This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
File:                     _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json)
Hash identifier:          ++ud80khi+obbNIU6rO1eSjjjcrIoqI2f5gtpDGI+gk=
Subject key identifier:   DB:6E:47:96:66:42:77:73:8F:1A:61:03:B8:D9:D8:13:4D:04:8D:82
Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
Certificate issuer:       /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Certificate serial:       08E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
Manifest number:          08CB
Signing time:             Sat 06 Dec 2025 19:39:07 +0000
Manifest this update:     Sat 06 Dec 2025 19:39:06 +0000
Manifest next update:     Sat 13 Dec 2025 19:39:06 +0000
Files and hashes:         1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: iW4NQ4zfJuQfOumjvewd5v/H11oh40rL+wQD8aBUXFc=)
                          2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: /p1nc+7VxWl9wJcQ4iUMoK6PHm48jxAJkzvga1eMyM8=)
                          3: 2086256888B911ECAC54E716C4F9AE02.roa (hash: yiCrf2CBs1DTx9LePbZGWl/avup1Zfij9Oz3lNKWDkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2277 (0x8e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
        Validity
            Not Before: Dec  6 19:39:06 2025 GMT
            Not After : Dec 13 19:39:06 2025 GMT
        Subject: CN=6934865b-fb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:99:ed:d4:29:60:15:40:01:e3:e1:34:21:cd:
                    00:7b:23:1b:66:a1:fd:a6:13:98:7f:8e:bc:fa:89:
                    26:70:b0:1c:49:86:26:1d:4a:50:25:6a:f8:ec:4d:
                    f7:09:c0:62:0e:41:7c:24:54:14:d8:60:69:62:07:
                    94:d1:f9:1c:a2:d1:40:2d:af:72:26:db:9d:05:c0:
                    bf:4a:85:89:89:56:07:b7:ed:61:4c:0b:9f:aa:f8:
                    a8:4a:dc:bd:1a:88:86:9b:c3:53:9a:34:c8:b6:63:
                    8b:f1:b2:60:d8:2b:61:d2:26:55:53:49:b1:eb:55:
                    fd:08:3a:a7:22:57:43:18:3e:6a:ed:9f:05:a5:84:
                    b7:db:e7:13:fa:ec:cb:37:ca:1f:21:31:a6:0f:14:
                    95:dd:3f:72:72:71:dc:42:6e:c0:5e:9f:37:89:07:
                    9b:20:4b:11:9a:9e:37:1d:d9:ba:7b:53:cc:7d:10:
                    2f:0f:4c:28:bc:ab:2f:b2:69:c3:50:d0:a1:86:54:
                    10:52:1b:98:5a:5b:44:6f:c5:9c:7c:83:90:c3:d3:
                    82:92:a6:88:ce:5e:04:5c:17:30:7f:cb:66:12:39:
                    4c:17:f3:07:2c:82:f0:a7:5a:43:9c:59:05:ab:b5:
                    f6:b4:b4:88:6f:cd:04:f3:e3:09:67:72:4b:b9:c8:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6E:47:96:66:42:77:73:8F:1A:61:03:B8:D9:D8:13:4D:04:8D:82
            X509v3 Authority Key Identifier:
                keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:1b:9b:73:7c:37:9a:e6:ac:e6:9f:4e:72:d4:5d:b6:9e:
         e0:33:80:89:8c:51:22:7d:37:0b:c1:27:db:f1:59:70:1f:da:
         86:ca:0b:2b:7a:55:be:2f:36:bc:f7:41:81:12:4d:c9:85:e6:
         ba:92:f3:77:16:6a:f2:f0:17:28:dc:35:2d:dc:bd:1f:24:f4:
         a4:bc:cd:02:ab:bf:3b:a1:58:a5:8f:ba:d5:62:cf:2b:fb:15:
         bd:4c:c5:7a:a5:81:5e:d5:e2:59:bb:1e:7c:e9:6d:29:d4:bc:
         c9:67:52:cc:44:4f:d2:24:d2:9d:9a:b8:02:40:5a:2c:e7:95:
         ea:42:ae:88:1e:30:08:5e:ee:ed:3b:f4:56:52:4e:6c:27:4b:
         34:b3:64:dc:42:7f:ff:71:0d:c5:85:91:05:41:90:bd:3a:f5:
         65:45:b0:a0:20:4c:3f:eb:4e:86:b8:32:45:42:b2:b9:b4:1f:
         e3:97:68:5b:ba:ff:87:35:89:a3:b7:7c:43:f6:06:25:21:b4:
         69:7e:c6:e4:84:b0:93:56:83:81:57:56:2c:ed:73:59:45:b2:
         a1:b9:01:ee:76:eb:f8:e4:ee:09:e7:ef:cd:77:e0:a0:97:fd:
         4f:a6:10:58:2d:29:cd:66:81:62:94:31:9d:84:c4:8e:ee:75:
         a5:4c:a0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 16:59:48 2025 by rpki-client