This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
File:                     fuTdyziTyc2__3a-xeAwLlIZJQE.mft (raw, json)
Hash identifier:          RZgogIrAp4rnBoLWqS/NAVpgKRRjcFDZ7DhRhxb68PQ=
Subject key identifier:   BA:3A:8A:D6:08:2F:E5:50:8D:C3:98:C6:76:DB:0C:D1:06:D5:6A:83
Authority key identifier: 7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01
Certificate issuer:       /CN=A9168939/serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501
Certificate serial:       06CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
Manifest number:          06C3
Signing time:             Mon 22 Dec 2025 21:24:54 +0000
Manifest this update:     Mon 22 Dec 2025 21:24:53 +0000
Manifest next update:     Mon 29 Dec 2025 21:24:53 +0000
Files and hashes:         1: fuTdyziTyc2__3a-xeAwLlIZJQE.crl (hash: Dvj4pIfXOSAI+PVn9v8loR1dA85SwrkE9Jd4y8iJb48=)
                          2: 50548100855311EBBAE75616C4F9AE02.roa (hash: /SE7Aja2BBR+I+6zyJWrhq+Bo9c2jJI7JkKvXdCSdE8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.crl
                          rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1738 (0x6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168939, serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501
        Validity
            Not Before: Dec 22 21:24:53 2025 GMT
            Not After : Dec 29 21:24:53 2025 GMT
        Subject: CN=6949b725-62d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:ce:99:eb:13:30:b2:49:97:b3:4f:7d:58:
                    13:c8:f7:e5:07:2e:dd:29:9e:04:2a:6d:53:30:28:
                    23:db:b2:74:41:12:0f:ee:22:20:25:ba:62:8e:c0:
                    58:ff:a8:4c:b6:e0:19:88:87:f1:8a:4a:eb:4f:b0:
                    ee:b1:4e:9c:25:13:44:fe:55:d1:d4:c3:39:32:f2:
                    e8:df:52:24:3a:d2:5e:6e:b4:bf:2d:a4:c7:6b:d8:
                    2d:4e:bc:ad:0a:22:9b:8b:a1:5e:1f:eb:e5:37:ed:
                    ba:8a:06:22:60:f0:7a:c1:85:15:ed:18:ef:25:fb:
                    66:d6:b2:7f:1f:87:fb:55:63:26:b7:47:bf:93:e7:
                    8f:19:a1:1e:e3:a7:6d:48:d0:ec:93:f2:6d:80:f8:
                    4a:82:98:e7:e0:a2:cd:7f:74:76:cd:e4:ad:33:ce:
                    86:30:a3:d6:f5:07:5e:4b:7f:cb:7d:b9:ac:b8:4e:
                    59:9e:d5:da:e2:12:d2:dc:25:fe:50:5b:35:70:c0:
                    b7:71:2c:ca:df:60:cd:86:9e:c7:74:6c:b5:2e:59:
                    11:e7:fc:74:d1:e6:cd:5e:0c:cf:61:dd:c9:2f:b7:
                    a7:cf:96:50:24:47:e2:b2:1f:69:92:9f:fa:78:76:
                    51:fa:2e:0f:34:1a:33:7f:89:e4:6f:2d:11:f2:51:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3A:8A:D6:08:2F:E5:50:8D:C3:98:C6:76:DB:0C:D1:06:D5:6A:83
