This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
File:                     Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json)
Hash identifier:          uj98ehEnvikrz0jzbO+6vJQJ9L3ju2mfbO21jG507gg=
Subject key identifier:   09:0B:87:5B:25:46:11:8B:96:C2:7B:3E:7E:7A:A9:86:F2:D9:91:00
Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
Certificate issuer:       /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
Manifest number:          F3
Signing time:             Wed 03 Dec 2025 03:40:47 +0000
Manifest this update:     Wed 03 Dec 2025 03:40:46 +0000
Manifest next update:     Wed 10 Dec 2025 03:40:46 +0000
Files and hashes:         1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: GlFBD1CJui9ebJigxiLQABFwMQuUVA41Bi57e5pNHjA=)
                          2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: BteKkWaHztNY5RPMXMdQaz6E2A7IVRfTkJnalZdJs5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
                          rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 03:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
        Validity
            Not Before: Dec  3 03:40:46 2025 GMT
            Not After : Dec 10 03:40:46 2025 GMT
        Subject: CN=692fb13e-5fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:ac:36:34:23:37:e1:f1:47:4b:ee:0a:a3:
                    27:e0:7d:0e:6c:e2:ea:12:47:4e:a5:c8:5f:f4:31:
                    7e:10:6b:79:fd:e9:a3:69:f3:65:6e:c2:e4:29:fc:
                    7c:4c:12:06:17:40:9c:1d:cc:07:56:19:2c:d1:07:
                    b3:0b:81:96:97:7e:0a:cf:b6:41:87:c3:38:7f:0c:
                    11:ed:e9:1f:3d:16:72:c9:ae:f6:a2:6d:3f:68:0b:
                    8d:2f:08:5e:c8:fd:0c:fc:e2:a6:12:98:f0:ca:0e:
                    e0:f0:3f:93:ae:9b:61:56:ca:fe:75:e4:0b:da:08:
                    2b:0e:e6:f0:64:b8:98:25:6b:c6:3a:ba:f9:5d:fb:
                    72:cf:cc:23:f8:bc:3a:65:21:db:f1:a1:31:a6:00:
                    cb:c0:d9:49:47:c7:7b:f1:0e:9b:9e:ff:0f:85:83:
                    5b:db:0b:c2:73:24:ec:3c:d1:d0:bc:86:19:47:02:
                    9e:f6:11:bb:c6:74:68:38:be:eb:fd:83:65:7d:94:
                    7f:76:61:eb:e3:a6:71:c8:6f:f1:23:ac:2f:47:80:
                    34:b8:67:34:b1:fe:7c:fb:a7:2b:93:96:41:47:a7:
                    d4:9c:40:8e:87:4e:a0:0f:39:2a:76:0a:57:a0:fc:
                    a7:1d:00:85:2f:f8:ea:b0:42:da:19:8e:79:fa:30:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0B:87:5B:25:46:11:8B:96:C2:7B:3E:7E:7A:A9:86:F2:D9:91:00
            X509v3 Authority Key Identifier:
                keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:92:a8:2a:c2:62:21:58:e9:8c:66:9d:56:57:04:51:6a:08:
         8c:1f:0f:74:cc:0b:9f:75:98:5a:de:ce:76:19:23:42:a0:22:
         f6:76:9a:79:98:9e:bf:77:8c:08:65:17:7b:54:9e:97:5e:b7:
         3b:49:c2:15:94:f3:f2:60:40:76:7c:c4:13:14:b4:5d:aa:5c:
         4a:ae:e4:7c:03:cc:78:0c:00:df:27:88:84:8a:ae:8e:d0:92:
         f8:4e:e7:ca:2c:2b:bf:0b:79:b6:e0:47:39:37:b3:31:32:76:
         ae:20:21:b2:0f:89:59:44:3b:68:71:b0:fb:8a:a8:05:f7:ae:
         b2:90:2d:3a:93:8d:4e:c0:fb:64:3f:4d:cb:95:90:39:e9:ea:
         2f:f8:44:aa:18:2e:5d:a0:28:66:d8:f2:72:55:ac:ee:19:27:
         94:a4:53:da:80:a1:58:8c:c3:d4:9a:70:1e:a7:3e:c8:9a:fb:
         16:c7:d4:a4:dd:20:6b:69:4e:f1:69:75:15:88:ea:c3:dc:aa:
         83:62:29:91:f7:f2:76:84:ac:9d:76:cb:43:18:e4:64:37:36:
         e2:53:01:20:db:a0:86:f2:c3:8e:09:cb:b7:e1:76:60:c8:4e:
         cd:53:ad:8a:40:5e:2d:86:27:ea:52:2b:70:58:0a:b9:69:cd:
         db:ce:0f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:44:21 2025 by rpki-client