This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
File:                     Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json)
Hash identifier:          6JJ9CC8tECMIzgJuHLulvXtYw2OPTifCEL1CCMf2mEw=
Subject key identifier:   EF:73:5F:F1:6A:7D:60:00:F9:BF:7F:26:CA:EF:A0:B0:84:EC:81:32
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Certificate issuer:       /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
Manifest number:          01D1
Signing time:             Tue 23 Dec 2025 01:53:36 +0000
Manifest this update:     Tue 23 Dec 2025 01:53:36 +0000
Manifest next update:     Tue 30 Dec 2025 01:53:36 +0000
Files and hashes:         1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: PWQ4iOWwl40lgPR1h1nZBPkkf4ns3phT9H6snn7FcMc=)
                          2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: GbdpkuqmY37s9wPgW3tN3BtEev3tZBJWQSfg/vR2zzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
                          rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
        Validity
            Not Before: Dec 23 01:53:36 2025 GMT
            Not After : Dec 30 01:53:36 2025 GMT
        Subject: CN=6949f620-27b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:90:1e:4a:f0:ef:94:46:92:93:6d:e6:70:1c:
                    a2:bb:e5:b1:69:80:f4:b3:5b:94:50:fd:de:8c:89:
                    e4:b3:5f:d3:58:f8:40:f4:45:a4:b7:59:2e:20:1f:
                    11:cc:0d:14:81:b6:c9:de:a3:22:51:c9:5a:c1:0f:
                    58:1c:a6:6f:b7:43:be:69:88:92:75:b4:06:fc:5e:
                    2a:81:91:1d:ca:d8:da:48:ff:92:05:44:b7:3a:38:
                    57:ac:ea:a9:4c:34:41:7d:65:e4:23:f3:a3:33:4c:
                    83:d6:34:f6:9c:54:f8:98:42:ba:c5:8d:a0:2f:eb:
                    d8:15:98:04:85:c8:12:4e:d4:1d:39:92:49:74:4f:
                    eb:fb:ec:fe:14:51:4f:ac:e4:24:37:06:46:d7:3e:
                    ca:44:21:06:5e:04:9b:6c:bb:67:48:83:ee:9b:d0:
                    7b:04:25:41:2d:4f:cc:48:bc:3e:54:93:69:ad:d0:
                    c4:e5:19:a9:c4:57:5b:c0:2e:e4:7c:23:bf:4a:34:
                    b3:0d:a5:7d:bc:38:6c:40:5e:5d:39:f5:e5:18:e4:
                    85:be:81:27:de:c0:e8:05:a7:dc:40:3d:16:00:3b:
                    75:d4:71:2a:d9:39:04:37:6b:9a:1b:9c:10:f7:59:
                    de:bf:7e:01:5e:87:fe:aa:7d:8c:e7:02:79:1b:a0:
                    10:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:73:5F:F1:6A:7D:60:00:F9:BF:7F:26:CA:EF:A0:B0:84:EC:81:32
            X509v3 Authority Key Identifier:
                keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:60:0e:10:b1:bb:3d:9d:dd:22:d1:ed:b3:7a:1c:72:03:80:
         78:1d:fc:4e:e2:33:7b:e5:4f:d5:94:f3:d7:89:61:a2:de:e4:
         74:c5:e7:b9:8a:68:ae:6e:83:7d:05:ef:c3:9c:21:bd:b4:88:
         2b:7b:7b:7e:61:5b:4c:96:c9:08:2c:41:be:97:6e:23:9f:48:
         3a:3f:4e:e1:68:3e:6b:9e:07:9f:b9:a2:91:4d:57:85:cf:0d:
         bc:d9:b0:80:ab:48:7f:7e:b4:32:44:f4:0d:08:27:ad:03:30:
         f6:af:ab:63:77:da:cb:3c:a2:59:02:e0:d7:fb:43:59:d9:2a:
         f9:81:b7:c1:a2:4d:fa:09:b7:54:64:c0:df:a8:dc:99:5d:e8:
         86:20:70:46:59:f5:97:a9:dc:a9:bd:47:ed:4f:df:f0:06:67:
         78:93:8b:34:e9:0a:6c:8e:df:44:40:df:a7:1e:d8:4a:20:a9:
         e1:2c:04:66:13:6f:bd:2a:9d:45:56:e7:d4:4e:ed:0b:94:17:
         8e:74:78:0e:ad:25:2b:86:1f:36:05:39:04:99:10:f7:9e:57:
         be:3e:58:8f:9c:2a:98:54:9a:12:97:9a:37:38:64:19:a1:e7:
         fa:6a:28:d6:f1:87:3a:ba:1b:3e:6a:12:25:8c:c0:f3:61:99:
         df:e4:45:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG
RUI0RUI4NkMwHhcNMjUxMjIzMDE1MzM2WhcNMjUxMjMwMDE1MzM2WjAYMRYwFAYD
VQQDDA02OTQ5ZjYyMC0yN2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkpAeSvDvlEaSk23mcByiu+WxaYD0s1uUUP3ejInks1/TWPhA9EWkt1kuIB8R
zA0UgbbJ3qMiUclawQ9YHKZvt0O+aYiSdbQG/F4qgZEdytjaSP+SBUS3OjhXrOqp
TDRBfWXkI/OjM0yD1jT2nFT4mEK6xY2gL+vYFZgEhcgSTtQdOZJJdE/r++z+FFFP
rOQkNwZG1z7KRCEGXgSbbLtnSIPum9B7BCVBLU/MSLw+VJNprdDE5RmpxFdbwC7k
fCO/SjSzDaV9vDhsQF5dOfXlGOSFvoEn3sDoBafcQD0WADt11HEq2TkEN2uaG5wQ
91nev34BXof+qn2M5wJ5G6AQIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9zX/Fq
fWAA+b9/JsrvoLCE7IEyMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD
NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW
ekF2cG05T2RjTEwtdE91R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwYA4Qsbs9nd0i0e2zehxyA4B4HfxO4jN75U/VlPPXiWGi3uR0xee5
imiuboN9Be/DnCG9tIgre3t+YVtMlskILEG+l24jn0g6P07haD5rngefuaKRTVeF
zw282bCAq0h/frQyRPQNCCetAzD2r6tjd9rLPKJZAuDX+0NZ2Sr5gbfBok36CbdU
ZMDfqNyZXeiGIHBGWfWXqdypvUftT9/wBmd4k4s06Qpsjt9EQN+nHthKIKnhLARm
E2+9Kp1FVufUTu0LlBeOdHgOrSUrhh82BTkEmRD3nle+PliPnCqYVJoSl5o3OGQZ
oef6aijW8Yc6uhs+ahIljMDzYZnf5EWj
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:58 2025 by rpki-client