            X509v3 Authority Key Identifier:
                keyid:7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:71:f8:12:21:f9:29:b4:c7:da:c1:f0:57:aa:38:a9:9f:cf:
         c6:b7:49:c7:f4:38:33:20:46:03:7f:6b:ec:68:32:b1:1e:2e:
         e5:cd:2f:c3:19:15:5e:19:c2:55:8f:af:7e:51:87:35:89:cd:
         1c:fa:dd:61:d2:59:d4:e1:5d:fb:86:e7:c1:2d:43:29:00:bd:
         cc:e7:9f:5b:8b:1b:bb:d0:5e:bc:9c:6b:c5:27:59:eb:50:4c:
         77:fa:51:45:63:4a:a5:5c:f3:b6:5f:de:66:b7:1e:b0:af:19:
         82:d9:76:18:e3:ab:ee:c3:da:22:49:a5:ad:7b:16:0c:c9:16:
         31:d3:8a:61:f4:ec:99:0a:60:1f:40:25:8a:3d:76:6e:11:9a:
         6f:48:8f:36:51:5a:38:23:eb:8d:1b:73:e9:9f:16:c4:fe:1e:
         99:13:eb:e9:ce:6e:92:f1:6a:89:45:b4:68:28:3f:af:0c:66:
         ba:11:3d:e8:73:e0:0f:89:75:a8:34:fc:7c:90:7b:e7:b5:58:
         25:83:d8:d7:bd:93:d5:c8:36:4e:c8:af:33:37:fd:33:b9:06:
         97:a2:50:6e:d3:ef:ec:49:01:0e:30:a4:a7:7f:90:c8:52:af:
         0d:ff:e1:ba:e9:8e:d3:91:81:8f:06:5e:52:b8:96:d3:94:cd:
         6c:19:56:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5MzkxMTAvBgNVBAUTKDdFRTRERENCMzg5M0M5Q0RCRkZGNzZCRUM1RTAzMDJF
NTIxOTI1MDEwHhcNMjUxMjIyMjEyNDUzWhcNMjUxMjI5MjEyNDUzWjAYMRYwFAYD
VQQDDA02OTQ5YjcyNS02MmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0nOmesTMLJJl7NPfVgTyPflBy7dKZ4EKm1TMCgj27J0QRIP7iIgJbpijsBY
/6hMtuAZiIfxikrrT7DusU6cJRNE/lXR1MM5MvLo31IkOtJebrS/LaTHa9gtTryt
CiKbi6FeH+vlN+26igYiYPB6wYUV7RjvJftm1rJ/H4f7VWMmt0e/k+ePGaEe46dt
SNDsk/JtgPhKgpjn4KLNf3R2zeStM86GMKPW9QdeS3/LfbmsuE5ZntXa4hLS3CX+
UFs1cMC3cSzK32DNhp7HdGy1LlkR5/x00ebNXgzPYd3JL7enz5ZQJEfish9pkp/6
eHZR+i4PNBozf4nkby0R8lHX9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLo6itYI
L+VQjcOYxnbbDNEG1WqDMB8GA1UdIwQYMBaAFH7k3cs4k8nNv/92vsXgMC5SGSUB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkzOS9FNjY2RTA4RTg1
MjYxMUVCOUQxOThGMURDNEY5QUUwMi9mdVRkeXppVHljMl9fM2EteGVBd0xsSVpK
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1VGR5emlUeWMyX18zYS14ZUF3TGxJWkpRRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODkzOS9FNjY2RTA4RTg1MjYxMUVCOUQxOThGMURDNEY5QUUwMi9mdVRkeXppVHlj
Ml9fM2EteGVBd0xsSVpKUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIcfgSIfkptMfawfBXqjipn8/Gt0nH9DgzIEYDf2vsaDKxHi7lzS/D
GRVeGcJVj69+UYc1ic0c+t1h0lnU4V37hufBLUMpAL3M559bixu70F68nGvFJ1nr
UEx3+lFFY0qlXPO2X95mtx6wrxmC2XYY46vuw9oiSaWtexYMyRYx04ph9OyZCmAf
QCWKPXZuEZpvSI82UVo4I+uNG3PpnxbE/h6ZE+vpzm6S8WqJRbRoKD+vDGa6ET3o
c+APiXWoNPx8kHvntVglg9jXvZPVyDZOyK8zN/0zuQaXolBu0+/sSQEOMKSnf5DI
Uq8N/+G66Y7TkYGPBl5SuJbTlM1sGVbP
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:41 2025 by rpki-client