This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
File:                     RzKsKGdyTfzuirIikX9q8r0Ojz8.mft (raw, json)
Hash identifier:          V0spWbwBL8RnOVzwHEX9hIKHa4ne3fSxH85Na585pKY=
Subject key identifier:   E4:DA:B1:0B:C3:40:78:6D:C8:D6:7E:53:5F:99:91:D9:07:3E:C9:78
Authority key identifier: 47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
Certificate issuer:       /CN=A9130915/serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
Manifest number:          26
Signing time:             Fri 05 Dec 2025 05:31:54 +0000
Manifest this update:     Fri 05 Dec 2025 05:31:54 +0000
Manifest next update:     Fri 12 Dec 2025 05:31:54 +0000
Files and hashes:         1: RzKsKGdyTfzuirIikX9q8r0Ojz8.crl (hash: MVJ3Zb1X4+ytb4/+Whbdc4q5VeAStTQCnZztICggNPE=)
                          2: 80981C2A985211F0B8F76E80C4F9AE02.roa (hash: QZBBJswmtfML9Fm1aFeXD8xHRfCOkYwNOZHzKQQJ01Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
                          rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130915, serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
        Validity
            Not Before: Dec  5 05:31:54 2025 GMT
            Not After : Dec 12 05:31:54 2025 GMT
        Subject: CN=69326e4a-d29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:7b:67:9c:7c:e9:3d:53:2a:6c:ef:1c:aa:
                    f9:b0:53:f1:98:59:40:5d:1e:c6:33:22:a1:fe:d1:
                    b7:31:1b:d1:cb:a5:dd:4b:79:e4:1f:23:3f:cd:20:
                    17:e0:da:c4:97:4c:db:20:00:23:65:3b:52:13:6e:
                    54:92:15:ce:82:71:e7:32:37:df:8a:f7:01:21:d3:
                    f9:13:bc:d2:40:45:48:1c:8d:93:83:6c:ed:32:68:
                    81:55:bd:e2:c1:8e:52:74:4c:52:8c:e9:c2:2e:24:
                    33:b3:e5:24:4f:54:fd:31:ff:84:a4:31:2c:d9:f1:
                    95:4b:a6:3c:fd:e1:6a:aa:60:18:b2:9c:18:94:4e:
                    48:89:52:20:b5:fa:a6:30:49:5d:ba:19:78:3d:bf:
                    6b:e1:3e:b9:c7:6a:ab:b0:e1:ab:a4:d7:07:d1:c6:
                    33:71:9e:e6:bd:ac:9b:f4:a6:60:62:32:ab:80:a2:
                    fc:45:68:d8:db:74:23:b8:cb:07:96:97:4f:ff:d8:
                    49:1c:17:c0:03:99:0a:70:5b:ee:fc:ae:39:58:e6:
                    6e:20:2c:80:e7:e8:5c:65:cb:0c:44:16:32:1b:00:
                    f6:20:c6:83:41:55:25:d0:fa:bb:49:e3:e5:1f:9c:
                    ed:9d:28:f4:ff:ea:9b:6a:20:74:fe:ec:38:46:45:
                    a0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DA:B1:0B:C3:40:78:6D:C8:D6:7E:53:5F:99:91:D9:07:3E:C9:78
            X509v3 Authority Key Identifier:
                keyid:47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7d:c2:14:a7:a7:91:e1:45:0a:78:0e:6c:49:c0:28:6e:13:
         34:e4:18:49:2b:46:92:19:c3:bb:f9:eb:d1:63:8c:43:1c:e3:
         23:24:55:98:a5:55:da:74:ed:b9:f1:46:ea:7c:3a:d5:1f:68:
         71:67:e1:05:58:5b:73:5b:a0:e4:59:a3:73:1a:b0:8a:3c:02:
         96:17:1c:5e:d6:bd:ec:a1:bd:da:45:94:b1:86:b0:38:9d:ae:
         dc:58:f3:50:88:d6:6a:ec:7f:cf:5c:53:f6:99:62:f3:23:fe:
         80:18:6f:46:6b:56:0f:07:f3:de:c8:92:ce:45:2a:0a:bf:b9:
         69:8b:99:27:83:96:50:56:54:46:7f:9d:79:18:23:48:d5:18:
         4b:ac:e2:5c:da:1e:6b:e5:1d:c3:eb:cc:d2:08:d1:01:93:42:
         2c:6f:f8:7a:f2:30:3e:1a:6b:e6:62:24:20:7c:ba:07:0b:73:
         37:b8:9b:75:d9:3d:1b:ea:32:04:b1:14:91:da:10:78:b7:ed:
         d1:7e:5b:a1:7a:33:40:36:d7:f5:2f:8f:5f:ce:60:01:e6:c7:
         68:96:03:7f:20:29:74:82:1b:31:a0:df:61:68:ac:42:2c:37:
         75:aa:3c:07:e3:e5:7a:32:d4:d8:6e:52:d0:26:e4:fa:6d:9e:
         84:2a:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:50:57 2025 by rpki-client