This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
File:                     ZWJxEurnsskvifeninGipPqV9T0.mft (raw, json)
Hash identifier:          ibbnXvxcPXN8sxI+hCox1aQvzutrar3BntYhNNTrOrQ=
Subject key identifier:   1A:72:71:62:AC:A9:82:D4:CD:A6:B1:60:5E:70:71:3A:F5:03:29:56
Authority key identifier: 65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
Certificate issuer:       /CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
Manifest number:          EA
Signing time:             Fri 05 Dec 2025 03:38:25 +0000
Manifest this update:     Fri 05 Dec 2025 03:38:25 +0000
Manifest next update:     Fri 12 Dec 2025 03:38:25 +0000
Files and hashes:         1: ZWJxEurnsskvifeninGipPqV9T0.crl (hash: 4cwsfAv5/LzAJJ1lujDeUo8xCh7CDGsefuVfDz8meto=)
                          2: 74D48D868CED11EF820CF762C4F9AE02.roa (hash: UFgXP3d4j2GI3NTGWnwXf4X/OP6k8PUcstTXQZolCsc=)
                          3: 495B172A8B5711EFBFF2106FC4F9AE02.roa (hash: aIccTTmQAjUWJG4JUc4O7rOJv+fkFbjRaovRWP1s9VE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl
                          rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913860A, serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
        Validity
            Not Before: Dec  5 03:38:25 2025 GMT
            Not After : Dec 12 03:38:25 2025 GMT
        Subject: CN=693253b1-bf2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b6:e1:d5:fb:12:9f:d9:55:52:51:cd:88:16:
                    9d:8b:75:38:cc:7c:98:53:fe:db:07:d3:b5:a6:d5:
                    db:e2:cc:2a:53:03:36:0e:dd:4a:a4:c9:11:e9:01:
                    44:8e:35:f4:5d:51:2a:b2:7b:5c:19:90:e3:08:2d:
                    05:2c:8f:e7:c0:c7:85:56:70:a7:8f:dd:4b:7c:a2:
                    ec:fe:d4:9b:f8:c5:f4:42:76:d7:42:ed:94:6b:1a:
                    61:49:d6:9e:cf:a2:e9:c8:c9:95:20:ba:af:a0:72:
                    23:54:e5:b0:d3:c0:f0:c4:4f:72:21:6a:1b:8b:50:
                    3b:bd:4f:d7:4e:be:2c:9a:13:f2:32:56:76:4e:38:
                    14:05:61:9d:f7:64:b0:43:f2:cd:d7:1b:e6:ba:12:
                    8f:4c:03:c9:a7:a5:ed:d4:8b:b4:8b:3a:d0:07:30:
                    da:e2:08:8f:a7:1d:dc:8c:97:d5:45:f1:49:32:5b:
                    a5:fa:74:ae:25:33:13:82:63:f8:3f:a3:a6:ad:5c:
                    06:d3:c1:2f:36:75:e3:2c:1d:2e:b4:18:c6:fb:f2:
                    18:ed:7f:11:97:fe:3b:5c:87:22:43:9e:e5:c1:de:
                    94:66:a9:80:a4:c8:a0:51:f4:e9:6d:25:6a:ea:14:
                    44:98:87:69:41:d7:c2:62:db:32:cf:2b:13:45:64:
                    17:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:72:71:62:AC:A9:82:D4:CD:A6:B1:60:5E:70:71:3A:F5:03:29:56
            X509v3 Authority Key Identifier:
                keyid:65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:db:1c:91:a3:2f:fe:51:2a:39:7e:2c:2e:84:67:b9:fa:cb:
         e7:b0:6c:c6:97:07:a8:42:2a:d5:8d:d5:43:91:ad:2e:72:b7:
         32:64:5e:36:1e:e0:f5:db:68:d3:03:81:f3:31:fb:ed:0e:9a:
         51:42:ca:63:71:5c:72:c8:7a:51:f1:2c:af:e9:93:ac:9a:da:
         05:ad:f3:69:f6:4c:03:fb:15:4e:26:6b:b9:da:ec:5f:57:45:
         22:2f:27:e3:0f:6d:94:c0:2e:2b:a6:eb:7e:19:50:ee:cc:bc:
         4d:4f:09:81:ea:2c:2e:e6:27:8d:16:36:77:ac:73:06:a2:0b:
         76:4a:b2:27:2c:ad:65:24:c0:fe:75:70:37:e0:e8:2f:80:65:
         b8:3f:15:bb:ed:41:7b:e8:61:17:01:20:8a:ba:e4:f3:b8:a5:
         48:d5:9a:32:cd:37:7c:f4:d8:36:8e:8c:e6:ce:b8:5c:54:15:
         0a:f5:fb:ae:07:02:36:27:fc:49:0f:5e:f2:82:d8:c7:5c:8c:
         9e:5d:13:42:37:9d:55:dd:c4:44:f4:53:f0:44:39:cf:a4:18:
         19:27:34:84:ef:da:b5:d4:77:1f:e1:a4:dc:d1:75:6e:64:bf:
         8a:46:c3:c1:06:03:a8:0c:3d:8e:54:17:b1:b2:2c:b1:d3:6c:
         fe:e3:d0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:52:27 2025 by rpki-client