This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
File:                     Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json)
Hash identifier:          ZsqltxwGhArkqc41Wy9JljxPP7LUkZYnR/cLv3LyDoU=
Subject key identifier:   9C:F9:7C:75:63:67:7D:FC:BA:5B:3A:B4:87:28:7A:16:7F:43:EC:90
Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3
Certificate issuer:       /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
Manifest number:          F5
Signing time:             Fri 05 Dec 2025 03:15:58 +0000
Manifest this update:     Fri 05 Dec 2025 03:15:57 +0000
Manifest next update:     Fri 12 Dec 2025 03:15:57 +0000
Files and hashes:         1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: wKv2wwCGWjqkG6a7vK0PZmbpxca6gKX0x3yX0Jenbnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl
                          rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
        Validity
            Not Before: Dec  5 03:15:57 2025 GMT
            Not After : Dec 12 03:15:57 2025 GMT
        Subject: CN=69324e6e-5d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2a:ac:5c:e0:1f:8e:be:9f:2b:31:4e:1f:ee:
                    5b:c2:07:5a:5f:a4:0b:a3:a7:98:9c:8d:b7:ce:7f:
                    67:64:f3:c9:ca:e9:de:2f:37:97:9f:9e:fc:63:07:
                    3d:f0:2f:27:72:5a:1c:21:24:b7:5e:9d:29:74:32:
                    14:24:84:c4:1b:96:37:fc:d3:09:92:4e:48:24:e4:
                    5d:3a:ca:16:48:8c:be:36:b5:38:c4:50:39:8d:69:
                    00:fe:d8:20:9b:89:f6:a1:89:cd:b4:72:35:63:d0:
                    60:26:7c:a8:2e:59:f3:8f:a9:e8:16:ff:af:1d:b9:
                    28:69:d2:4a:23:51:55:40:32:fc:b6:75:76:f5:c7:
                    f1:1b:ab:c9:aa:e0:a1:74:ac:f7:09:f8:12:0b:e1:
                    68:e9:c8:9d:eb:51:d7:f7:28:c3:23:d0:27:98:2b:
                    4b:b7:4b:1a:c7:4b:66:da:91:6b:13:fd:0c:77:d2:
                    cc:24:82:58:81:a8:27:25:81:1f:43:c7:81:d5:1e:
                    f8:ee:8d:e2:11:4c:1a:c8:6d:6d:8d:1b:4b:28:f8:
                    da:b3:34:d2:6d:33:e6:5c:27:70:b1:a4:e1:3a:72:
                    32:bd:6d:a5:13:a2:b5:88:f7:2f:76:63:f7:10:19:
                    e6:c8:1f:85:26:1d:c8:43:22:08:ed:1b:65:3c:de:
                    99:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F9:7C:75:63:67:7D:FC:BA:5B:3A:B4:87:28:7A:16:7F:43:EC:90
            X509v3 Authority Key Identifier:
                keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7b:ba:ed:cb:c6:e9:12:69:43:3d:58:d1:89:0c:3f:e1:b9:
         33:2f:bb:9e:ae:4e:76:9d:6c:5c:e6:e7:31:5d:6a:08:ac:9a:
         ad:43:11:28:3c:00:d3:ad:93:7f:9b:1a:48:be:6b:69:8c:e2:
         85:e8:27:dc:9d:45:2c:71:ac:e6:9d:0e:a7:d1:14:1e:dd:90:
         80:0a:57:97:43:74:77:94:70:df:70:6e:df:5a:a7:2a:10:2e:
         7e:83:cc:3f:d0:35:35:1d:0a:9f:47:37:f5:9a:ff:ff:aa:88:
         eb:e7:2f:50:b8:b1:52:bf:18:40:d3:62:07:7f:25:b7:20:00:
         56:e8:12:cd:82:0c:d3:21:69:41:79:5a:97:96:19:e1:49:cf:
         4c:1f:a2:86:94:61:c1:df:4c:2b:58:81:48:c3:58:df:5b:1e:
         43:86:e2:a1:11:8b:e0:51:bb:05:db:92:e1:e6:0e:1a:e4:7e:
         ab:86:d3:80:6e:ba:eb:f8:e5:87:bb:5c:17:9f:70:92:7f:75:
         f6:c0:f8:0a:0e:94:7a:c0:10:51:86:a1:45:2d:24:00:58:c4:
         b6:a3:30:31:4a:27:64:d4:bc:db:9b:2c:00:11:df:ba:65:4f:
         c6:51:69:bd:a5:c8:02:42:1e:5f:80:2c:21:2e:f3:3e:3d:2c:
         1f:28:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:36 2025 by rpki-client