This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
File:                     fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json)
Hash identifier:          tlcRSNtsZtnpmg/t8UzvcZS8f6qFkuqeorwvnAgBzfw=
Subject key identifier:   C8:20:D8:95:07:85:9B:42:69:D5:AD:98:1E:4A:4E:AF:32:5A:9D:F6
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Certificate issuer:       /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
Manifest number:          015D
Signing time:             Thu 18 Dec 2025 22:32:27 +0000
Manifest this update:     Thu 18 Dec 2025 22:32:27 +0000
Manifest next update:     Thu 25 Dec 2025 22:32:27 +0000
Files and hashes:         1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: fv1lRaF/B8cqSUOFKUg/3Dl3XKEl7QlvoDvPp4OtbhA=)
                          2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: ZzX2pAU2hf9tsTLmwqMICAJ5lNGrFfo//Sr5B58TslI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
        Validity
            Not Before: Dec 18 22:32:27 2025 GMT
            Not After : Dec 25 22:32:27 2025 GMT
        Subject: CN=694480fb-eef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b1:41:f6:3a:a1:65:23:d8:85:1b:a6:09:3c:
                    29:4c:f2:80:13:94:e9:da:00:e2:62:55:39:8e:0b:
                    ae:92:58:97:b5:eb:1b:9b:d5:6d:a9:98:21:d3:f5:
                    00:cb:3a:89:c1:fa:e4:59:0b:da:cd:d3:b4:35:f5:
                    53:4d:15:ed:b5:0d:8e:95:55:14:97:e6:1c:91:d9:
                    e8:78:2d:e7:6b:b2:58:c3:77:97:4d:d7:27:2c:50:
                    68:8f:0d:c9:07:8c:cd:86:1c:ce:39:aa:bb:9f:06:
                    15:f1:ce:69:04:14:20:67:33:6e:a7:3a:7e:d4:53:
                    5c:92:d7:3a:f6:f4:ed:9e:c9:e5:86:a6:d9:da:84:
                    5a:58:d2:aa:44:63:6f:c4:f6:b1:16:05:8d:c3:87:
                    2a:f3:33:dd:d1:3b:7d:6f:dc:e6:da:b4:65:ea:39:
                    6f:8c:d2:6a:a0:7f:33:12:b7:7f:95:9a:df:6c:bb:
                    26:ff:b6:77:62:08:61:25:e3:d4:f8:da:c9:1c:e5:
                    eb:19:c0:70:0e:90:41:58:16:83:de:87:c2:a0:9e:
                    35:4a:03:8e:f5:40:71:1b:90:b9:f3:4d:05:97:95:
                    d1:19:e3:44:2c:31:d3:49:2e:88:b3:89:52:03:64:
                    a8:58:6f:a4:0b:01:3e:41:ce:b8:64:50:98:97:9e:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:20:D8:95:07:85:9B:42:69:D5:AD:98:1E:4A:4E:AF:32:5A:9D:F6
            X509v3 Authority Key Identifier:
                keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6e:78:2d:a6:0f:94:7e:a2:59:e0:b5:2b:8e:26:10:a4:47:
         fb:14:e8:5d:7d:a7:29:0b:3a:23:58:de:5f:e0:68:e0:a9:ef:
         27:36:e4:19:b4:72:ae:6e:33:04:4f:5f:46:ec:59:0c:77:16:
         fe:f4:71:45:52:70:d0:bb:e5:c1:89:87:d8:b4:a3:22:7b:56:
         c7:ae:66:8f:95:ee:40:86:51:72:0e:c9:0f:73:41:2b:07:14:
         e0:d3:e5:fd:48:96:9a:72:da:4f:3f:c2:8b:14:17:fd:07:fd:
         f0:4b:8f:c4:a7:6f:87:91:50:75:2f:9a:b8:ab:07:0b:de:ab:
         e1:bf:93:d0:c0:88:22:fc:ab:94:47:9a:f3:3a:94:00:cd:a0:
         96:de:4c:ca:76:6d:14:04:6a:0d:36:99:16:9a:f2:73:10:71:
         55:e9:e3:4f:0e:d1:27:aa:ae:d2:cd:12:2c:8f:b6:e3:dc:eb:
         30:1a:0b:f9:57:bd:97:7f:78:df:ce:30:e1:53:c2:93:7d:83:
         7a:ee:4f:6d:85:5b:1b:35:d0:92:53:ff:50:2e:58:26:4f:86:
         57:0e:97:a9:8d:40:41:5f:3b:ad:0d:4f:b6:d0:d1:dd:f7:1b:
         6a:dd:fe:ef:8b:75:4e:55:a1:38:2a:9e:ac:bd:86:a6:46:f1:
         19:d5:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:17:37 2025 by rpki-client