This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File:                     fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier:          nNrdMyos/v4MsKxHcLrWPVWJITz9gPLh7v1V4Gr3dNA=
Subject key identifier:   C4:6E:10:B9:0B:FC:8A:55:8D:11:D7:A6:60:AE:A4:EE:95:CD:E2:6F
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       0923
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number:          08BE
Signing time:             Sun 14 Dec 2025 20:06:58 +0000
Manifest this update:     Sun 14 Dec 2025 20:06:58 +0000
Manifest next update:     Sun 21 Dec 2025 20:06:58 +0000
Files and hashes:         1: fiRDENekVusSe5JsQvJteems24g.crl (hash: mdg+eUq90/OVb2TOd68xZqDZgGUH3CDKOUSDnzKsPCc=)
                          2: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: ygq1dkv+uF4QDS+bggz98LoWciehSBzYRj/fw8Od03I=)
                          3: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: /yoDz91aVKDMVKQFN5vWqL0kcfwjMSXqa0ohs5b1IqQ=)
                          4: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: vWyefttpePLkPBEoycC5X0lmEGRfAIuwi2Ngs4ojIYc=)
                          5: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: mA/WE2Bh4RmqFgp1Gp11Wu83VKDJFyoxbw2SeY/E7bk=)
                          6: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: NudhcCG6U8c/iVjiv9Q5GA7zP2bSr5Lt2Lyl6qOq+zo=)
                          7: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: UwbxqlIoeWN/uj0INOlxAStWat7EJVu9aWA6OuSDC9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 20:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2339 (0x923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Dec 14 20:06:58 2025 GMT
            Not After : Dec 21 20:06:58 2025 GMT
        Subject: CN=693f18e2-e114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b4:69:ef:a6:4d:4f:c2:89:a0:14:13:fb:4e:
                    02:38:83:7e:98:21:2a:80:0a:0b:55:f0:74:91:ea:
                    0a:ac:b5:3b:9d:70:0f:0a:1f:35:86:dd:b6:5d:d4:
                    d8:18:76:a7:e0:39:f3:00:96:99:db:62:c7:b6:48:
                    b5:d4:5d:46:a6:f1:f9:43:b6:7e:32:66:9c:85:86:
                    b3:ae:76:ee:71:61:7a:6f:7d:55:22:5e:e6:76:37:
                    ec:73:fe:76:a5:21:88:56:c1:fa:9b:47:03:7d:35:
                    8b:23:a4:78:01:c2:1c:90:de:7b:83:85:58:09:79:
                    ca:62:5a:85:90:f1:75:d5:bb:87:bf:a4:60:47:81:
                    c5:2d:eb:e2:05:f2:d7:f5:e9:1f:ae:d8:f6:0d:b1:
                    e2:6a:ad:88:43:7c:e8:52:bd:be:43:89:2a:f3:75:
                    9c:92:36:ec:58:01:33:bb:58:e3:02:f4:2f:97:56:
                    0b:0f:16:bd:00:dc:c0:3d:20:aa:40:33:e8:97:9b:
                    42:1a:4b:50:72:2a:e0:d4:d2:13:04:5c:c4:f9:9a:
                    1a:d6:4f:e0:94:71:f9:63:0d:a6:4e:a7:36:ee:d4:
                    84:fe:a1:a7:88:aa:d5:c7:38:13:b4:ca:28:f8:67:
                    5d:3f:a3:5a:54:9f:0c:45:2d:29:9d:6a:27:e1:6c:
                    1e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6E:10:B9:0B:FC:8A:55:8D:11:D7:A6:60:AE:A4:EE:95:CD:E2:6F
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:b7:f6:1d:39:56:a5:7c:9d:c6:5b:0f:fb:89:f4:08:bb:
         f4:d9:d5:29:6e:7d:b6:40:30:6c:ba:77:9c:6d:bd:61:c4:59:
         96:54:fa:7b:81:b6:d3:d9:aa:a4:78:32:b9:2b:48:39:5f:d2:
         4e:41:7c:84:64:6d:01:36:81:a6:b5:48:b0:78:e3:fd:2f:89:
         7e:07:6f:71:7a:60:61:4b:b6:28:21:ee:0e:be:56:2e:b5:ee:
         53:69:e6:a1:5f:5f:5c:ee:ea:01:e9:fb:e4:34:68:1b:26:21:
         aa:d5:b8:c8:ee:c2:7b:e8:dd:46:35:e6:5a:66:be:0d:31:a4:
         d7:ee:75:6a:9e:5d:a2:29:da:b6:89:aa:a2:2b:aa:33:96:69:
         64:2c:1d:31:50:a3:d2:b8:e7:b8:0d:84:18:af:78:35:4b:a6:
         05:c5:47:db:85:cf:a4:96:68:2f:9c:53:7a:02:2d:59:82:14:
         20:1d:b2:b7:b3:9b:cb:9f:d8:4b:de:02:35:47:fb:9a:6e:98:
         28:a4:e8:43:27:1d:76:60:6e:96:7b:2a:89:37:75:82:59:23:
         7b:a0:07:66:29:54:b5:55:c9:8e:00:9f:06:ee:50:89:96:91:
         76:cd:e8:8b:eb:a5:f9:8a:9c:f6:e2:bd:9c:86:09:7c:51:0e:
         63:85:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 18:59:52 2025 by rpki-client