This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File:                     zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier:          ZXJTaPmsVtuMSjlc0T+4Ytw1NpJ5k2KJfJMHr7Glt5w=
Subject key identifier:   BE:AF:57:A4:5B:ED:2C:B4:B1:1E:1F:E6:7D:F7:7B:70:16:1F:51:A2
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer:       /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number:          0149
Signing time:             Fri 05 Dec 2025 02:25:54 +0000
Manifest this update:     Fri 05 Dec 2025 02:25:54 +0000
Manifest next update:     Fri 12 Dec 2025 02:25:54 +0000
Files and hashes:         1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: qDfE55v6UvUPZS2HiQ06XWC87/Nb3527WOq1oDOb76M=)
                          2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
                          rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
        Validity
            Not Before: Dec  5 02:25:54 2025 GMT
            Not After : Dec 12 02:25:54 2025 GMT
        Subject: CN=693242b2-c23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:cd:d5:72:d3:ff:2a:02:88:60:8b:17:13:
                    cd:2e:b7:36:0a:69:42:a8:a9:f4:14:4a:13:11:12:
                    2e:87:84:cb:cf:52:7b:53:a3:e9:9d:ea:e2:e2:4e:
                    bd:93:d2:ab:5f:37:4d:50:eb:1e:66:cf:23:9c:fb:
                    d5:d8:2b:0a:07:06:69:31:34:52:17:ab:9a:e9:e8:
                    95:ce:3e:1b:46:e1:c3:69:8c:85:52:50:c1:62:48:
                    72:1a:49:0c:7a:52:4a:91:b4:35:af:a6:dd:6e:aa:
                    a2:68:5a:3f:9c:be:2f:e5:04:4a:c8:71:e2:50:61:
                    c0:89:f8:c1:1a:3a:0f:60:eb:28:fd:6e:9c:d1:7d:
                    16:db:f9:0e:f4:29:f5:3a:95:5b:84:19:04:db:d8:
                    c9:7d:46:f2:ff:15:6d:9d:d5:2e:53:08:2a:87:8f:
                    7b:b7:6b:07:d3:93:80:b0:80:e2:6c:2f:4e:bc:d1:
                    dd:57:4f:64:dd:92:7a:e9:cc:3a:1a:ed:1e:5f:31:
                    d9:94:2a:01:fc:fd:d9:de:58:c1:94:8e:0d:23:ac:
                    f8:04:ce:93:0f:31:c3:5b:16:d4:08:d1:2d:e0:7a:
                    be:2c:7b:a0:c2:e2:ac:95:08:34:01:cd:6f:a1:3e:
                    d5:86:b3:c1:6b:4a:d6:87:cc:b4:12:e2:7d:a1:5f:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AF:57:A4:5B:ED:2C:B4:B1:1E:1F:E6:7D:F7:7B:70:16:1F:51:A2
            X509v3 Authority Key Identifier:
                keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:63:d2:0e:f6:fa:97:01:9a:ad:e0:b5:61:86:43:15:3b:7b:
         0a:f6:2a:df:7c:1d:93:7f:c9:25:3a:31:4a:67:19:90:65:4a:
         16:8e:8d:76:ba:e6:7a:ba:69:7f:9c:00:a9:f4:f0:ae:ea:3c:
         69:4b:0c:7c:07:3f:7c:7e:ec:c8:ec:d7:7c:5d:9b:f7:0e:99:
         96:9a:fe:3c:33:2f:88:1f:15:63:51:9d:a1:88:28:a9:ef:61:
         f4:6e:18:7c:38:de:9e:12:4e:b0:99:79:d9:84:cc:30:07:05:
         97:7a:04:97:50:fe:9f:44:76:ec:21:71:df:ab:2b:55:8b:b2:
         32:e0:d7:e3:1f:08:98:43:35:68:2c:74:96:e7:ba:cf:00:d7:
         f0:53:a4:29:c3:f8:4c:58:0d:c0:bf:cb:c3:72:5a:e1:02:25:
         ea:e9:b7:0e:b7:94:78:b3:db:2c:90:96:45:36:23:9a:35:e2:
         a1:28:f5:0a:9b:a5:f4:78:cc:0e:44:f8:01:9b:83:21:2b:57:
         95:a6:b0:4e:01:6c:7c:1b:9c:cf:c5:1e:e7:17:22:f9:07:fb:
         8f:29:4b:8d:da:12:f7:f8:0f:7b:09:a4:0e:0c:ad:8a:cb:be:
         6b:ea:c2:8a:d8:15:ef:f1:ea:2a:6e:cd:ad:37:03:7a:26:f4:
         f5:ae:90:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:33 2025 by rpki-client