This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
File:                     FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft (raw, json)
Hash identifier:          UmApkcEgmDXDDjfyC5is93hakqQeLyAflTnJBk5IKd0=
Subject key identifier:   53:14:38:D2:92:91:B0:3B:56:67:4A:30:D5:4F:CF:75:62:4D:4F:69
Authority key identifier: 16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02
Certificate issuer:       /CN=A91A29D7/serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
Manifest number:          22
Signing time:             Tue 23 Dec 2025 06:34:10 +0000
Manifest this update:     Tue 23 Dec 2025 06:34:09 +0000
Manifest next update:     Tue 30 Dec 2025 06:34:09 +0000
Files and hashes:         1: FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl (hash: WtQIpsd/40kB/nXV0PzLKaz8G+3aaMDapFG3Xhg6zSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl
                          rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29D7, serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
        Validity
            Not Before: Dec 23 06:34:09 2025 GMT
            Not After : Dec 30 06:34:09 2025 GMT
        Subject: CN=694a37e2-450e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:d6:ce:86:14:80:90:02:50:d8:ab:be:53:
                    98:5b:73:28:f7:85:e9:cd:54:e1:6b:36:6c:3b:e9:
                    da:47:05:59:b4:06:fa:cc:e3:ed:b7:50:fd:5b:54:
                    54:94:75:71:c5:1c:7b:de:9e:fb:aa:6c:76:13:5d:
                    65:44:26:eb:d7:a9:1b:70:60:c5:ac:8b:0d:4c:14:
                    19:8c:07:a1:56:70:9b:e2:0f:db:24:b9:1b:f0:25:
                    6c:f0:17:9d:4a:b3:06:83:1e:5e:08:7a:d5:2e:8c:
                    1f:e5:b3:06:0f:bf:5f:8c:17:d7:51:3c:b4:29:f1:
                    fe:64:c9:c9:14:8f:2c:7e:66:bf:b3:dd:f8:f8:f2:
                    3e:dd:10:68:c0:37:c9:26:0b:84:96:d0:02:3c:fd:
                    97:b1:64:1e:90:89:d2:23:9d:fc:82:50:61:77:7c:
                    d7:5a:22:f6:b6:d1:6f:b5:70:22:0c:88:1a:96:ee:
                    b3:1d:dc:50:e4:c6:bd:95:d4:24:0c:48:bd:cf:99:
                    b2:b9:43:56:a5:18:a5:52:86:17:e2:25:9f:a2:2e:
                    91:d2:bb:6a:2e:17:72:32:fb:9b:be:9d:4f:69:82:
                    17:c1:43:3b:65:4e:a8:da:48:2f:e4:8b:0a:f7:81:
                    1a:57:a3:a6:7d:ae:de:87:09:27:75:57:ad:45:0c:
                    57:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:14:38:D2:92:91:B0:3B:56:67:4A:30:D5:4F:CF:75:62:4D:4F:69
            X509v3 Authority Key Identifier:
                keyid:16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e2:d6:4a:fa:45:e1:42:56:01:dc:d8:57:56:2d:db:46:43:
         f3:85:93:f9:f5:c3:5f:72:09:e3:f1:19:1f:e6:c3:56:99:73:
         43:e5:aa:8a:bb:d8:17:30:69:7e:35:a4:e3:be:3e:4e:b6:b8:
         1a:c5:50:68:96:74:c2:ce:79:1c:9b:03:8a:b5:4e:93:80:de:
         ff:54:05:2d:95:aa:b5:9b:94:74:4a:06:d9:7f:c5:4e:f3:a9:
         dc:da:d5:75:88:9e:5b:d5:10:01:45:ab:69:dc:bd:71:4e:99:
         cb:66:ae:55:5a:1c:fc:92:52:8c:42:da:76:eb:ad:dc:b2:07:
         7e:df:4d:07:6c:9f:49:05:21:c3:c5:53:3b:5a:d4:92:c9:fd:
         1d:0b:8a:b2:4a:0c:1f:3d:c8:e0:e3:82:24:e0:b5:b7:f1:d1:
         16:b5:dc:b1:36:10:a3:3f:ce:8f:b8:83:c0:03:5d:69:61:27:
         ab:1f:1c:79:48:e9:c5:8f:85:37:07:32:31:89:e5:ea:94:4b:
         67:6b:e4:84:7c:84:be:f9:13:32:a2:37:f7:fb:ad:63:45:90:
         ee:17:74:bc:35:5f:7e:0d:80:c6:f8:1c:36:51:e5:8e:2d:1f:
         1f:91:51:b8:ec:bd:d9:c2:f7:73:1e:1a:e8:96:42:dd:75:fa:
         d6:03:b4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:48 2025 by rpki-client