This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft
File:                     0zOneHph_4bHRbR0CWr2muMaz_E.mft (raw, json)
Hash identifier:          17PFfnoraA17p/eU8iXQ+ydY61I8xNqs5M8TgA5jzh4=
Subject key identifier:   7C:75:4E:24:C2:E5:02:12:0E:73:44:A1:0A:43:57:89:AD:1E:DA:C4
Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1
Certificate issuer:       /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1
Certificate serial:       0652
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft
Manifest number:          064B
Signing time:             Thu 04 Dec 2025 21:25:59 +0000
Manifest this update:     Thu 04 Dec 2025 21:25:58 +0000
Manifest next update:     Thu 11 Dec 2025 21:25:58 +0000
Files and hashes:         1: 0zOneHph_4bHRbR0CWr2muMaz_E.crl (hash: luTBfHsSLxNMt2CAGApoEZRxcirFyTBwHGtBYLra8ns=)
                          2: 4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa (hash: H8xIAhw48eYU+2s4QvMDpQyUyWlzmnbyud68jyECAL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl
                          rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1
        Validity
            Not Before: Dec  4 21:25:58 2025 GMT
            Not After : Dec 11 21:25:58 2025 GMT
        Subject: CN=6931fc66-a711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:54:2e:a6:b1:17:3a:44:ce:13:86:b9:21:
                    f7:c3:9e:d8:77:92:d8:23:4c:4e:d1:9e:3c:a8:6d:
                    e6:58:a8:8f:62:6b:c4:6b:15:8b:dc:1e:cb:58:f0:
                    20:e5:38:5b:51:7c:e8:5c:85:65:6c:98:9d:b2:11:
                    ab:ee:8a:58:1e:4a:e2:59:a0:b2:93:0c:dc:1b:95:
                    27:2c:55:c9:6d:44:bd:41:0b:23:48:08:c1:55:4f:
                    b5:9b:a5:e3:88:f4:ba:59:c5:1d:13:0b:d4:2a:a0:
                    7a:2b:ab:d0:61:94:99:0b:47:7c:fe:7a:97:9a:99:
                    a4:79:f5:46:92:b2:6e:d1:48:cc:3a:c4:f1:ee:1f:
                    4b:31:34:34:2b:87:1e:4f:c5:84:f3:a2:ca:b1:5f:
                    02:2f:8a:c0:fc:02:74:09:b7:bb:dd:af:20:b3:dd:
                    30:9c:7d:1c:af:b1:c7:b7:a2:60:82:04:1e:97:d5:
                    aa:de:7e:65:d4:c7:bc:a4:c0:1a:34:84:0f:97:a1:
                    e3:38:ae:ee:b5:f0:54:3d:41:73:36:f2:14:c3:0f:
                    ef:eb:ba:62:90:fc:1c:5d:25:30:8f:62:59:e5:ba:
                    f1:60:da:2b:6d:e5:89:4c:98:d3:18:4c:9d:58:83:
                    cd:4a:16:e6:7b:08:d5:82:14:ae:c1:ab:5f:ad:fa:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:75:4E:24:C2:E5:02:12:0E:73:44:A1:0A:43:57:89:AD:1E:DA:C4
            X509v3 Authority Key Identifier:
                keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d6:c2:45:3d:7d:5b:0a:ef:d4:7c:5d:2f:95:c9:76:ba:0d:
         55:79:e4:c0:2d:13:fd:3b:d0:6f:95:4a:22:0e:b3:41:e9:74:
         21:30:80:11:5f:dc:9d:e5:ef:46:eb:f8:5e:b8:a7:81:7f:65:
         ff:88:84:59:ed:3d:7f:0f:ac:f1:f9:32:37:6b:93:f8:1a:71:
         62:7f:3b:7b:de:a2:42:04:c8:45:2e:b8:a9:63:3b:de:3a:29:
         56:79:49:8e:5d:c0:ba:23:ec:34:b3:d4:48:6e:4d:d4:65:66:
         7b:d0:bb:9a:fa:cd:8e:5b:e8:da:49:29:e6:60:5f:1d:b8:5b:
         aa:7c:d9:f9:7e:8b:45:69:cf:11:1f:a9:39:b2:f4:15:c6:c9:
         9c:3b:47:e9:77:37:e5:c2:85:24:64:5a:73:55:22:46:ea:bb:
         68:64:73:bc:c4:f0:37:b1:9c:4d:18:c6:76:f2:ca:67:88:ab:
         41:4a:e6:a5:a9:f1:9f:80:f4:1c:9c:fc:5e:6d:ee:d0:cd:9a:
         a5:35:a4:8b:7e:c4:98:f5:de:23:f2:35:29:e3:a6:ff:bb:27:
         48:48:92:c9:81:96:d1:f3:80:4a:e1:8f:42:54:77:f4:ef:9f:
         17:ab:b0:d2:41:fc:ee:7d:51:8a:18:bf:94:83:e0:80:57:c5:
         f6:55:43:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:48:11 2025 by rpki-client