This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
File:                     xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json)
Hash identifier:          drVD71Jv+oxvbtEFe/wEk9kOE1c2lq+epfPKVV0Pd4s=
Subject key identifier:   05:B5:AF:57:7F:E8:1D:85:19:FE:F5:7F:DA:EA:4A:0E:68:34:77:D1
Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
Certificate issuer:       /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
Manifest number:          CC
Signing time:             Fri 05 Dec 2025 01:54:33 +0000
Manifest this update:     Fri 05 Dec 2025 01:54:32 +0000
Manifest next update:     Fri 12 Dec 2025 01:54:32 +0000
Files and hashes:         1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: RP6zDm0k56cyRGd3U25gTqqD0DUlxAouwfHWjgXgvas=)
                          2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=)
                          3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
        Validity
            Not Before: Dec  5 01:54:32 2025 GMT
            Not After : Dec 12 01:54:32 2025 GMT
        Subject: CN=69323b59-4732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:ba:65:1c:2b:6c:ce:d0:42:06:2f:e1:6f:
                    09:ff:ff:03:57:e3:0c:76:59:fd:97:6f:ae:90:0f:
                    2b:fb:b9:a2:e8:43:bf:bd:5f:63:b3:e4:81:27:ff:
                    d5:9c:f6:30:e6:f6:90:19:c2:ec:e3:2b:21:46:d1:
                    61:28:7e:93:1c:06:7e:94:df:83:ab:52:e3:36:e0:
                    70:35:5d:12:4e:18:e7:eb:4b:4a:1a:66:0d:40:de:
                    c8:02:03:99:84:3f:c8:34:8f:3d:f0:ee:8d:79:a9:
                    73:f8:50:b7:1f:a4:2d:a0:80:36:3d:fa:ed:34:83:
                    8e:42:6a:a5:46:05:d7:49:21:c5:6f:d6:1e:6d:8b:
                    e4:02:eb:4f:e4:a8:62:18:7e:6a:be:83:77:28:31:
                    b7:f2:f7:82:d6:1f:f3:23:54:bd:80:cf:02:c3:74:
                    da:c6:f1:cb:a7:1b:cd:16:dd:da:45:fc:03:13:8e:
                    fe:4c:4e:5b:3e:99:44:ab:5f:bb:25:af:ef:00:33:
                    be:47:fe:26:89:2d:95:85:eb:8f:3e:70:87:ee:de:
                    09:0a:3d:44:61:cd:71:c4:a8:5a:a5:40:b2:95:14:
                    c6:bd:ad:71:15:b5:93:55:92:22:35:39:1c:09:e2:
                    c8:be:ff:c9:f4:15:a4:7d:90:f4:29:f0:a4:b0:d0:
                    4c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B5:AF:57:7F:E8:1D:85:19:FE:F5:7F:DA:EA:4A:0E:68:34:77:D1
            X509v3 Authority Key Identifier:
                keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7f:78:39:ee:a6:da:63:fc:f3:fe:18:03:eb:13:18:69:7c:
         1e:0c:4a:a5:d4:9b:da:56:52:c8:9d:df:a1:bd:6c:a8:61:cf:
         54:9d:b8:34:a5:03:60:92:69:87:97:21:bc:c5:c1:97:73:a5:
         b5:23:22:04:d9:8d:4c:06:15:14:0c:22:d3:c9:ae:36:fc:cc:
         16:4e:df:47:4f:a4:6b:5f:7b:4e:cd:2e:af:ea:48:37:51:61:
         82:22:e5:d8:cd:37:2d:ee:bb:80:d2:8e:c6:be:7f:46:50:a4:
         37:46:ad:74:5a:e9:ba:72:53:ad:0b:61:d6:e8:34:15:ae:a3:
         5d:7c:9d:91:7a:77:8c:53:6f:1d:34:35:b7:66:4a:ac:45:ee:
         52:fa:d0:e7:da:f5:a5:d8:2e:8f:21:70:08:68:9e:71:14:85:
         d8:c1:24:83:78:50:3d:05:22:1c:07:35:21:03:14:a5:a3:bd:
         99:dd:bc:e5:a1:5f:02:4b:98:83:f1:13:f3:ab:9f:4f:e1:ff:
         9c:14:0b:6f:00:4b:f3:ce:23:33:5b:67:a5:2b:e7:cf:a9:a0:
         9f:30:50:bd:4f:5c:df:37:36:5d:02:0e:42:6a:02:d6:b9:fe:
         5b:fb:61:cb:dc:a8:de:ed:72:ed:96:a0:1a:38:eb:27:80:1c:
         cf:97:f7:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJCODUxMTAvBgNVBAUTKEM1NTY0REVDMTAxNjYzQkY0M0QzRjJFMzQwMzk0QzAw
NzY2QTYzRTMwHhcNMjUxMjA1MDE1NDMyWhcNMjUxMjEyMDE1NDMyWjAYMRYwFAYD
VQQDEw02OTMyM2I1OS00NzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyJ66ZRwrbM7QQgYv4W8J//8DV+MMdln9l2+ukA8r+7mi6EO/vV9js+SBJ//V
nPYw5vaQGcLs4yshRtFhKH6THAZ+lN+Dq1LjNuBwNV0SThjn60tKGmYNQN7IAgOZ
hD/INI898O6Nealz+FC3H6QtoIA2PfrtNIOOQmqlRgXXSSHFb9YebYvkAutP5Khi
GH5qvoN3KDG38veC1h/zI1S9gM8Cw3TaxvHLpxvNFt3aRfwDE47+TE5bPplEq1+7
Ja/vADO+R/4miS2VheuPPnCH7t4JCj1EYc1xxKhapUCylRTGva1xFbWTVZIiNTkc
CeLIvv/J9BWkfZD0KfCksNBM5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAW1r1d/
6B2FGf71f9rqSg5oNHfRMB8GA1UdIwQYMBaAFMVWTewQFmO/Q9Py40A5TAB2amPj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS9DQ0JCQUJFQTlG
NjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3OUQwX0xqUURsTUFIWnFZ
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3hWWk43QkFXWTc5RDBfTGpRRGxNQUhacVktTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkI4NS9DQ0JCQUJFQTlGNjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3
OUQwX0xqUURsTUFIWnFZLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6f3g57qbaY/zz/hgD6xMYaXweDEql1JvaVlLInd+hvWyoYc9Unbg0
pQNgkmmHlyG8xcGXc6W1IyIE2Y1MBhUUDCLTya42/MwWTt9HT6RrX3tOzS6v6kg3
UWGCIuXYzTct7ruA0o7Gvn9GUKQ3Rq10Wum6clOtC2HW6DQVrqNdfJ2ReneMU28d
NDW3ZkqsRe5S+tDn2vWl2C6PIXAIaJ5xFIXYwSSDeFA9BSIcBzUhAxSlo72Z3bzl
oV8CS5iD8RPzq59P4f+cFAtvAEvzziMzW2elK+fPqaCfMFC9T1zfNzZdAg5CagLW
uf5b+2HL3Kje7XLtlqAaOOsngBzPl/dk
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:59:09 2025 by rpki-client