This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
File:                     FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json)
Hash identifier:          Ask/nhsL211h+gFGTVGEhqKkUBubYStBAGIyAur5v1k=
Subject key identifier:   7C:78:C7:CF:17:97:C0:B0:CA:75:C3:A5:A8:BD:E6:34:FC:4C:65:49
Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
Certificate issuer:       /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
Certificate serial:       04BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
Manifest number:          048E
Signing time:             Sat 20 Dec 2025 23:27:24 +0000
Manifest this update:     Sat 20 Dec 2025 23:27:24 +0000
Manifest next update:     Sat 27 Dec 2025 23:27:24 +0000
Files and hashes:         1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: 391FdLGc3dNJ8rfWf5YEh5ooYcOuO3j4C18MITpRL2w=)
                          2: F29967B22B0011F0B0319E61C4F9AE02.roa (hash: AWipWCwfBJg9FTHPHDUNW5DfQTImAx6KbbjHRDTBNc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl
                          rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:27:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
        Validity
            Not Before: Dec 20 23:27:24 2025 GMT
            Not After : Dec 27 23:27:24 2025 GMT
        Subject: CN=694730dc-874b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:6a:fd:05:4c:f5:1e:5e:eb:00:cd:86:e8:
                    06:3c:dd:cf:d2:a0:b4:89:47:30:0f:ca:11:3d:22:
                    4d:7c:8c:3b:e2:d0:77:36:1c:ff:8b:fd:ff:da:23:
                    ed:33:04:1d:ba:6a:d2:6c:47:90:f1:2d:6f:72:d5:
                    2e:32:d6:20:5b:34:31:aa:c4:a2:b8:5d:df:d5:fe:
                    30:f5:ad:db:ee:4a:59:f9:76:ec:69:28:66:c2:c7:
                    c3:30:06:6c:75:25:26:7d:58:67:95:8d:ac:6e:15:
                    06:1a:68:9b:a7:11:96:e3:12:b1:a1:a6:9a:cc:4d:
                    5b:cf:e6:ee:06:4f:c6:81:b8:1c:12:4f:74:0e:29:
                    00:5d:5f:e6:9d:bc:a8:78:43:f7:b0:6b:02:a9:e7:
                    d6:75:cd:5a:b0:38:88:1f:d3:c8:e6:81:ea:03:31:
                    19:ef:4f:9e:fc:da:d1:23:33:b7:b9:68:87:ff:ab:
                    00:e4:f8:d1:d5:e4:48:70:aa:0f:17:b9:b0:05:ee:
                    56:d2:d8:68:89:9e:d6:82:7c:74:9e:97:08:f6:8f:
                    44:c4:aa:e9:73:f5:fb:93:6b:45:e9:34:d3:6e:b0:
                    c0:70:1e:11:f0:f4:12:b6:38:c2:e2:3d:00:4f:06:
                    29:b8:dd:ea:c3:f3:52:a0:c6:62:32:7d:04:09:d4:
                    8d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:78:C7:CF:17:97:C0:B0:CA:75:C3:A5:A8:BD:E6:34:FC:4C:65:49
            X509v3 Authority Key Identifier:
                keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:5c:eb:7d:da:82:16:a8:19:b5:2b:e6:c0:5c:51:d0:0d:56:
         84:8c:59:62:e8:5d:98:03:4e:e8:8d:e2:7f:c1:24:54:2a:dc:
         0a:a8:51:64:85:08:40:fb:da:3d:a5:ef:9b:6c:b9:7f:42:28:
         15:11:35:c8:be:f2:8f:c4:dc:b7:72:69:25:60:03:02:24:1d:
         32:aa:18:18:f3:56:78:06:a0:dc:e4:56:ca:49:ce:34:26:bb:
         d3:82:54:22:b1:ea:06:0d:f4:7c:a4:f2:6f:55:3d:63:de:b4:
         89:6d:36:f1:35:27:0e:8e:14:ec:3d:a2:31:e1:72:f5:e3:e0:
         2c:55:03:af:23:36:8b:40:f6:42:54:0e:bd:26:fd:80:42:4f:
         bf:24:b9:55:9b:fb:20:fe:2e:ad:e9:3a:c9:58:76:2f:52:2b:
         6c:75:61:5f:d4:fa:68:25:5d:31:8a:bf:48:cc:df:8f:1a:c4:
         43:75:1d:e2:25:ca:47:a9:28:71:9c:cd:57:69:f8:d7:df:55:
         24:04:3d:7f:c2:97:ee:4b:80:cc:1e:0f:2f:15:7c:2c:0a:c6:
         8f:b9:6c:27:4b:4f:f8:fd:b3:70:75:2a:60:9d:3b:16:53:17:
         4e:d2:54:3d:4b:cd:7d:70:1c:aa:5f:41:b8:e6:78:32:ce:83:
         35:a0:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:43:02 2025 by rpki-client