This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
File:                     fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json)
Hash identifier:          3pzqtZF3RshKfujeOcJ5rBD1iasCWXY/gi5FyQCNncI=
Subject key identifier:   61:A9:22:CA:82:5E:95:6B:7F:48:23:90:8D:53:03:95:ED:9C:7E:05
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Certificate issuer:       /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial:       0CFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
Manifest number:          0CE0
Signing time:             Mon 08 Dec 2025 17:41:24 +0000
Manifest this update:     Mon 08 Dec 2025 17:41:24 +0000
Manifest next update:     Mon 15 Dec 2025 17:41:24 +0000
Files and hashes:         1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: YrzX837lOHHUjmmQ/hXkDH1A/VFfXfREC/eoXl4D3Ck=)
                          2: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: HIjKO7+O+xO4OJIX/SiiO1R/+mZGDdIFJvolSoIaESM=)
                          3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: o8NCxqq4p9ZsLjI+qVRvi9tHW9nOHmjBRARXIkBx7/E=)
                          4: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: 0V1hKLm+r4dSC+e7G/qlJanKA86/g6SLREXYPfiyVTo=)
                          5: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: VEiVACuoAH55v33Ux5UO5cLk1TfJhkMWYIwJCgym6L0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
                          rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 17:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3326 (0xcfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
        Validity
            Not Before: Dec  8 17:41:24 2025 GMT
            Not After : Dec 15 17:41:24 2025 GMT
        Subject: CN=69370dc4-6469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:a5:43:28:15:46:ba:6d:8d:28:9f:62:aa:
                    79:8f:4b:6f:0f:72:73:25:93:52:aa:e0:03:f7:cf:
                    74:70:9a:c2:76:fd:20:80:86:1e:5e:fa:64:a5:b1:
                    e0:e7:7b:d4:f3:ed:41:3c:99:39:78:bc:a7:60:4a:
                    9a:e7:a5:28:f5:46:e4:d7:fb:49:7b:34:f1:c9:d6:
                    0f:55:f4:bc:26:3a:70:b3:21:13:cb:7e:96:a6:18:
                    e3:9a:3f:56:a7:47:11:da:36:25:b2:47:15:36:c2:
                    be:99:05:60:26:ae:e0:fc:64:b7:0c:b7:9b:1d:37:
                    6e:3a:c8:0e:77:9b:88:db:d4:5b:15:a8:dd:ff:78:
                    8d:8d:b7:54:4f:65:f8:d7:5c:a5:fc:aa:a8:3f:c0:
                    a3:55:63:62:f7:d2:cb:5e:f5:6e:11:4d:86:3a:e4:
                    a2:b2:57:6e:50:4e:8a:14:cf:22:83:21:f1:5e:18:
                    a5:74:92:b8:23:a8:eb:b8:b4:24:4a:d5:a5:51:db:
                    57:f6:b9:c7:a2:5c:86:29:fe:47:14:9e:d8:4a:97:
                    72:37:a4:83:5e:e7:6d:aa:9f:ab:db:8f:41:4e:f9:
                    bf:5b:e4:42:4e:72:f0:cc:79:ca:79:c6:88:9c:75:
                    f6:e2:2f:91:de:e9:c5:2f:ec:d1:ad:a3:dc:84:5b:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A9:22:CA:82:5E:95:6B:7F:48:23:90:8D:53:03:95:ED:9C:7E:05
            X509v3 Authority Key Identifier:
                keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:cb:17:53:f4:28:07:c0:5a:b4:1e:17:b7:a0:fa:b8:56:05:
         f1:81:3e:22:55:49:81:9c:01:d4:31:7b:02:72:f6:d9:cf:65:
         36:10:8a:f9:56:b7:c4:ba:fe:f0:c0:5e:44:d0:59:7d:69:52:
         59:ad:32:e5:fb:e5:05:b3:68:f4:5d:e1:48:fb:7d:a3:ce:79:
         ad:23:76:8f:09:a0:c5:8b:42:50:ee:54:20:6d:10:ff:fc:cf:
         5e:d2:f3:8e:c9:cd:d6:5f:ce:43:82:af:12:ec:9a:29:96:fd:
         4f:10:bf:2b:75:6f:66:64:e7:8f:74:cc:b2:0e:e1:2a:14:1a:
         97:56:2f:fe:2a:ca:73:44:90:ba:20:9e:17:ee:bb:b5:dd:45:
         5b:c2:15:71:56:74:6b:ae:bd:16:fb:f3:13:c3:2d:bf:97:89:
         88:d1:28:26:36:bf:6c:cf:80:8a:02:cf:cf:dd:bd:fa:76:db:
         fc:73:b8:69:de:ac:a7:c6:b6:20:de:81:bd:a8:49:91:6e:d6:
         72:e9:af:5b:14:6c:90:44:66:cc:75:c9:da:2a:ff:54:36:b5:
         1a:bb:8e:78:8c:7b:b8:d3:55:ae:b2:d2:15:6e:2e:dc:ff:40:
         a2:ab:75:61:81:36:76:c9:dc:1a:3d:c3:6b:39:fe:d9:2a:ef:
         be:80:ef:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 04:59:04 2025 by rpki-client