This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
File:                     FpcDHB024MQncP5r8o2uSO4TZJY.mft (raw, json)
Hash identifier:          rwatMmuSySzqH7lsULKa/xTQs3ULyoLzGNJSPFSJbGU=
Subject key identifier:   DE:5F:84:46:E0:DA:E0:09:19:46:0F:17:32:72:BB:70:B8:F4:D8:BA
Authority key identifier: 16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96
Certificate issuer:       /CN=A9193B94/serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
Manifest number:          BE
Signing time:             Tue 23 Dec 2025 04:54:55 +0000
Manifest this update:     Tue 23 Dec 2025 04:54:54 +0000
Manifest next update:     Tue 30 Dec 2025 04:54:54 +0000
Files and hashes:         1: FpcDHB024MQncP5r8o2uSO4TZJY.crl (hash: TpaRL22kj9YBXEi24pruznBnIwNdQOYluqeonN1qGuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl
                          rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B94, serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496
        Validity
            Not Before: Dec 23 04:54:54 2025 GMT
            Not After : Dec 30 04:54:54 2025 GMT
        Subject: CN=694a209f-2b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ad:c1:e1:50:33:0a:3a:6f:bd:72:98:9e:5e:
                    8f:ea:fc:b1:58:4e:33:f3:99:28:49:b9:85:a9:a1:
                    83:66:8e:61:7a:bd:dd:4f:af:5d:c1:b0:52:de:ab:
                    8d:5a:5b:62:67:53:41:a5:72:9e:3a:5f:5f:fc:66:
                    c9:a4:93:26:04:1e:de:00:d8:de:86:75:5e:44:de:
                    bf:5d:25:55:3a:67:1c:4e:de:9c:25:30:a2:a7:5a:
                    7e:c9:ba:8f:15:61:a4:1a:34:e9:61:b1:88:e3:0d:
                    34:29:b4:cb:7e:d3:10:8b:93:8a:bb:b9:99:cd:55:
                    06:b6:90:32:6a:51:05:23:dd:80:e9:db:04:5f:94:
                    de:55:10:9f:37:25:11:e9:a8:4d:c7:1a:54:fa:90:
                    7c:24:83:2a:d7:41:36:0d:46:c4:ff:d7:de:f7:ca:
                    6d:31:0d:8f:5a:e4:84:66:74:f4:53:72:b0:13:5f:
                    71:dc:bb:c6:a8:bb:e4:ea:c8:0c:0e:3e:cd:d7:93:
                    dc:67:cb:69:89:d7:aa:3c:95:57:2c:a9:3c:9b:75:
                    e5:98:5b:fb:3b:07:87:ee:84:45:dc:6d:4a:70:5b:
                    47:da:f2:c9:e5:eb:f3:ed:f3:7d:c8:34:fa:1a:08:
                    14:32:93:b9:49:7c:43:c4:6f:2b:04:4a:22:fa:70:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5F:84:46:E0:DA:E0:09:19:46:0F:17:32:72:BB:70:B8:F4:D8:BA
            X509v3 Authority Key Identifier:
                keyid:16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0c:2c:65:5d:eb:d6:33:45:d8:64:f3:25:30:e2:cc:d2:f8:
         2f:ea:9d:e2:70:e5:b2:1c:f0:a7:c3:00:83:e9:1d:8d:62:93:
         cc:6a:d8:f5:2c:74:ff:6d:4f:92:e5:05:d1:98:56:ea:ed:5e:
         47:9e:82:61:6f:3b:6b:75:8e:8a:aa:fd:4c:87:45:94:9c:c7:
         a4:00:97:3e:84:fa:5e:0b:38:15:15:c1:e8:f9:94:3b:16:d1:
         23:a1:8a:72:23:80:6a:c1:a0:ff:46:b3:71:c3:ef:e0:8a:15:
         9b:8f:61:e5:a0:39:f2:75:99:6c:21:94:25:b9:ed:cc:73:0e:
         fa:ee:49:6d:e5:95:78:9a:30:b1:18:37:00:f8:68:85:c1:98:
         e1:d5:ca:52:ed:9f:14:15:8a:1a:94:cd:93:fa:e4:6e:dd:8d:
         19:40:cf:f7:df:bf:94:39:95:0c:16:8d:02:cd:c0:01:cf:3b:
         1d:95:0c:03:b3:3f:01:2c:16:bf:f7:88:c6:9e:74:e4:66:98:
         85:ae:3c:e1:09:b7:8a:7b:35:52:63:7d:e7:1c:6c:54:91:9b:
         99:4b:46:67:c7:48:6f:ef:38:74:65:13:3d:9a:07:52:21:f3:
         b9:82:0f:f7:74:d4:d1:ce:22:b8:90:fa:b9:af:e6:61:f1:50:
         79:03:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:34:56 2025 by rpki-client