This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
File:                     FSLnXozBo4h_XUiEw2VwnFc0FZU.mft (raw, json)
Hash identifier:          z6+RBolHJe3WrW+h6EqRN+Lgorga5V0CtZX7VS+ImTw=
Subject key identifier:   4E:C6:C9:B4:41:4D:D6:D0:AF:38:E6:22:F1:9A:2A:53:7E:98:6A:BC
Authority key identifier: 15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95
Certificate issuer:       /CN=A9180913/serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595
Certificate serial:       0530
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
Manifest number:          0523
Signing time:             Mon 22 Dec 2025 22:43:30 +0000
Manifest this update:     Mon 22 Dec 2025 22:43:30 +0000
Manifest next update:     Mon 29 Dec 2025 22:43:30 +0000
Files and hashes:         1: FSLnXozBo4h_XUiEw2VwnFc0FZU.crl (hash: vzjVFn3kumeOCzqDfDJm0MU1heKdh0idOpinFfnyu4k=)
                          2: BBE12BE88ACD11EF997F2066C4F9AE02.roa (hash: mFfB/doONkvaA7ag62ZYtZuWwfnThHxDuQNDM5n4B8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl
                          rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180913, serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595
        Validity
            Not Before: Dec 22 22:43:30 2025 GMT
            Not After : Dec 29 22:43:30 2025 GMT
        Subject: CN=6949c992-bcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:0c:52:83:58:dc:a4:15:af:6b:1d:91:80:
                    76:48:f4:cc:f8:01:a1:fa:e3:c5:c9:3f:2c:a1:48:
                    aa:00:ee:32:78:3b:b6:82:a4:7c:08:3c:78:b5:4b:
                    29:09:2c:b7:f0:ef:55:35:d6:63:68:53:3b:33:c4:
                    07:9a:5a:45:ac:bb:7c:6b:67:90:a9:0e:28:26:3e:
                    71:15:20:9f:f5:97:40:8c:f6:25:ea:ca:c6:95:7a:
                    fa:23:2d:19:ea:97:d3:f9:7b:d4:6c:21:69:ec:d1:
                    f4:f3:1b:71:a3:80:3b:06:20:97:24:fd:db:85:07:
                    14:18:da:9f:90:84:d0:a6:ba:a9:9b:00:1f:53:15:
                    f3:ad:c2:0b:9f:5b:cb:18:c2:9f:0d:f9:40:70:67:
                    71:97:34:52:b5:b6:b4:c0:de:0c:f3:45:61:8a:1b:
                    a5:70:f0:73:b1:41:b9:45:7b:8d:f5:46:75:b0:11:
                    af:4e:7d:0b:82:10:5f:44:08:1a:75:3e:a2:7e:53:
                    c0:6d:73:58:57:f7:4d:9b:08:d2:89:76:9f:cf:13:
                    7b:90:39:57:58:12:04:80:d4:86:ed:a6:c3:0a:f7:
                    78:17:a1:5c:ee:a6:09:b9:e5:6c:8a:34:2d:b2:57:
                    ac:6a:9a:0f:60:ff:7a:d4:9c:40:99:eb:e1:f7:19:
                    ca:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C6:C9:B4:41:4D:D6:D0:AF:38:E6:22:F1:9A:2A:53:7E:98:6A:BC
            X509v3 Authority Key Identifier:
                keyid:15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:88:59:33:93:75:91:93:02:cf:e9:09:c1:96:d7:57:4f:1c:
         a4:4b:da:29:83:58:b7:0c:b5:a3:56:b9:e0:be:cf:3c:30:14:
         74:dd:85:1b:a9:f5:9c:56:93:4b:c5:92:30:ed:33:21:82:ce:
         a8:36:5e:80:35:1f:59:8f:26:7a:1f:50:1f:ec:c8:55:6f:9e:
         86:7d:57:b2:19:64:fc:78:be:05:dc:a8:2c:22:a9:41:ac:25:
         4d:04:dd:b3:bd:a4:c3:90:88:2d:f4:65:40:22:c8:af:01:94:
         04:a5:11:11:7d:e6:ea:a6:c4:30:04:55:8e:a0:a5:6e:8e:04:
         a8:d5:08:1a:7e:67:8d:00:37:65:6b:79:f8:0a:d5:ff:54:f3:
         9f:97:a9:82:a8:68:44:01:62:31:5d:ea:52:e6:71:f3:e5:ae:
         b2:2e:e3:69:59:83:b9:b9:9b:b8:25:f2:d9:0c:4e:7e:ba:76:
         7a:34:73:13:fb:75:c0:e0:b1:65:27:59:fa:ec:3b:6c:66:9b:
         a9:37:9c:e9:f4:25:07:5e:25:87:a1:7b:50:63:29:a3:89:08:
         9e:16:c7:cb:19:6a:54:5a:03:ff:73:09:93:55:b5:53:2d:17:
         7d:93:bc:7a:54:58:da:f8:42:d7:b8:49:ee:af:92:27:ab:7e:
         bd:76:2a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:51 2025 by rpki-client