This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
File:                     FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json)
Hash identifier:          ifU2TFpGUyd0b6hZQpWO/UiUXcjZe2AACKCaxY8lKFI=
Subject key identifier:   EB:C7:2B:B6:EA:30:C1:92:14:A9:A3:18:29:D5:0D:00:CB:F1:EE:27
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Certificate issuer:       /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial:       0226
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
Manifest number:          0221
Signing time:             Sat 13 Dec 2025 01:24:50 +0000
Manifest this update:     Sat 13 Dec 2025 01:24:50 +0000
Manifest next update:     Sat 20 Dec 2025 01:24:50 +0000
Files and hashes:         1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: dJbMLMN3uGcnc3LOcXgFf9G8Licupi2xa5avJ5qgMN0=)
                          2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
                          rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 01:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
        Validity
            Not Before: Dec 13 01:24:50 2025 GMT
            Not After : Dec 20 01:24:50 2025 GMT
        Subject: CN=693cc062-302f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:9f:21:90:7c:5e:28:74:73:61:d1:1d:18:
                    07:c4:c0:3d:39:d4:ad:3d:e2:0c:bb:23:7c:3e:37:
                    74:08:14:42:20:b7:26:27:f9:f9:da:71:b5:f2:ba:
                    7b:b0:35:1b:8c:83:20:86:79:08:37:ea:e3:27:bf:
                    76:c9:e3:9e:6a:5b:52:3c:06:34:16:5f:42:50:4f:
                    99:5b:3d:3c:ab:dc:b7:a4:53:fd:47:d6:c5:dd:67:
                    8e:33:80:1f:bc:54:9a:dc:84:f5:90:d6:d4:7f:f4:
                    6d:e7:53:f6:62:bb:f7:9b:ce:4e:4a:a1:4c:d2:ef:
                    43:d7:b6:db:33:55:82:cd:43:3d:a0:14:b5:51:eb:
                    55:a9:34:78:86:2d:70:d0:9a:a5:c1:75:01:5b:68:
                    91:0a:e5:5e:5d:04:4d:11:31:35:54:93:4f:46:48:
                    21:a0:44:a0:a8:a9:08:bb:21:59:fc:e2:00:76:9a:
                    5c:cc:4c:a9:06:24:aa:98:36:9f:ad:a4:c2:2d:23:
                    97:43:e0:9f:a8:21:a5:85:ca:4c:58:3d:4a:a7:46:
                    72:12:b7:35:80:a3:63:35:22:c1:c3:09:62:fc:a1:
                    cc:3d:9c:63:5e:0d:de:37:40:d3:0e:4c:d5:75:6c:
                    23:21:07:1b:32:70:ee:df:9f:9e:9f:ce:00:0f:13:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C7:2B:B6:EA:30:C1:92:14:A9:A3:18:29:D5:0D:00:CB:F1:EE:27
            X509v3 Authority Key Identifier:
                keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:d7:c6:21:80:ed:b1:1d:de:c8:85:71:06:ec:c0:be:30:01:
         28:91:9e:da:f6:44:17:7d:cb:f5:1e:f6:e0:78:a8:65:32:8b:
         72:af:4b:88:8a:d7:00:a2:e1:ea:25:e5:ee:0b:5b:22:a3:ac:
         38:14:82:b8:99:ed:57:e0:c9:7b:f7:d7:7d:be:2e:3e:bf:2c:
         bb:38:17:c6:f3:a5:5f:d1:ef:e2:95:10:b6:46:de:2c:40:20:
         8e:c8:99:42:f5:51:58:ec:88:51:e9:87:7c:f3:4b:9c:6c:a2:
         80:59:c5:5c:85:a1:7f:37:51:b3:09:18:ed:58:06:c2:f9:73:
         36:0e:31:5e:c7:5a:e7:f2:82:44:01:5e:6c:3b:a5:49:e7:9b:
         aa:df:33:b6:7f:6a:5c:d6:90:dd:8f:49:8f:55:d4:d3:72:d3:
         65:02:2a:b3:fe:74:6c:75:3e:05:47:29:11:ba:b5:26:d3:91:
         69:99:87:93:78:ae:55:97:2b:62:19:bf:28:4f:b8:21:11:18:
         e9:f4:1e:2e:6d:18:fb:60:16:14:23:47:37:ee:7a:41:3a:64:
         30:c2:67:bd:49:bf:fc:f4:47:e6:b8:2a:a8:ce:c7:54:aa:e9:
         83:6e:4f:7f:af:33:3e:74:66:88:e4:c3:57:3a:a7:59:b7:4b:
         7b:1c:95:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 05:12:05 2025 by rpki-client