This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
File:                     FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json)
Hash identifier:          A860KYYBgms+/1pNyqv87JtyJL5OfogZxyDkygvQzUs=
Subject key identifier:   03:3A:7C:C9:A7:99:D2:D1:4F:11:1D:28:E5:07:23:FB:C1:4D:03:5E
Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
Certificate issuer:       /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
Manifest number:          8B
Signing time:             Fri 19 Dec 2025 05:39:34 +0000
Manifest this update:     Fri 19 Dec 2025 05:39:33 +0000
Manifest next update:     Fri 26 Dec 2025 05:39:33 +0000
Files and hashes:         1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: 191eie5qA2/znpu869pT1O/LAzd0xXWZEd9TkYBQBFQ=)
                          2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: VlGCrM3drX5CqJ0PsOFfcqqGKkwf8UbZCTA7SKqIpGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl
                          rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
        Validity
            Not Before: Dec 19 05:39:33 2025 GMT
            Not After : Dec 26 05:39:33 2025 GMT
        Subject: CN=6944e516-cfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:ea:03:57:b2:b5:11:d7:e5:a1:63:6c:b0:
                    8f:4b:61:b1:f1:8b:a2:47:28:96:ea:7c:49:38:c0:
                    3f:55:1d:5c:01:1e:75:d7:d4:78:94:1b:4a:79:fc:
                    95:3b:f0:53:e0:b1:27:60:d6:45:ab:d4:bc:55:a4:
                    c5:03:56:3c:30:bb:a5:eb:fb:6d:f6:90:c0:d6:c7:
                    f7:61:a7:20:74:4f:98:82:cf:9f:25:a3:74:1b:56:
                    f6:84:35:c4:ec:30:70:e3:4c:1c:88:7e:fd:4c:5a:
                    d8:7d:3c:51:ea:8f:23:41:bb:e5:1a:81:c6:76:01:
                    90:94:fa:50:a7:43:75:4d:52:37:77:84:ee:55:a3:
                    5b:5f:97:d4:9c:06:8d:23:dc:41:d2:c3:52:b9:94:
                    83:cc:0f:63:ca:ad:21:72:d8:0b:1e:20:80:ee:15:
                    52:76:a9:88:b1:7d:b0:10:28:af:40:d9:dc:ba:3b:
                    6d:5a:4e:6c:24:03:d4:10:94:5a:88:a8:e9:e9:25:
                    e5:53:fb:d2:28:74:03:70:bf:f2:01:70:36:cd:c2:
                    a0:b4:f4:70:6e:85:81:e4:70:09:43:06:87:30:96:
                    b0:10:cb:2e:a0:e0:2f:d9:d5:df:81:88:bb:07:68:
                    b5:9f:ea:bd:06:1a:37:f4:31:a5:64:49:d3:5e:3f:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3A:7C:C9:A7:99:D2:D1:4F:11:1D:28:E5:07:23:FB:C1:4D:03:5E
            X509v3 Authority Key Identifier:
                keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:14:63:1c:63:6a:95:48:d4:4e:23:95:d9:32:7d:e9:23:b6:
         76:20:79:49:6b:83:19:75:b6:c8:26:21:51:ab:80:ba:90:6b:
         c8:4b:c4:fa:c7:a1:c4:e7:20:40:e6:0e:09:39:b8:46:3b:ca:
         12:f9:00:30:fb:4c:3c:55:95:4c:24:2f:52:79:13:6c:b5:30:
         60:d0:3d:59:23:de:e1:29:16:bf:65:c4:7b:79:9c:a5:d4:0e:
         99:73:79:a1:a9:4d:a7:52:60:58:b9:1a:bb:2d:4f:38:9e:8f:
         79:df:c8:bb:24:22:13:57:15:24:ea:aa:7c:09:4c:39:ab:98:
         f6:1c:d9:0b:66:88:7b:43:43:b9:e1:c0:9f:fe:75:ef:4a:7c:
         6a:e6:72:23:43:26:1d:e0:bc:8d:a2:c8:02:80:ac:ad:e6:3e:
         0d:0d:5f:2e:92:31:70:ad:89:2e:ff:14:ea:3c:53:9b:4a:ba:
         24:ce:66:96:0c:59:ee:a2:8e:c8:8c:ea:5f:8d:ce:66:11:57:
         2a:c9:36:e4:74:8c:ea:f9:b8:2f:89:e9:b9:41:9b:54:de:6c:
         e0:ee:90:1f:12:2a:46:eb:e2:c5:ca:f9:58:16:73:06:ac:ca:
         b4:f0:0c:44:81:4c:08:a6:44:04:78:97:38:3b:91:d9:c4:9c:
         2b:49:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:28:09 2025 by rpki-client