This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft
File:                     n-FamlS6VTXSl0WIBcRwNi7YcXM.mft (raw, json)
Hash identifier:          RQ9bBHxXgYqaUdKdfv74RJHvQIgaNOi6XigX0oFlupA=
Subject key identifier:   CE:C3:57:BA:02:A3:79:D2:0D:BA:AC:69:95:11:6C:F6:A6:EC:EC:28
Authority key identifier: 9F:E1:5A:9A:54:BA:55:35:D2:97:45:88:05:C4:70:36:2E:D8:71:73
Certificate issuer:       /CN=A916943B/serialNumber=9FE15A9A54BA5535D297458805C470362ED87173
Certificate serial:       0AFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-FamlS6VTXSl0WIBcRwNi7YcXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft
Manifest number:          0AF3
Signing time:             Mon 22 Dec 2025 18:51:32 +0000
Manifest this update:     Mon 22 Dec 2025 18:51:32 +0000
Manifest next update:     Mon 29 Dec 2025 18:51:32 +0000
Files and hashes:         1: n-FamlS6VTXSl0WIBcRwNi7YcXM.crl (hash: pd0HCBTCswmsGr8ArEHZOX5pjXK4DB0ZnwQxogegga8=)
                          2: 205773705AEA11EAA2FDF10EC4F9AE02.roa (hash: xIyzqpx/v+AWGG+aa4XOH44ipbfUfWT7BofPfTKwqVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.crl
                          rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-FamlS6VTXSl0WIBcRwNi7YcXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2810 (0xafa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916943B, serialNumber=9FE15A9A54BA5535D297458805C470362ED87173
        Validity
            Not Before: Dec 22 18:51:32 2025 GMT
            Not After : Dec 29 18:51:32 2025 GMT
        Subject: CN=69499334-cf16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:bc:8f:5c:56:14:ef:7d:ac:64:be:6e:a8:
                    60:e4:7c:59:b5:1e:90:46:02:79:05:e6:0f:06:2b:
                    b1:5c:42:ab:6c:95:19:51:9d:cd:c0:bb:c3:32:7e:
                    02:94:69:e0:89:28:5b:9f:28:1e:84:81:23:03:64:
                    7b:c1:be:ff:ba:e1:f9:5b:12:62:a3:62:58:a9:57:
                    ad:96:7c:d5:b0:6a:09:ee:91:11:df:f8:b3:36:e3:
                    ff:9b:40:ce:ee:c0:65:06:3c:23:d2:87:85:1d:91:
                    d0:81:cc:43:2f:df:cc:06:7c:75:63:df:0b:59:fb:
                    69:94:cb:9d:5e:c0:bd:6a:d7:3b:e2:fa:27:00:e1:
                    08:27:ea:ed:9b:7f:c9:0e:3d:84:3c:fd:01:75:af:
                    18:b8:66:73:15:30:64:6e:1d:62:44:36:ba:c3:4b:
                    e8:f3:9b:2e:32:17:87:c1:b6:06:4f:00:e4:78:ff:
                    4a:b4:48:11:aa:f8:7a:60:ed:4e:52:bb:07:6b:10:
                    32:eb:f3:07:7e:d4:b9:5f:24:00:18:dc:a3:63:e9:
                    7e:76:8f:fe:67:8f:a2:82:28:a1:2c:2b:c2:1c:59:
                    1d:bd:58:77:0e:f6:93:f3:b2:d4:2e:b5:e3:a6:cb:
                    c9:e4:1a:b2:34:44:80:fc:48:17:44:81:81:f6:8e:
                    b3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C3:57:BA:02:A3:79:D2:0D:BA:AC:69:95:11:6C:F6:A6:EC:EC:28
            X509v3 Authority Key Identifier:
                keyid:9F:E1:5A:9A:54:BA:55:35:D2:97:45:88:05:C4:70:36:2E:D8:71:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-FamlS6VTXSl0WIBcRwNi7YcXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f5:dd:81:87:f5:2f:a1:b6:e0:9f:7b:90:e1:9a:8e:5d:79:
         c3:a6:08:20:d6:7a:88:68:06:1b:59:ab:e3:6b:8a:11:3d:b1:
         12:a2:42:fe:5e:53:3c:8b:b1:79:68:30:5d:f8:4e:2e:2e:17:
         07:98:a6:d3:51:a3:c9:21:7c:a9:ff:d7:52:d4:4a:44:86:35:
         61:bd:f4:50:0a:a3:06:60:69:dd:60:3e:29:75:dc:b1:ae:55:
         f3:1a:22:a2:f2:ee:31:0d:94:b9:b8:23:63:42:e9:26:9e:83:
         44:c5:96:7f:9e:c1:2f:5e:b3:73:23:dc:16:fa:57:31:90:a1:
         a0:72:ec:df:1d:6d:fd:a2:65:a5:ff:81:e1:c9:a3:ec:d7:40:
         bc:e2:3d:48:8d:e9:c2:34:88:56:4a:f6:2d:c7:8c:ea:6d:27:
         b4:93:32:f1:bb:e9:07:c5:c3:70:ae:02:c3:62:f2:6a:d6:d8:
         e5:34:c1:8c:b3:0e:c9:8a:e1:61:c2:8b:8d:b3:67:ea:ee:b0:
         50:08:6f:18:5f:65:0f:5a:b9:47:20:09:94:d0:55:d6:a1:ed:
         0a:d7:0f:db:3f:7c:2a:b5:61:28:3f:19:11:44:47:c4:d8:87:
         f4:8a:f4:f9:6c:12:07:70:96:77:45:77:ee:83:4f:2c:a0:9a:
         02:45:92:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:02 2025 by rpki-client