This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
File:                     FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json)
Hash identifier:          +hUgp/0AmtxbixmjJk4tC+yfVQlCApC/bhxeH9Gr+yM=
Subject key identifier:   E7:36:36:C0:71:A0:09:64:AD:8E:6A:E5:08:5C:76:39:22:28:C8:71
Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
Certificate issuer:       /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
Manifest number:          01B3
Signing time:             Fri 19 Dec 2025 02:18:57 +0000
Manifest this update:     Fri 19 Dec 2025 02:18:56 +0000
Manifest next update:     Fri 26 Dec 2025 02:18:56 +0000
Files and hashes:         1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: +4V7eH7KzR0InrG8guAzPha2gPTG3sBwSbBlpy42t/g=)
                          2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: 33dDDxYoddtq/jzJQjTw8XcFhN7Z/rBiMlfoEOF+M10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
                          rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
        Validity
            Not Before: Dec 19 02:18:56 2025 GMT
            Not After : Dec 26 02:18:56 2025 GMT
        Subject: CN=6944b611-4caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:ab:a4:4c:37:b6:b2:c4:c9:2b:e8:72:bd:
                    12:54:ad:82:70:8a:bd:5d:00:22:6d:b9:e5:6f:d3:
                    61:41:b7:9e:79:a7:a7:26:a1:fc:83:c9:bd:1f:32:
                    ab:c2:00:d2:15:f6:4a:e5:e4:01:e9:38:78:b6:c2:
                    95:42:ad:9e:6e:90:e2:95:a5:79:8b:ad:19:12:90:
                    68:f7:08:b8:16:d4:f9:66:03:2f:48:e6:41:ed:3f:
                    8b:6a:06:28:0b:dd:3a:c7:59:df:d8:bb:76:81:62:
                    d3:12:85:21:22:31:fc:b9:d2:8b:1f:34:72:c2:31:
                    c5:34:bf:03:57:6e:f3:3b:30:34:10:6b:09:8a:de:
                    1e:15:49:00:10:aa:82:86:c2:ed:42:65:e5:d2:82:
                    c8:2a:cb:2d:9a:a5:31:71:ce:2a:11:be:63:1f:18:
                    d8:18:6d:49:e3:91:18:e8:76:5c:ca:f1:c2:17:c9:
                    bd:e0:60:3f:69:6d:69:02:f6:07:f7:fd:37:d1:79:
                    79:8b:67:ee:56:c5:52:27:36:ca:48:df:9c:86:64:
                    1c:58:df:2b:57:07:14:f6:b2:a7:1e:71:db:18:77:
                    e0:a1:ee:de:5b:e0:77:22:06:88:ea:4d:45:6e:ab:
                    a7:18:26:35:a3:d1:2f:0a:25:8b:3f:30:c2:74:a2:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:36:36:C0:71:A0:09:64:AD:8E:6A:E5:08:5C:76:39:22:28:C8:71
            X509v3 Authority Key Identifier:
                keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fe:33:ba:cd:b1:79:f3:b1:39:1e:60:5c:a4:45:be:27:7c:
         bf:c2:cf:ca:82:12:ac:97:2f:f9:09:e1:8e:2f:61:8f:7a:00:
         79:04:27:8c:62:99:88:28:8e:bb:d2:b7:bd:40:10:af:ce:12:
         a8:51:6c:80:50:0f:99:f8:f6:f7:18:43:27:2e:85:43:e9:51:
         49:2a:26:c5:3d:2e:5e:1c:5f:1a:d6:8f:c7:55:6e:42:a9:1a:
         a6:2e:90:30:af:b6:c3:96:e9:1b:12:52:d9:24:0d:1a:52:af:
         4a:cf:ab:37:ad:a7:c6:6c:a8:42:a6:55:67:0a:35:a6:c9:13:
         4e:f7:9c:2d:83:9f:37:b7:22:58:b1:c7:a3:41:79:0d:85:fb:
         a7:09:cb:36:9d:0a:45:c3:96:8e:8a:bc:f5:65:4d:4b:44:f0:
         c9:c3:36:ef:ce:85:8d:58:53:48:c4:c0:d4:d1:32:2d:9f:6b:
         65:98:9f:a3:52:6f:37:b6:46:d6:b5:85:29:77:9b:9d:f8:23:
         80:c7:1c:4e:73:33:29:60:44:57:16:67:dd:c1:27:fb:1a:a2:
         71:91:cb:dd:95:5e:52:b4:db:3a:ad:c8:94:88:38:70:5c:40:
         74:90:67:67:ec:6c:bd:11:28:56:4a:90:28:78:2c:29:ca:6d:
         76:a6:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:57 2025 by rpki-client