This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
File:                     Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft (raw, json)
Hash identifier:          bQfPoLMkEWkXWcXWA7gC/8hTLG76NsJ/76X+Z+SezQc=
Subject key identifier:   15:79:CD:B1:8E:CE:5B:68:C0:69:22:98:FE:0B:4D:90:76:01:6D:DE
Authority key identifier: 15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0
Certificate issuer:       /CN=A918D1BD/serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
Manifest number:          26
Signing time:             Tue 23 Dec 2025 06:31:37 +0000
Manifest this update:     Tue 23 Dec 2025 06:31:37 +0000
Manifest next update:     Tue 30 Dec 2025 06:31:37 +0000
Files and hashes:         1: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl (hash: iriNVFgnfDrRrwyxxJnivIlNu7oo5X51sFCoatd1Gx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl
                          rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D1BD, serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0
        Validity
            Not Before: Dec 23 06:31:37 2025 GMT
            Not After : Dec 30 06:31:37 2025 GMT
        Subject: CN=694a3749-c2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2a:14:d7:fc:b3:58:2d:c0:ce:7b:8d:59:47:
                    ff:fb:f2:ff:3c:13:10:6a:68:a7:6b:72:72:34:e5:
                    34:e3:41:e7:19:a5:ca:87:df:8b:98:d8:37:17:d8:
                    b9:bf:10:c2:1d:1a:59:b9:c7:28:52:c3:61:66:52:
                    31:07:0c:0e:34:f0:3d:40:32:ba:70:c1:ed:a6:1e:
                    6e:5b:62:07:3a:3a:75:5d:68:e1:ff:63:1f:c4:3d:
                    ac:b4:0e:b7:67:65:23:f3:14:60:83:bb:e7:5c:e8:
                    93:32:a9:a1:1a:81:99:7e:ba:0e:9c:0b:56:ff:47:
                    c3:a4:e6:33:08:54:b5:95:39:4f:7e:c1:12:6b:4f:
                    cb:26:8d:31:6e:0d:57:61:c7:3d:33:6a:ab:63:a9:
                    2b:a7:22:fc:25:03:67:59:62:b9:bb:8e:5b:6d:6b:
                    77:d2:44:c5:51:c8:82:b1:72:51:85:65:f3:85:b6:
                    02:0b:b6:44:2f:25:c5:fc:20:e4:0b:f6:f5:f3:28:
                    43:83:4b:3c:56:84:b6:fb:aa:0d:8e:99:34:f5:24:
                    a0:64:da:42:69:bb:9c:4c:04:81:d3:0a:ef:e2:e7:
                    78:e3:18:26:12:73:66:82:32:2b:ec:e4:84:f0:ff:
                    46:2b:31:6b:a1:1b:22:56:a1:15:6b:60:c3:8d:c9:
                    02:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:79:CD:B1:8E:CE:5B:68:C0:69:22:98:FE:0B:4D:90:76:01:6D:DE
            X509v3 Authority Key Identifier:
                keyid:15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:75:eb:e0:37:a9:fa:69:ab:00:0b:dc:35:34:c4:ac:34:87:
         f1:6c:fd:c6:29:c1:e8:cf:bc:9d:25:ca:16:f6:cf:c7:1e:29:
         0b:61:80:b2:af:8b:3d:ee:7c:52:d4:71:a5:6a:ba:5e:c3:59:
         b0:a3:e1:c4:77:11:9a:83:1a:b2:47:40:2e:e6:39:f8:f3:30:
         5f:e8:d5:30:70:be:69:1f:56:2d:95:b3:fc:77:4c:9c:78:0b:
         94:23:35:79:ed:68:82:14:43:4c:63:8e:d6:d7:cd:80:e6:b1:
         da:e4:d5:2c:76:c9:f2:cd:ef:1e:fc:29:0f:6c:9f:a4:9d:14:
         ba:f7:f6:23:e4:5d:dc:49:7f:df:5f:b8:eb:c1:61:c9:bc:10:
         b1:37:f3:23:06:d1:da:ab:b0:6d:73:11:b7:1f:38:05:bd:5d:
         dc:1a:8a:d6:0c:da:0b:0e:13:ed:de:0f:ac:6b:8e:06:3e:44:
         d5:f8:ef:cb:86:7b:21:33:90:06:a8:3b:c4:e9:07:0e:ee:ea:
         55:7b:f1:70:74:a7:77:42:22:17:66:d7:48:c4:0d:57:26:c8:
         b3:e0:0d:db:b0:29:64:95:31:7d:93:d5:04:0c:1c:ad:70:d9:
         dd:e0:46:e1:78:fb:d8:e2:9e:13:95:b4:43:8c:0b:06:d3:e7:
         0a:42:60:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:36 2025 by rpki-client