This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
File:                     FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json)
Hash identifier:          +4zRTtu52teNnURA5y2g54xyf6nGFSyrGgHLsQe3JFw=
Subject key identifier:   A4:9B:05:A4:70:EA:76:00:44:EC:48:6A:6D:6B:ED:4B:D5:CD:63:05
Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5
Certificate issuer:       /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
Certificate serial:       08AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
Manifest number:          08A4
Signing time:             Sun 14 Dec 2025 19:57:02 +0000
Manifest this update:     Sun 14 Dec 2025 19:57:01 +0000
Manifest next update:     Sun 21 Dec 2025 19:57:01 +0000
Files and hashes:         1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: C6ScNewAugPpWUNj4krN1BUorJElZIGPP/YLRQpFN6Y=)
                          2: 760B9414D50911EB81567986C4F9AE02.roa (hash: QPsDfSV6so0OjIlOy/DIgPY7VNOYY4wsn5e2KkaKPCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl
                          rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 19:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
        Validity
            Not Before: Dec 14 19:57:01 2025 GMT
            Not After : Dec 21 19:57:01 2025 GMT
        Subject: CN=693f168d-af8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:7c:54:52:66:ff:83:a6:c4:1b:af:0d:09:
                    8f:1d:37:96:2d:0e:bd:72:b5:bb:5d:f3:e8:63:7b:
                    43:b7:27:86:d0:ab:64:9f:08:12:80:d5:e7:93:d2:
                    67:59:63:ef:db:d6:e3:56:ad:6d:42:d8:d9:bc:cf:
                    51:04:dc:80:50:c3:11:c9:97:9d:b8:e8:ad:c3:91:
                    b7:d3:78:d1:2e:18:c9:69:a4:72:71:04:22:fe:35:
                    d2:85:2b:56:96:a2:17:9b:8b:0b:89:c4:5c:72:f8:
                    bc:78:46:dc:6a:65:38:d2:04:77:4d:89:56:ed:47:
                    aa:55:2b:28:2c:ba:f9:41:05:b5:51:8d:00:d1:d9:
                    2d:60:8f:59:a2:49:ff:f9:72:ff:5f:e0:31:9d:60:
                    f2:1f:c8:79:ec:73:08:17:f4:00:09:49:07:dd:9a:
                    bd:f8:d4:c8:28:b7:0a:6e:1f:f1:5e:61:0f:30:ee:
                    50:fb:38:7d:7a:e9:1a:80:12:fe:7e:7e:c8:61:72:
                    62:0a:1c:de:48:90:62:9a:ad:12:98:01:37:4e:be:
                    a6:d3:be:f4:50:a2:42:ae:bf:db:0b:71:4b:38:28:
                    eb:c9:df:23:7d:cc:df:79:15:99:51:83:8f:f7:72:
                    96:7c:bb:08:02:24:91:f9:71:bb:99:95:05:47:a8:
                    88:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9B:05:A4:70:EA:76:00:44:EC:48:6A:6D:6B:ED:4B:D5:CD:63:05
            X509v3 Authority Key Identifier:
                keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f4:83:37:44:90:d8:40:e6:23:c5:ed:bc:a1:46:fb:cd:56:
         60:b4:a7:82:2d:44:aa:a8:4c:2c:19:44:89:7d:3f:4b:db:7a:
         8c:4d:a2:6f:15:f6:64:37:12:3a:45:ea:54:59:34:5b:ad:76:
         bc:e0:f0:17:1e:52:a2:6a:3c:ce:05:63:cc:b0:d4:51:ce:50:
         94:60:70:42:0f:3b:7d:b5:36:2f:6a:5d:71:f6:f7:46:61:e1:
         1c:17:7c:c3:68:01:92:c6:c5:a3:0d:e9:82:6c:0d:21:5c:46:
         78:1c:6b:99:c2:2f:b6:bd:33:f4:ba:d6:43:b7:c1:a6:ec:41:
         f0:d5:0e:49:73:ef:05:9f:f4:02:35:b4:4e:5c:f6:6a:8c:b9:
         77:d5:57:39:70:fa:04:0e:e4:56:e3:b6:61:0e:4b:e4:ce:44:
         67:3d:77:3d:93:b2:af:9d:3f:67:12:de:e3:51:cb:77:ec:71:
         a2:35:97:d5:e8:dc:c1:bc:ee:16:7a:92:02:3a:9a:25:91:1d:
         1c:b6:1c:21:f1:2d:8b:19:d0:98:f8:29:3c:80:93:27:7d:70:
         11:27:bb:93:4d:ea:8a:8c:57:87:ed:c2:55:65:61:87:8b:81:
         8d:65:e6:cc:39:4f:ee:15:7d:3e:3e:62:0e:7d:f8:68:c0:4d:
         02:97:25:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 22:20:08 2025 by rpki-client