458c3-e087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:a5:80:b8:90:9d:03:53:a9:b4:4d:24:c7:
                    05:a8:82:de:a4:f8:bb:d7:9f:b6:ff:d0:9a:f8:01:
                    82:5a:9c:41:7f:ba:6f:15:19:41:54:53:30:bb:68:
                    fe:ee:fc:a2:37:2e:ae:50:2a:7f:3c:97:9e:32:90:
                    e0:c0:16:aa:73:67:db:f4:28:86:45:7f:d0:0e:d2:
                    99:d5:72:5e:7a:37:16:0a:88:26:5c:10:b7:b2:74:
                    94:19:37:9b:65:42:39:08:c0:c7:61:9b:ee:96:9f:
                    98:fa:cd:b1:9b:aa:96:99:b7:d6:0d:2b:c4:f4:a4:
                    58:1c:ae:a7:25:36:41:53:af:50:b1:51:36:96:f9:
                    5f:7f:e2:18:ce:eb:b1:00:9b:9c:25:35:31:38:7a:
                    4b:2e:66:f6:27:d4:ee:45:b2:8f:a7:85:3a:f0:90:
                    80:b7:e1:31:f7:5e:36:09:51:0f:58:11:58:33:c8:
                    a0:5f:ea:15:47:aa:58:cd:2e:83:13:c2:42:d9:e3:
                    04:af:29:6c:0f:1b:78:26:2f:c3:a1:3a:ec:51:9f:
                    09:8f:73:99:61:b7:c6:41:70:78:9d:34:26:c5:38:
                    c0:de:1e:d2:71:b5:82:7e:a5:34:a8:97:16:74:be:
                    4b:72:35:8f:90:84:43:a3:aa:d4:5d:36:a5:83:52:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2A:8C:92:FA:F4:A4:F3:AF:3A:61:4E:8C:9F:3B:84:B7:6B:6E:B0
            X509v3 Authority Key Identifier:
                keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d7:ff:c2:2f:31:c1:b9:27:ef:2a:54:9d:c7:79:eb:ff:76:
         d6:86:f4:a9:6a:5c:0f:0b:26:15:da:89:c1:4b:ad:46:65:cf:
         ec:84:12:52:75:4d:9c:2e:c5:f2:25:07:b6:f2:3e:4a:74:88:
         55:f3:49:ff:17:d6:fd:fd:0b:61:8b:5d:5a:50:6b:35:6d:ae:
         d1:00:f4:cf:66:37:3c:47:51:1a:ba:26:fe:31:aa:2d:6f:8b:
         e4:c0:bb:8b:6c:55:40:ff:a8:c9:d4:47:e9:00:10:aa:57:4c:
         5f:2c:9a:c9:7e:75:f7:46:4b:54:44:da:8b:2a:70:78:bd:0c:
         d6:9b:06:3e:73:b4:c6:2b:0d:26:79:ec:3b:e4:6c:a6:8d:da:
         7c:6c:e5:c4:d9:8e:e5:41:e3:6f:47:43:20:ef:c9:e1:53:e1:
         31:bf:d7:c1:b0:74:78:67:57:19:86:85:22:c0:f0:63:0e:c1:
         5f:52:3f:65:9e:09:05:cc:64:c6:62:b1:ac:41:90:1c:23:21:
         3a:5f:72:88:80:3a:1b:e0:45:32:78:ba:fc:13:dd:c9:33:f5:
         83:13:36:86:fc:16:45:6b:df:5d:7e:ac:5a:8f:8d:39:12:26:
         c1:5f:a6:41:63:21:5e:be:00:61:6d:7f:af:a3:43:59:92:ff:
         eb:8a:d2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:10 2025 by rpki-client