This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
File:                     FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json)
Hash identifier:          sRsGzVHyLAIzoGSmUuQhSGOqfZbLuFcUwWryZoj3kBs=
Subject key identifier:   46:33:32:F1:4F:7C:F0:B7:97:1F:66:A3:64:5F:65:5D:20:09:2B:AA
Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03
Certificate issuer:       /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03
Certificate serial:       08EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
Manifest number:          1483
Signing time:             Mon 22 Dec 2025 18:54:16 +0000
Manifest this update:     Mon 22 Dec 2025 18:54:16 +0000
Manifest next update:     Mon 29 Dec 2025 18:54:16 +0000
Files and hashes:         1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: u0lHPQroo3zN3ptQEdRSXufdwezEsVoKTBaZQF4p6rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl
                          rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286 (0x8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415AA, serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03
        Validity
            Not Before: Dec 22 18:54:16 2025 GMT
            Not After : Dec 29 18:54:16 2025 GMT
        Subject: CN=694993d8-f705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:af:2d:b7:af:eb:2b:b3:5b:6c:a6:54:7a:
                    c1:53:f5:91:20:fe:b6:a2:8b:ce:d9:18:30:e5:53:
                    61:51:40:ef:fd:83:fe:97:1e:d8:86:f3:9f:84:3e:
                    8a:55:b3:ff:5d:d9:0f:45:a5:0b:98:55:50:d9:d8:
                    e4:d0:bd:c1:a5:16:f6:34:ac:b2:62:b8:52:5d:a1:
                    86:5e:6e:50:e1:b5:1b:15:03:42:57:64:4e:ca:27:
                    9f:bf:5b:45:6b:4c:e5:4a:5c:08:2f:ff:fe:9a:e3:
                    f0:f1:ef:08:34:25:67:a8:04:9e:c0:92:db:ff:34:
                    b2:5d:ee:32:ee:f7:da:b4:cf:42:9e:49:22:e2:43:
                    1a:13:3f:98:d4:6d:66:53:02:b3:3d:0a:93:b2:58:
                    04:f1:e4:af:28:8f:8e:f6:d0:0d:71:ca:11:89:8a:
                    5d:7c:77:c3:74:6f:40:e2:08:fe:e3:c0:ff:a5:3b:
                    1c:b4:ad:0d:ae:35:f7:7c:3e:a5:93:3a:ab:07:f9:
                    d8:b1:4d:19:19:0b:dc:cf:aa:14:de:17:dc:79:30:
                    00:ab:4e:2f:26:d5:e9:76:d0:9f:47:2c:49:4f:5c:
                    ad:d9:2f:30:09:f1:92:70:0e:48:9d:b9:c2:09:68:
                    60:67:ff:53:b4:58:f4:ce:6f:a5:7d:98:5c:c6:a7:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:33:32:F1:4F:7C:F0:B7:97:1F:66:A3:64:5F:65:5D:20:09:2B:AA
            X509v3 Authority Key Identifier:
                keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:97:10:ee:3c:8d:70:fa:3c:ef:93:46:ff:8e:da:bd:fe:56:
         99:2b:98:c0:30:ea:f0:5e:21:f6:ad:c6:44:64:0b:16:db:b2:
         18:af:33:30:e8:84:d4:b7:72:c2:c2:0d:d7:69:1c:b1:48:8e:
         89:c8:b6:50:f6:b5:09:02:c4:1e:0c:05:02:2b:2c:d3:dc:1d:
         73:dc:e3:46:ea:55:94:14:4b:88:f2:5d:11:55:37:90:5f:22:
         03:5c:15:84:fd:24:12:a9:02:af:09:ed:92:3f:d5:ac:bd:d0:
         8e:df:b4:67:e5:3f:59:a9:9c:e8:e5:b8:86:df:65:22:d2:2e:
         e0:fb:87:68:1b:37:19:bf:53:62:23:1c:8a:0c:7c:2b:6e:43:
         a5:89:5e:f1:e4:7e:cd:89:90:0b:8c:c3:ac:c8:05:fb:d0:a9:
         d2:ff:89:9e:f4:c0:a2:13:c1:3a:cc:72:e1:f0:8f:ec:e2:06:
         2b:59:65:c4:e2:ed:4a:b8:97:7a:a2:ad:65:5c:fb:02:da:36:
         6e:1e:20:74:48:10:3b:6c:3d:02:da:59:70:50:58:8c:74:2a:
         63:a2:ca:97:d4:6c:38:59:97:97:c3:ab:7f:93:06:dc:e7:06:
         7d:9c:27:45:18:f2:01:7b:de:d8:00:06:69:d0:74:3b:d1:25:
         12:2b:88:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:37 2025 by rpki-client