This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
File:                     F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json)
Hash identifier:          QThmJTdOxW5gFyndv+pnCzGlcMKFoD6JW3qjZh2sNGk=
Subject key identifier:   A9:BA:AB:9F:FA:62:8D:E8:1D:F6:2D:44:90:23:D3:A8:9E:B0:52:7A
Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F
Certificate issuer:       /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
Certificate serial:       0FA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
Manifest number:          0F9D
Signing time:             Thu 18 Dec 2025 17:21:05 +0000
Manifest this update:     Thu 18 Dec 2025 17:21:05 +0000
Manifest next update:     Thu 25 Dec 2025 17:21:05 +0000
Files and hashes:         1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: 34GLUojYXysr87Elo9+p11tLM1rXP21gi0Y5jRsrxF4=)
                          2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: qze9TLSC/LlQUaDdTzlKDoE3Bw7Tcrh+S+c1zck+d7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl
                          rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4006 (0xfa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
        Validity
            Not Before: Dec 18 17:21:05 2025 GMT
            Not After : Dec 25 17:21:05 2025 GMT
        Subject: CN=69443801-0cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:4b:b0:69:d2:99:a2:44:19:73:9e:c0:35:
                    7a:2f:ab:8b:03:c7:17:48:96:d6:17:38:a5:fa:bd:
                    38:31:80:03:b9:7d:36:5c:6d:2f:76:d3:59:56:36:
                    42:fb:6f:e8:63:aa:2e:09:89:7e:01:1c:91:7b:a7:
                    26:ff:7c:1e:67:07:b6:d9:c2:10:bd:eb:a2:68:b3:
                    64:b4:d1:7e:61:3f:0a:8e:35:fb:56:46:44:67:ad:
                    56:7b:27:b1:f6:aa:64:8d:16:1c:ce:f9:19:24:8a:
                    e4:9f:87:37:06:c5:16:7e:cc:21:d5:df:9d:f5:d7:
                    f9:2e:f2:4f:2f:b6:aa:17:3c:9d:d1:38:69:57:ba:
                    bf:a3:a4:fb:6b:21:30:5b:61:ee:2c:9f:86:af:24:
                    df:28:4e:2f:39:c6:8b:a3:4f:bd:f5:3c:4f:20:db:
                    7c:e2:38:07:4e:b2:ff:75:d9:44:2c:46:48:5b:0a:
                    d1:8b:5a:48:2b:c8:e8:a8:54:af:3d:4e:14:54:6f:
                    da:fc:34:c2:46:f3:db:6b:e8:2e:6d:95:50:c5:da:
                    42:94:d0:2b:58:d2:26:b4:a8:45:b0:ab:26:57:55:
                    b6:a9:65:29:92:1b:e2:2d:e1:e0:ad:0d:24:2c:20:
                    13:4e:ef:b0:03:74:24:00:26:61:1a:dd:16:16:9a:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BA:AB:9F:FA:62:8D:E8:1D:F6:2D:44:90:23:D3:A8:9E:B0:52:7A
            X509v3 Authority Key Identifier:
                keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6c:ce:1a:93:d5:c0:e8:58:00:fd:ed:d6:59:37:5d:c9:38:
         d4:71:6a:00:e4:2a:eb:db:30:4f:81:4f:4b:b1:71:b5:49:fc:
         05:f1:76:6c:81:c5:6b:e7:1c:cf:06:c0:b6:bd:a4:4f:cf:f5:
         f7:db:c6:5c:ae:57:55:90:8d:12:5e:d9:07:af:a1:14:63:ad:
         67:75:89:4f:09:ba:eb:d1:1e:d6:76:cd:ce:c5:b4:a2:f9:27:
         c4:f9:cb:a8:3f:b6:7a:5b:13:17:f0:e1:20:ad:34:5f:d9:57:
         c9:b3:94:1f:19:8f:e8:77:e0:a0:24:a2:17:52:8a:72:fa:b8:
         32:01:97:9f:69:c5:8b:52:8b:ba:46:5f:d1:4e:8a:54:e3:8c:
         8d:66:a4:3a:bd:32:78:89:f7:85:e3:c4:91:22:73:c8:ff:6d:
         02:3a:0b:63:97:87:d4:56:de:9f:c4:14:2c:ab:aa:2d:ad:99:
         0a:c1:ca:dd:d1:1c:7e:37:9a:a4:22:71:df:9e:b3:c2:3a:66:
         d5:6c:24:63:48:04:56:7b:91:3d:b5:62:cc:a7:25:dc:b1:26:
         82:be:aa:f3:19:76:ae:27:87:55:0b:3f:58:ed:6c:4a:41:c2:
         8d:f9:c3:d8:12:76:17:4e:d4:0c:bd:c8:d6:57:92:f5:fc:35:
         ca:2c:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:51 2025 by rpki-client