This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
File:                     FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json)
Hash identifier:          l/lAV/qabqG8KC5dxhgw5P3ag3TANRwrsW7RNdKDPiw=
Subject key identifier:   D7:D3:9F:FA:41:49:98:87:35:BD:5C:AB:C8:5A:C1:17:0D:BB:68:8A
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Certificate issuer:       /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial:       35B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
Manifest number:          3545
Signing time:             Thu 11 Dec 2025 03:11:43 +0000
Manifest this update:     Thu 11 Dec 2025 03:11:42 +0000
Manifest next update:     Thu 18 Dec 2025 03:11:42 +0000
Files and hashes:         1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: vUE2TaQNwNqqI1+0zhEgIcVd40y7yZObGeL9ty6YdyA=)
                          2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: X7IQZ58omWK+gIrKdat0h/5c8or0W6ntGEo9z6naCo8=)
                          3: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: IzD5q2GzmuV18q1dnBjmacTQl4qcdKe2UsljJfilqlM=)
                          4: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: 1DqkZy0Sr7x/NV3lD1tkE7OMsC3mnmbQH1B1oR6rOnw=)
                          5: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: qTYeOx6pg1ogjikS/4HOIDZ4QqzqAPHZTv7DK6zo/c4=)
                          6: 4214F694D4CF11F0822D643BC4F9AE02.roa (hash: xrPMTyxZfW4JtLoXbO3lxa5rJuoLn0DNA6PUd1wUBGc=)
                          7: CE0E8E88D63E11F09685A732A6248E41.roa (hash: +SrI+C6jBI8k+HemItHqiKp0Ap1j9FHZeHONesJdVWk=)
                          8: A4C78624D4CC11F083620C83C4F9AE02.roa (hash: RMhtKWFizFNhImSOlDSqnOlsBhuPDi9/8pnyDBHx2dI=)
                          9: 1BFF9222D63F11F0B4EDAD32A6248E41.roa (hash: hXTHEmZmsLFD450rdp2qtQHAv48s6cbNoFsPBYhdZ8A=)
                          10: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: snvd+5sq9m/YOaEHMBb2pxjCYxt/qvZ6KU5dEMOAGDw=)
                          11: 427996B2D4CF11F0BFE5643BC4F9AE02.roa (hash: 4VNLn+x8t23/JHL3ZOopb+YwUiMDsvRa6dDINvkfAVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
                          rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 03:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13744 (0x35b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
        Validity
            Not Before: Dec 11 03:11:42 2025 GMT
            Not After : Dec 18 03:11:42 2025 GMT
        Subject: CN=693a366f-fd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e6:26:03:58:94:ef:5b:c8:a8:94:6a:09:a3:
                    1d:a5:64:63:4a:38:72:36:19:a8:55:ac:1b:b2:2a:
                    e2:72:03:ec:11:af:99:1a:c8:7b:0a:dd:3c:85:8f:
                    66:57:a8:80:62:57:7f:6c:b7:3f:bc:fa:91:52:73:
                    60:e0:a3:04:82:24:30:92:0f:18:ac:74:4e:19:cc:
                    95:3c:7b:2f:c0:8d:52:84:6c:a6:86:dd:56:65:04:
                    10:59:f2:c0:25:d2:a1:c2:78:4a:d0:97:3e:8a:3d:
                    55:58:31:5d:76:2b:16:4b:95:7c:a1:1a:41:5e:44:
                    ac:9b:e6:d7:db:e6:cc:3d:20:cc:59:70:61:0c:4f:
                    79:d7:46:64:2a:55:7c:cc:8f:9b:c9:3f:2f:91:16:
                    7b:2c:b8:db:f9:d4:f1:ab:ed:0e:62:7a:f9:64:21:
                    02:83:32:9b:a2:cd:37:df:72:7e:dc:a7:96:a1:51:
                    6c:44:ec:4a:59:f4:26:46:15:52:93:1a:4f:f0:07:
                    84:de:19:6f:cd:01:c9:25:67:a7:7e:a5:72:c1:b3:
                    c5:ae:2a:dc:6b:16:d1:6d:00:c9:15:a8:3f:8b:d7:
                    91:fa:41:33:4f:c8:a9:ba:0f:16:c0:46:77:af:95:
                    c2:a7:7b:fd:c5:76:16:e9:60:82:db:eb:83:db:7f:
                    be:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D3:9F:FA:41:49:98:87:35:BD:5C:AB:C8:5A:C1:17:0D:BB:68:8A
            X509v3 Authority Key Identifier:
                keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b3:3c:21:bf:51:89:95:e2:92:b8:90:1b:3c:f3:42:c2:2c:
         22:ae:a3:01:79:ab:38:5d:1f:d5:22:7d:18:08:31:8f:6e:69:
         6a:2a:17:a2:51:90:7d:0b:56:d2:65:ee:dd:dc:95:dc:76:4f:
         98:66:bf:ca:10:c7:0a:a5:af:27:90:cf:e4:eb:62:a6:96:5a:
         37:89:cb:ac:3e:49:4a:68:73:28:5c:05:62:1c:21:d4:50:c6:
         6d:81:cc:0d:1d:5a:35:72:8f:f2:91:87:22:01:76:f6:ed:19:
         3b:25:23:5c:d9:fe:01:91:7b:4d:35:fc:a8:3a:e8:bc:4e:90:
         af:11:e8:c4:63:27:9c:ec:a2:b9:52:fc:4b:3e:6c:48:3a:19:
         d4:55:63:82:00:b8:e6:0d:bf:5c:01:4b:b3:bf:de:42:9c:12:
         06:ac:10:67:29:21:eb:d0:b3:be:c1:a9:f0:b6:99:38:48:73:
         85:fd:09:af:56:38:a9:92:7b:ad:58:50:ce:ca:01:31:13:f6:
         2c:4e:f0:0b:00:d1:d7:e7:d9:69:21:e4:be:92:cb:70:5a:b7:
         aa:26:b3:87:c2:ab:17:41:71:26:72:5e:44:e4:49:73:a9:ad:
         5c:96:85:c7:fe:91:62:82:64:91:69:0d:88:aa:d7:98:93:ba:
         02:85:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 14:22:51 2025 by rpki-client