This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
File:                     fuv673m_iD6_Bwd6m_QQ6jHv98o.mft (raw, json)
Hash identifier:          lDnKUEKGe6I4iZZEDxJwihais1VutoaKRrZM2lBRoBg=
Subject key identifier:   1A:95:0D:2C:D3:17:48:83:BA:93:E4:3A:3A:56:9C:70:0E:CB:2D:BB
Authority key identifier: 7E:EB:FA:EF:79:BF:88:3E:BF:07:07:7A:9B:F4:10:EA:31:EF:F7:CA
Certificate issuer:       /CN=A91BA0DE/serialNumber=7EEBFAEF79BF883EBF07077A9BF410EA31EFF7CA
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
Manifest number:          01B2
Signing time:             Tue 23 Dec 2025 02:10:40 +0000
Manifest this update:     Tue 23 Dec 2025 02:10:39 +0000
Manifest next update:     Tue 30 Dec 2025 02:10:39 +0000
Files and hashes:         1: fuv673m_iD6_Bwd6m_QQ6jHv98o.crl (hash: T7eHDlPJ1HcxYwlbKjmXxqhJHihe5pcxN4ilSfOKIQs=)
                          2: 049C5BF84ACB11EE9CB50538C4F9AE02.roa (hash: yL6ZRwTXhyUQOCbmgwdpXW/cxXexzW0IC+NCYSMtGY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0DE, serialNumber=7EEBFAEF79BF883EBF07077A9BF410EA31EFF7CA
        Validity
            Not Before: Dec 23 02:10:39 2025 GMT
            Not After : Dec 30 02:10:39 2025 GMT
        Subject: CN=6949fa1f-eb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2e:cc:15:a5:f8:46:cb:5c:67:87:a0:17:c1:
                    c9:e4:19:88:04:d9:60:a2:ce:79:ed:ff:e6:cf:b1:
                    22:56:0b:9a:ce:65:0b:bc:ed:d2:f1:b5:cf:65:d2:
                    b5:ae:ed:47:9c:52:25:69:b5:85:a4:ca:6c:8f:22:
                    2f:f3:fc:2f:e2:14:d6:3f:7e:be:ec:4c:78:18:52:
                    ab:9f:54:b1:65:bf:3a:29:98:03:47:f2:c4:39:67:
                    5e:f2:f7:95:9e:ec:14:8b:3a:6b:13:fe:2d:9d:00:
                    6e:54:21:98:51:c8:31:95:ed:2f:f9:25:2a:9e:02:
                    50:25:5a:e5:6b:29:9c:9b:70:af:be:61:41:08:06:
                    97:fa:ef:a3:c8:50:de:3d:0a:ee:84:07:62:6a:6c:
                    c8:7d:0f:26:37:2a:94:01:18:4f:23:88:c5:0f:08:
                    6c:8b:66:2f:48:a7:83:29:6e:dc:64:dd:79:99:f1:
                    48:e9:36:5a:1d:e1:e9:e8:09:f5:2a:2d:e7:ea:7a:
                    8c:43:f3:4e:76:d6:b6:14:0e:a5:fb:c6:c2:f3:43:
                    18:0c:65:58:44:8d:43:ba:15:f0:89:d7:24:d4:d2:
                    13:98:6f:de:68:90:24:d4:91:22:89:5f:5d:3c:00:
                    b9:fc:48:36:04:44:95:72:1e:b0:90:c6:6c:58:3c:
                    2f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:95:0D:2C:D3:17:48:83:BA:93:E4:3A:3A:56:9C:70:0E:CB:2D:BB
            X509v3 Authority Key Identifier:
                keyid:7E:EB:FA:EF:79:BF:88:3E:BF:07:07:7A:9B:F4:10:EA:31:EF:F7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:15:ff:e3:75:2f:88:8d:46:05:53:26:6e:f8:6d:7f:03:a3:
         b1:d4:54:56:b2:b1:2d:53:3a:f3:a5:43:5f:49:a2:e9:fa:bf:
         f9:e4:3e:ab:b6:87:4c:ed:c6:a9:a6:ab:1d:e0:a9:32:92:d4:
         94:3d:6a:2e:69:20:ee:e2:6d:5e:19:a1:07:78:13:a5:80:53:
         3c:ed:8b:01:5d:55:bf:4f:ce:fa:f2:26:12:0f:eb:50:30:50:
         eb:27:d3:44:8c:bb:dc:3b:31:0d:6a:b7:40:24:b0:14:62:2e:
         b9:46:67:3c:9a:7d:d7:d8:25:00:dc:3c:88:47:29:29:9f:af:
         52:79:bc:1f:ac:06:24:62:97:26:a9:88:65:b1:37:89:37:64:
         a1:87:32:d2:d4:ca:45:6a:52:3e:e5:ab:bb:1c:df:7a:ac:27:
         74:29:07:63:b4:eb:98:1b:89:e7:65:aa:3a:88:19:65:7b:e5:
         2f:6a:2c:fc:1a:50:91:30:dd:32:86:6f:a5:fa:af:ba:37:4f:
         e5:91:c4:e9:0f:75:90:32:8c:31:28:e2:82:fc:60:2a:ab:d3:
         dd:33:bf:14:c0:ee:25:57:44:34:db:f9:0a:f4:d3:e5:c2:2b:
         db:ce:04:fe:2f:d3:32:aa:b9:2c:18:d4:07:48:f6:59:9c:f3:
         37:e3:cd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:49 2025 by rpki-client