This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.mft
File:                     fyeniNwMEgQXAseWxt1aF0QB80c.mft (raw, json)
Hash identifier:          xjY9jRBzvymrKJb6uc9BfXpxV0vYGmdq4wDSjDGtcUw=
Subject key identifier:   36:7A:57:01:BC:56:70:0B:25:BA:02:E5:A7:C2:84:AD:D8:35:F7:9B
Authority key identifier: 7F:27:A7:88:DC:0C:12:04:17:02:C7:96:C6:DD:5A:17:44:01:F3:47
Certificate issuer:       /CN=A9119850/serialNumber=7F27A788DC0C12041702C796C6DD5A174401F347
Certificate serial:       02F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.mft
Manifest number:          02F1
Signing time:             Tue 23 Dec 2025 00:14:31 +0000
Manifest this update:     Tue 23 Dec 2025 00:14:31 +0000
Manifest next update:     Tue 30 Dec 2025 00:14:31 +0000
Files and hashes:         1: fyeniNwMEgQXAseWxt1aF0QB80c.crl (hash: x6EhGHQonB96ALxkiDyKN8H+NaJiC1wa4xuHhhvFk48=)
                          2: A12944DA072F11ED98F82715C4F9AE02.roa (hash: 7jtdUUMNkZQV5fAIk4bHsRHoQs21J7uJF789PXDFAsc=)
                          3: A0950680072F11ED98F82715C4F9AE02.roa (hash: x1SOdfvNufjSnltcfbiZ2ccQyYa5GrnXcYisGZcfBe4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.crl
                          rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119850, serialNumber=7F27A788DC0C12041702C796C6DD5A174401F347
        Validity
            Not Before: Dec 23 00:14:31 2025 GMT
            Not After : Dec 30 00:14:31 2025 GMT
        Subject: CN=6949dee7-5091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:36:e1:6c:e7:ed:81:66:b5:30:a0:00:01:
                    29:b7:c0:3e:2b:b6:93:a8:be:d2:06:27:b8:cd:8f:
                    a9:27:46:4b:4d:59:42:d3:2b:ae:db:18:6b:bd:ac:
                    5c:3f:d2:5a:33:47:9e:f7:14:f5:ff:e6:e4:d0:a5:
                    36:ff:f6:e8:f6:01:cd:79:8b:c5:71:08:90:05:ff:
                    cc:90:c3:38:a1:63:84:12:38:0f:33:9d:60:48:1c:
                    f4:a9:01:90:92:73:23:27:19:38:23:22:fa:00:88:
                    90:28:b8:30:70:55:9e:86:c5:28:fb:1d:40:c0:39:
                    d0:0b:73:0d:e5:9b:31:ae:0e:81:0a:37:b8:9a:70:
                    1d:fc:e5:b8:be:d5:65:c3:34:6b:2c:a5:90:84:2b:
                    8c:09:b2:0b:68:46:1d:ea:ea:bb:f8:a3:3a:eb:c2:
                    1e:1b:1f:9b:14:8d:8b:d4:31:98:9e:ec:d1:c2:b5:
                    87:d3:23:52:3a:8f:3d:14:b0:23:e8:ae:95:1b:2c:
                    84:8f:32:02:e5:3f:56:fc:3b:6f:55:9b:c0:6b:98:
                    92:bc:ef:cb:35:9f:89:61:7f:f7:4c:ae:c5:d7:02:
                    b7:8c:fb:d0:61:ad:e8:98:b8:66:07:df:13:bd:0f:
                    4f:3b:f9:7d:0b:4b:07:f0:dd:96:73:0f:c8:96:6a:
                    a0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7A:57:01:BC:56:70:0B:25:BA:02:E5:A7:C2:84:AD:D8:35:F7:9B
            X509v3 Authority Key Identifier:
                keyid:7F:27:A7:88:DC:0C:12:04:17:02:C7:96:C6:DD:5A:17:44:01:F3:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:20:bc:cc:d6:d5:5b:32:4b:bb:6d:6f:02:f2:75:53:de:b6:
         e5:9b:00:e6:a7:a0:bc:92:4c:db:06:11:51:fe:5a:17:5a:1a:
         0d:94:27:2f:0b:a9:0e:9d:99:1e:22:09:48:96:03:cc:1b:ed:
         b5:01:df:f8:a4:3d:d8:b2:03:0f:e2:4e:7e:35:0f:15:84:e5:
         4f:0c:1d:a6:e7:12:1a:ec:f9:1e:bd:d0:bc:69:6d:3c:c3:e8:
         86:b1:0b:99:3c:dd:9f:e0:53:f1:e4:df:31:fd:a1:b0:2f:50:
         f0:59:23:1a:cd:9b:26:98:6e:a3:a3:d0:fa:58:f1:03:84:66:
         cc:f1:8d:e3:4e:f0:cc:95:76:b1:02:58:b0:84:32:9c:cd:54:
         ad:88:be:e8:01:84:9d:0a:be:ea:86:c0:29:cb:04:98:6e:fe:
         b6:4c:f8:d3:ec:6d:d4:95:c0:f3:01:23:ac:32:51:8d:79:21:
         95:be:4b:ef:b2:39:a7:98:0f:27:8f:21:df:53:e5:59:94:37:
         8d:37:2c:11:df:02:b7:30:4c:32:08:d6:04:9d:40:95:90:bc:
         03:49:b3:0c:5a:d1:f7:a3:97:1e:65:93:0c:a3:6f:b4:df:ab:
         44:70:ee:74:d3:b2:55:53:45:d0:af:c0:30:80:81:63:f1:00:
         7a:59:c3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:26:11 2025 by rpki-client