This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
File:                     fysutbj095VolfExLY3MQiOcmmI.mft (raw, json)
Hash identifier:          JWRplnwXB1J+3mJminKflr0xD+ilB5BcjuRtkPrdtmA=
Subject key identifier:   5A:9D:E2:64:43:CF:E5:07:26:66:3F:25:B0:68:05:F7:FB:6A:65:EC
Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62
Certificate issuer:       /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62
Certificate serial:       0E91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
Manifest number:          0E83
Signing time:             Mon 22 Dec 2025 17:22:48 +0000
Manifest this update:     Mon 22 Dec 2025 17:22:48 +0000
Manifest next update:     Mon 29 Dec 2025 17:22:48 +0000
Files and hashes:         1: fysutbj095VolfExLY3MQiOcmmI.crl (hash: aLeZ2uYPU4l6Xlg0srCypUKR7FA8F/Sdw7UHiUGW/8s=)
                          2: A43B3718ABC111E9A200115CC4F9AE02.roa (hash: H3PZR2Ocqd5DrHweNG98HWtY6eO+2MOa7m6IWNzWQmk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl
                          rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3729 (0xe91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0D57, serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62
        Validity
            Not Before: Dec 22 17:22:48 2025 GMT
            Not After : Dec 29 17:22:48 2025 GMT
        Subject: CN=69497e68-fd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:97:d4:00:b3:4d:14:d0:c6:e8:41:fb:1d:3f:
                    c7:37:ba:80:9e:a7:3e:a4:de:32:bc:8c:9a:56:d5:
                    4f:01:81:bc:7d:15:08:c9:af:bf:f2:9e:6a:19:c4:
                    ca:1e:49:eb:63:d0:0f:7a:a1:1b:ef:2a:f4:c2:41:
                    48:27:ee:f1:99:3d:62:e6:2c:48:e4:98:bc:0b:78:
                    90:45:19:91:53:f8:1e:12:2d:01:22:9f:46:df:c2:
                    be:fb:5f:6e:d7:78:c6:e2:6c:6e:1a:89:ff:7c:90:
                    b2:6d:76:4f:11:af:0d:19:20:26:44:5d:1e:5b:be:
                    b7:2f:fd:a9:6e:fa:85:78:40:10:31:bb:1b:dd:15:
                    a6:30:2e:dc:d9:a4:45:41:2c:cd:8a:a7:4f:14:fa:
                    f7:6d:f4:55:78:06:df:ef:4a:f3:b9:a8:2a:b0:0c:
                    64:86:de:39:fe:56:15:9c:0a:cb:62:71:46:ff:78:
                    01:80:96:a9:6c:df:77:13:77:b4:bb:cc:c6:c6:52:
                    8a:9a:3f:84:54:c7:4c:79:1d:79:e8:6b:60:01:38:
                    70:36:1a:7e:95:6b:f4:9d:a8:5a:7b:13:9b:6f:66:
                    a0:61:41:ec:bd:07:19:b6:9d:94:9a:74:bb:ec:0a:
                    3d:eb:87:6b:d6:35:31:d3:86:e4:76:e7:6f:17:c3:
                    96:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9D:E2:64:43:CF:E5:07:26:66:3F:25:B0:68:05:F7:FB:6A:65:EC
            X509v3 Authority Key Identifier:
                keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:02:9e:a6:b2:f6:4f:8b:0d:b5:d7:5d:09:a2:f9:04:47:89:
         dc:a1:8b:cc:a4:0f:50:6e:57:c3:4e:af:28:0c:43:3f:2d:35:
         bd:87:23:80:5e:4e:ee:06:e9:20:12:76:67:1d:b0:89:a4:2a:
         89:f8:69:a3:6f:cb:62:36:fe:41:ef:93:c0:16:39:17:f6:da:
         85:60:e5:5c:75:85:a1:34:d4:fb:4e:1a:9f:e9:de:6f:42:ba:
         e9:51:f6:e7:83:10:f9:28:9d:be:3b:0b:fc:95:0b:13:d6:24:
         e5:7d:59:2e:b8:82:43:c5:aa:3d:a1:79:48:a4:ae:37:15:08:
         85:4f:e3:8d:c2:c4:64:c1:29:82:69:1c:b1:f2:68:3c:bb:24:
         ef:5d:cb:bf:c6:58:2f:93:62:e0:9e:97:e2:6d:f4:58:07:5c:
         49:0f:ba:93:d1:08:b5:8e:41:62:3e:29:8e:a8:9c:11:45:66:
         46:50:9c:e1:e7:fe:52:d0:92:fb:58:a6:bd:9c:93:77:be:cc:
         ff:e1:ec:5b:8a:4f:9b:f6:fe:5e:b8:75:27:36:be:de:76:ed:
         c8:e8:ea:8c:be:ad:56:76:d8:74:9b:7f:d5:60:31:a0:0c:f5:
         02:bd:62:f8:f3:7c:5c:43:f8:1d:bc:5c:d9:24:58:e1:a8:68:
         d7:26:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:35:10 2025 by rpki-client