This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
File:                     fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json)
Hash identifier:          DuXKoChFw1QO9y0oH+aIr5GgK9L7R7ZKO1NwQWcNRac=
Subject key identifier:   12:49:02:17:0C:AF:94:21:EC:07:2B:C9:CF:84:BD:25:60:E1:96:46
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Certificate issuer:       /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial:       0C80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
Manifest number:          0BCA
Signing time:             Sat 06 Dec 2025 18:36:22 +0000
Manifest this update:     Sat 06 Dec 2025 18:36:22 +0000
Manifest next update:     Sat 13 Dec 2025 18:36:22 +0000
Files and hashes:         1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: 3mkrSTEPUSGUkn8olfZafvNFfImbRJrHiTVnyNDSRbc=)
                          2: E8819018178811EC876F5F50C4F9AE02.roa (hash: TUeSGThA71gPmHqcyXZanu8mExqUQgocKEFv3yzea/g=)
                          3: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: fKITGlH8Ym4FGCNTLdBz3N/9fT41O0ewrHeW85uprek=)
                          4: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: xgcAPmybhdKKX1LB8rArE+ilDIHuIkSGwEMHOrxxz6w=)
                          5: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: pWNi2zqUl2KymH0GwVdvbCWQHY1sj05kmoe0wb+HqN0=)
                          6: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: fpApiu1FjrarZlPUsOOK6GGIbKmnMiZ6mCyLBRP/A/k=)
                          7: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: SlT7b5WGF4xDvO5UnYsRWIEsNMsfCj2P0RDQ0c4uxVg=)
                          8: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: zf45ltuWfmdAtT9A7Ih3Fv5EL5oWc6vkxJu3n9BqugE=)
                          9: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: kxUXf7mA4CW5b99j/+9BBjl+HFe5y/+Il84nYKPjkAg=)
                          10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: RxzJdhNL3XRe6UM0O5+yODZOZOT+QSs+nHTsvvP7oUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
                          rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3200 (0xc80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Validity
            Not Before: Dec  6 18:36:22 2025 GMT
            Not After : Dec 13 18:36:22 2025 GMT
        Subject: CN=693477a6-e4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:9c:fd:3b:05:1c:41:68:ac:e7:3f:d5:7c:
                    71:9b:ba:df:05:41:e3:e3:27:22:1e:97:b0:f2:17:
                    3d:d8:f2:44:72:1c:d4:e6:19:a2:73:5f:52:fb:f7:
                    41:58:90:ec:04:54:b2:ab:83:d9:85:9f:34:96:14:
                    e4:b0:47:4e:dc:1d:f1:d2:f3:37:6f:04:f3:2d:6d:
                    c4:11:70:1f:e3:e0:cc:9c:dd:26:da:04:ae:90:fd:
                    09:1c:8e:60:fb:47:81:a7:df:27:b4:17:5d:78:b1:
                    a8:9d:de:57:38:d1:70:8e:c8:dd:c7:79:26:3a:9a:
                    14:b1:a9:83:8b:1b:e0:48:46:0a:71:b3:99:86:c3:
                    4f:f7:0f:e1:ae:8e:35:4e:a0:ac:0a:74:28:5a:6e:
                    6a:94:47:e7:e8:05:85:55:f0:92:50:1f:08:cb:26:
                    bc:24:c3:a0:4a:d6:c7:21:c9:d1:b9:f9:5a:a4:9f:
                    32:bf:4b:ed:63:20:2a:aa:58:5c:4b:96:de:bb:62:
                    9e:f5:dd:25:8a:31:a0:ab:d6:a7:50:1e:95:e6:4c:
                    f2:e0:06:e2:e0:98:c9:dd:c1:f0:a2:f2:c8:3f:20:
                    af:e8:cf:12:b6:df:87:90:18:f1:85:e3:b5:e8:91:
                    37:a9:73:c1:95:27:00:18:0e:f8:03:cb:bd:31:21:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:49:02:17:0C:AF:94:21:EC:07:2B:C9:CF:84:BD:25:60:E1:96:46
            X509v3 Authority Key Identifier:
                keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:99:9f:a6:84:26:49:b2:76:9b:23:81:ee:5a:71:19:32:75:
         4f:bc:d7:27:10:7c:55:ab:c2:9b:0c:e5:b4:61:f7:d3:b6:ba:
         34:56:06:15:a3:bf:dd:0c:35:d4:f3:4f:c0:cf:b8:1d:d6:e3:
         47:5f:dd:3f:b3:e1:cb:e7:b9:d4:32:9d:71:a8:d4:5a:2f:af:
         7b:d7:ce:cc:a6:f9:da:3b:60:87:61:fe:e4:d6:83:d0:61:9c:
         a4:e0:3f:f0:cc:83:58:94:4d:82:a2:7a:9f:e0:a4:61:fd:35:
         0e:b5:7e:54:96:9d:42:91:0d:2f:49:60:8d:f0:9b:35:58:37:
         01:55:9a:4c:4a:48:14:89:b3:33:2b:53:af:ca:cb:10:cc:49:
         fe:45:ce:dc:4a:e0:27:42:97:e2:01:ad:d7:e9:79:2e:59:94:
         3b:c3:02:04:5c:b3:78:36:6b:a9:f3:75:1e:8a:7d:8b:71:7a:
         ae:c1:03:5c:17:14:ec:95:25:9f:be:f2:2a:21:4f:d3:86:e4:
         b3:e9:7a:c3:a8:f3:84:f9:32:5a:69:e8:49:a8:82:5a:ec:5b:
         94:41:83:f1:2e:c4:65:fd:50:2c:d4:2c:88:87:23:1f:19:2f:
         93:a9:fb:0b:3e:8c:6c:1e:91:69:56:d8:89:d6:61:23:84:58:
         fb:90:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:16:46 2025 by rpki-client