This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
File:                     fSxGJ1bUkw5gMpuitqcGbzsImu0.mft (raw, json)
Hash identifier:          rg3kxn1ExTK29OvQE7ohajLiC2mtUFMGwCp3BywzApE=
Subject key identifier:   0E:BD:1B:EA:41:09:8C:65:AB:BB:68:65:4B:A0:98:54:88:22:6A:93
Authority key identifier: 7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED
Certificate issuer:       /CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
Certificate serial:       068F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
Manifest number:          0688
Signing time:             Mon 22 Dec 2025 21:41:14 +0000
Manifest this update:     Mon 22 Dec 2025 21:41:14 +0000
Manifest next update:     Mon 29 Dec 2025 21:41:14 +0000
Files and hashes:         1: fSxGJ1bUkw5gMpuitqcGbzsImu0.crl (hash: TtOb1r2bj7zR179qWSWbMED7mnISTo4QNS1OZ+VNOyU=)
                          2: 44F388569DA411EBA820C56AC4F9AE02.roa (hash: PnsQbPIDSKRSyuK7eLM7Vk6MM+x0Uzj1WuRP+vxtrpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl
                          rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151631, serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
        Validity
            Not Before: Dec 22 21:41:14 2025 GMT
            Not After : Dec 29 21:41:14 2025 GMT
        Subject: CN=6949bafa-175b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:91:29:bc:1a:ac:12:2b:65:45:b1:ad:af:
                    e6:d9:df:a9:61:04:97:c6:1e:35:6d:c7:f4:d7:3c:
                    b9:7a:ee:a6:16:96:5d:27:bc:97:d4:df:9e:9c:3d:
                    b4:ce:1f:e1:c4:40:5e:27:da:37:74:36:8f:88:20:
                    15:13:31:4b:8a:83:4a:2a:d0:3b:d0:74:0c:68:79:
                    28:0d:15:38:a6:9d:ed:d6:89:d8:83:f4:b3:b5:5a:
                    d7:4f:6d:a0:b1:7a:68:81:57:1e:a9:39:21:f5:ec:
                    68:1a:d4:d3:c3:b2:af:7a:12:15:49:43:f5:7c:65:
                    75:79:24:ae:5c:b6:bf:b6:1c:60:0b:c7:1c:58:99:
                    66:f3:08:91:65:15:de:94:6b:9b:e2:6e:8d:ea:b0:
                    96:f6:30:8c:9a:b2:68:5f:90:e6:ec:8e:f2:8a:8d:
                    6f:8d:8f:1c:c0:9b:7f:d0:09:31:31:94:7e:df:7f:
                    ce:1b:c0:7a:fc:92:d3:71:84:f8:cc:4b:f4:ca:a7:
                    11:f5:e2:60:ff:bf:ba:96:c9:bc:f7:b6:b8:f5:2b:
                    e5:c4:8e:1a:11:0a:ad:53:fd:24:74:c2:97:b5:4f:
                    53:03:1d:7e:23:b8:7e:cc:83:80:63:19:4a:af:11:
                    67:99:74:76:b5:53:55:15:b1:6b:91:19:40:b8:98:
                    74:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BD:1B:EA:41:09:8C:65:AB:BB:68:65:4B:A0:98:54:88:22:6A:93
            X509v3 Authority Key Identifier:
                keyid:7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a7:c4:46:a2:4a:4a:47:d4:6e:36:ac:d2:66:eb:60:e0:55:
         81:3d:b5:4a:88:47:49:d4:87:e4:85:a9:51:5e:49:e6:e6:0c:
         71:29:66:bc:d1:7e:00:c8:b8:70:6b:90:41:08:bd:c8:8c:e2:
         07:a9:2d:b3:15:28:72:76:27:2b:d5:58:f5:72:bf:51:23:8e:
         e3:a9:43:6e:9a:6b:4c:b4:7f:6f:ed:f2:80:7d:50:70:6b:d7:
         33:0a:a0:37:29:35:53:c3:78:bc:62:3e:90:22:2c:e0:a8:f1:
         bd:04:fb:3a:29:68:ee:12:a9:eb:0d:79:1d:e5:b3:29:98:1f:
         fa:59:ed:bc:2d:14:fd:db:fa:6e:92:b3:e6:0e:b3:db:8d:90:
         e3:e5:40:1d:48:47:74:55:cb:ad:e2:ee:05:d7:0d:d9:48:30:
         c0:63:36:da:a7:57:d2:a9:20:5b:47:a3:11:45:85:89:39:e8:
         ff:32:3f:f6:b3:17:04:fd:16:1c:85:21:88:ab:2a:a6:10:63:
         32:c2:e3:1d:ad:4a:d2:0f:f8:3f:e7:1d:95:b7:f2:f3:d0:00:
         2d:cd:04:59:62:63:ea:ff:b5:7a:24:1a:b9:e4:cb:63:4c:50:
         e9:25:ea:97:8a:47:7b:bc:a1:8c:c4:8a:eb:c3:6e:ca:c2:73:
         df:61:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:36 2025 by rpki-client