This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
File:                     nzVmCVwLDAIx0LuWkl4DidHCbFc.mft (raw, json)
Hash identifier:          rXSyRN3lFnvAkKuTFXou8BsEaLaHmXer8IfhQx1TnCY=
Subject key identifier:   ED:F9:73:56:88:E0:20:6A:69:67:09:A2:AD:83:AF:73:B9:EE:71:22
Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
Certificate issuer:       /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
Certificate serial:       048F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
Manifest number:          048A
Signing time:             Thu 04 Dec 2025 22:34:46 +0000
Manifest this update:     Thu 04 Dec 2025 22:34:46 +0000
Manifest next update:     Thu 11 Dec 2025 22:34:46 +0000
Files and hashes:         1: nzVmCVwLDAIx0LuWkl4DidHCbFc.crl (hash: JhSTjMT5gBPLzDNMm4G2bd5TQVm4v7xE6pfh9bggh0k=)
                          2: 2D8428C662F511ECA1FC5A6CC4F9AE02.roa (hash: eK751E7R4LxxFW4h/LYCAzYwLSV3p/y1kJ/HUZuDz6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl
                          rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167 (0x48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911403B, serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
        Validity
            Not Before: Dec  4 22:34:46 2025 GMT
            Not After : Dec 11 22:34:46 2025 GMT
        Subject: CN=69320c86-276e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:0c:c7:7e:0a:66:49:5e:74:3c:1c:29:67:
                    c8:61:0c:cb:0f:4a:07:1e:75:3a:5d:57:2b:d9:c4:
                    6a:cf:ec:c5:a2:d6:34:56:e0:c4:4c:0b:8e:1b:bd:
                    52:47:22:1f:2a:c5:2b:8c:60:f6:7f:48:1e:8c:03:
                    ff:de:3d:3f:ca:22:14:bb:77:99:04:13:37:d3:cd:
                    80:fd:47:f6:c8:1b:ae:e8:04:f0:d8:60:41:c8:88:
                    8d:7a:90:69:ac:25:45:89:89:91:60:93:d9:08:eb:
                    98:36:8c:84:8f:09:7e:da:8a:31:83:28:7c:d4:39:
                    23:ea:eb:a6:d7:ac:2a:ae:a5:a6:46:a9:a7:47:c6:
                    12:6c:91:18:c7:8e:8c:06:00:f4:bf:76:4f:eb:58:
                    41:bc:60:12:5e:df:64:1f:af:1f:ba:0d:23:d7:b2:
                    74:53:87:7a:39:c3:8c:e6:8a:09:3c:9c:11:9c:0d:
                    be:5e:17:5c:fc:6b:1c:b4:52:95:e8:f4:2d:02:f1:
                    1b:ae:75:fd:ac:e9:66:c0:39:1b:43:66:21:29:42:
                    a7:af:69:89:81:57:7e:e1:d9:b6:21:77:3c:a1:f4:
                    38:ef:5d:cf:d4:53:bb:57:c4:a3:e5:ac:6a:53:73:
                    92:9c:0f:4f:0f:15:74:cc:f8:99:54:9d:6d:55:7d:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F9:73:56:88:E0:20:6A:69:67:09:A2:AD:83:AF:73:B9:EE:71:22
            X509v3 Authority Key Identifier:
                keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5e:85:cb:8e:c7:09:a2:17:cf:c6:dc:93:7d:f0:dd:7c:59:
         6e:99:d3:e2:c9:a7:76:09:44:35:a5:7c:c6:9f:2e:ec:a6:b7:
         26:bd:09:40:d9:c0:20:45:93:d6:18:ec:b8:93:2e:51:5e:5d:
         16:65:a2:fc:ac:11:46:63:2a:e9:c6:1a:31:a2:3f:71:c9:8c:
         1c:77:91:3e:cb:8c:63:17:55:29:6c:82:ce:4a:3e:03:06:e2:
         bf:ef:47:45:6c:21:d2:36:70:08:02:59:bb:33:f5:fb:21:9e:
         ca:24:53:06:5d:ee:51:35:b8:77:4e:d2:c2:04:75:da:d2:c2:
         dc:b6:e4:58:e9:b5:a6:e3:90:ba:85:b8:92:de:4a:c2:82:14:
         32:77:3e:11:ee:14:93:c8:f6:2a:85:bf:10:fb:b2:db:28:ea:
         1c:d7:64:de:9d:90:82:b6:d4:2a:b5:2c:01:c5:27:07:37:3f:
         64:5f:32:18:cf:a7:dd:1e:a9:84:46:4e:76:37:68:ae:04:de:
         5b:5c:3f:39:64:5b:26:40:d8:4b:62:20:66:35:5c:43:9d:84:
         b3:7f:79:45:a6:2f:43:23:7b:ca:23:f3:53:1b:af:a9:5f:b4:
         f9:70:0b:9d:af:d4:1e:26:fb:1a:90:9e:ef:a7:8a:e6:92:f4:
         cb:66:7c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:09:28 2025 by rpki-client