This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
File:                     ftF6_XNwpqkI2CYrhtq8fu09YUA.mft (raw, json)
Hash identifier:          NkUCmgMNJvlDNIaJFnytzoVTAboF9ZEE3pT+e+1JH3o=
Subject key identifier:   50:89:29:39:7A:80:96:F3:5B:2E:51:17:76:DC:C0:B4:E0:DD:09:D3
Authority key identifier: 7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40
Certificate issuer:       /CN=A91B6F87/serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
Certificate serial:       07C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
Manifest number:          07BD
Signing time:             Wed 24 Dec 2025 20:44:31 +0000
Manifest this update:     Wed 24 Dec 2025 20:44:31 +0000
Manifest next update:     Wed 31 Dec 2025 20:44:31 +0000
Files and hashes:         1: ftF6_XNwpqkI2CYrhtq8fu09YUA.crl (hash: evHsZhalN+B53PTriecaFtmLCf2IjEquQCPyN90V4BU=)
                          2: 69BA51482C9C11EBB49A3A32C4F9AE02.roa (hash: ST/Rl9xKmY8tlX8GinkPsHXgmmClbDe8hWqTijwIMqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 20:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990 (0x7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6F87, serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
        Validity
            Not Before: Dec 24 20:44:31 2025 GMT
            Not After : Dec 31 20:44:31 2025 GMT
        Subject: CN=694c50af-c107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fc:b8:ae:82:fc:6a:f5:c5:32:4b:aa:e7:a4:
                    d3:02:9f:d4:cf:dd:aa:b3:01:2d:ac:44:31:33:49:
                    f0:e8:17:68:a6:63:9f:c4:8d:f7:fe:d3:cc:25:84:
                    02:64:dd:af:d0:6b:6d:4d:28:57:9c:30:87:b3:47:
                    11:2e:79:df:0f:9a:67:9c:51:d7:1a:ee:61:e5:0c:
                    30:56:43:e2:c0:7f:e2:48:ea:76:57:94:aa:48:63:
                    0b:78:10:47:aa:fe:eb:63:ac:99:41:28:eb:3e:e8:
                    bf:46:be:21:56:3b:a8:a8:23:5c:56:e3:a7:e4:68:
                    26:07:aa:a3:52:06:f5:46:97:33:6e:bd:d7:68:d1:
                    a2:c0:5b:d9:ed:8f:d1:27:c5:e6:80:0e:dd:80:ab:
                    7b:bb:35:56:24:e7:47:f6:33:6f:c8:8d:fd:fd:1a:
                    7b:f8:74:1b:b5:c2:b2:03:24:03:7f:61:a3:4c:ce:
                    d8:6e:17:35:3d:d1:a2:94:4f:b4:6f:1e:8a:ae:e9:
                    ca:81:69:1c:76:c3:9d:2e:98:b8:9c:1d:45:c9:ab:
                    3a:67:17:51:cb:52:4e:ba:02:c0:cf:75:11:84:5a:
                    cc:45:af:c2:da:bc:0a:ac:8d:4d:43:3f:81:63:ee:
                    8c:72:b4:3d:d1:16:ef:1b:bd:3d:8f:a9:07:c2:c3:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:89:29:39:7A:80:96:F3:5B:2E:51:17:76:DC:C0:B4:E0:DD:09:D3
            X509v3 Authority Key Identifier:
                keyid:7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:b2:84:21:83:e7:1c:6e:a6:b6:50:58:af:c6:ac:0e:b4:
         78:ca:27:bd:bf:d0:a3:65:88:c5:3f:25:13:e6:25:67:32:9b:
         d0:08:4a:ec:e5:f2:42:6f:c7:eb:7a:ac:40:cf:23:d5:9e:62:
         1a:f1:fa:5c:69:3d:97:6d:0e:99:15:05:de:81:53:03:c7:da:
         bd:2f:a4:2b:d8:ea:05:1e:94:9d:ec:f9:77:81:0a:92:aa:d3:
         2b:78:6f:6c:ad:9e:62:76:c8:65:85:67:63:8e:cd:ce:7b:19:
         3e:e1:56:c9:83:50:77:25:17:63:96:53:9d:1c:b3:a2:87:a4:
         03:7e:03:df:b7:65:ac:f6:35:68:28:e3:1a:d9:d2:f7:9f:79:
         3a:e7:51:67:83:ff:c3:da:b7:9f:28:ba:08:e1:1a:8d:fc:2b:
         0f:24:37:4f:60:ef:d1:e8:4f:85:f3:a3:53:2b:86:f8:ca:89:
         4e:a8:a5:94:53:ae:4a:aa:96:e7:c0:b8:0b:56:51:3f:25:72:
         20:ce:df:ce:af:f3:b8:b5:d7:6f:38:94:11:96:c0:95:64:15:
         45:a1:11:4b:b7:c0:eb:56:5c:ae:76:39:29:57:42:1d:1a:91:
         96:de:24:ae:0d:4a:6d:0c:d4:9f:08:0e:b0:47:ee:aa:7b:ec:
         7b:3c:07:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 01:03:06 2025 by rpki-client