This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
File:                     fX8vgARwzrGTx-t4mDlZW3YnR08.mft (raw, json)
Hash identifier:          fUHgLRuemErb7QACROt6hR1CKQ6luu6jNZ1xaXxKmfk=
Subject key identifier:   C2:FE:94:D5:68:D9:96:CD:65:74:74:3B:6E:A8:7A:AE:A4:E0:49:F1
Authority key identifier: 7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F
Certificate issuer:       /CN=A914F700/serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F
Certificate serial:       0460
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
Manifest number:          045B
Signing time:             Mon 22 Dec 2025 23:13:44 +0000
Manifest this update:     Mon 22 Dec 2025 23:13:44 +0000
Manifest next update:     Mon 29 Dec 2025 23:13:44 +0000
Files and hashes:         1: fX8vgARwzrGTx-t4mDlZW3YnR08.crl (hash: s2LwD6HmnWzeQ7x9mJaT9HovhqdxcD551PYglTyLL38=)
                          2: 6D7B126C798111ECBBDBD359C4F9AE02.roa (hash: /YRqYU90YDZ0BB8h7DVq8vq1Y8LqXd8MHd/2GrUzXEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl
                          rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F700, serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F
        Validity
            Not Before: Dec 22 23:13:44 2025 GMT
            Not After : Dec 29 23:13:44 2025 GMT
        Subject: CN=6949d0a8-1992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2d:9b:fe:37:1c:7b:6f:02:c8:42:b6:16:ec:
                    38:e1:6b:86:d1:47:e2:8d:96:b4:6f:71:03:03:f9:
                    9f:6a:5f:77:40:0b:a9:20:2f:11:e6:9f:0f:24:1a:
                    63:a7:51:28:53:1c:34:7c:2e:17:88:3b:bb:86:7e:
                    6e:d7:85:58:1b:9e:97:3f:c2:15:05:b7:f2:b3:03:
                    47:dd:2c:be:07:67:a0:fb:ef:d7:b9:cc:a6:39:11:
                    32:73:de:48:c7:0e:1e:55:64:39:2a:93:db:de:26:
                    96:a9:df:d2:37:3a:ae:6c:f0:a7:76:f6:cd:29:33:
                    4b:ca:3f:b1:5d:78:3a:dc:78:dc:91:5b:02:7a:39:
                    99:db:e4:4f:95:f7:a2:be:51:3a:38:47:2d:f5:a2:
                    4b:46:76:da:b6:ae:16:3b:bc:86:a7:b9:31:e4:01:
                    9a:84:67:3d:b1:0b:21:86:18:91:14:9d:26:1b:ae:
                    80:af:69:46:1b:e4:b8:84:1b:12:f3:14:07:f1:90:
                    d6:25:5d:a6:49:a8:e3:7c:8b:e6:2a:5c:52:88:f4:
                    dd:3a:cb:99:a3:8e:a0:11:21:68:ef:e5:bc:7c:c6:
                    28:3e:1e:04:0a:bc:dd:25:e0:33:cf:68:c4:33:80:
                    bd:28:dc:cf:52:a3:60:c1:60:a2:6b:54:7e:7c:2a:
                    5f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FE:94:D5:68:D9:96:CD:65:74:74:3B:6E:A8:7A:AE:A4:E0:49:F1
            X509v3 Authority Key Identifier:
                keyid:7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f2:bd:98:91:46:b0:a0:1a:65:21:c3:d8:6a:2a:0e:a9:14:
         01:c4:49:ee:13:d9:44:41:5c:d1:07:22:59:1f:b0:64:0b:ce:
         89:29:ab:86:46:30:aa:8b:6b:64:f8:86:84:fd:79:95:75:af:
         f5:12:ed:dc:5d:a9:d4:5c:e4:d2:8f:6a:c6:ca:3f:18:52:e8:
         2d:81:28:5e:8a:f1:57:dd:b1:e4:77:65:5a:08:fb:cf:e5:4d:
         78:e2:ed:3b:24:f4:17:d4:0d:b1:a9:8e:99:a1:52:94:f3:37:
         3e:27:82:79:c1:37:7c:9c:fc:4c:65:a6:ed:41:07:e0:98:d5:
         81:0d:fb:03:e2:60:8d:b8:28:bb:a9:ee:6d:a6:32:eb:63:4c:
         fa:aa:a7:c5:67:65:b3:4b:fd:57:5a:ed:77:eb:9b:b9:32:04:
         51:7d:9a:bc:e4:db:29:b3:2a:da:23:6c:05:67:7a:02:27:88:
         c5:55:aa:0e:e3:c0:2e:44:b3:b0:3f:94:fd:cb:a9:ff:94:ff:
         78:97:8d:61:a5:bb:8b:52:57:ab:8b:53:ce:c9:05:72:b1:ce:
         ec:cf:5d:bd:92:51:10:19:fe:d6:0b:f6:62:0f:ed:09:36:5b:
         0f:a1:f8:9e:84:49:4b:f9:ab:f2:7a:06:49:ed:04:a7:de:39:
         d4:f0:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:52:17 2025 by rpki-client