This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
File:                     gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json)
Hash identifier:          tyQWlxQw5z1xpQMh4i4XgdXHkJkUqxNRrmixpFhFhlQ=
Subject key identifier:   B2:9F:FD:32:62:08:4B:22:40:26:10:24:D7:E1:E0:7E:FD:89:D4:26
Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
Certificate issuer:       /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
Manifest number:          6A
Signing time:             Fri 05 Dec 2025 04:49:46 +0000
Manifest this update:     Fri 05 Dec 2025 04:49:45 +0000
Manifest next update:     Fri 12 Dec 2025 04:49:45 +0000
Files and hashes:         1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: NXEQj5nT2llvBbZImPd21flswrD6ueXA/3RKpe2ptnI=)
                          2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: teBU/xY5fyCYlDvGRSOFgRvi80EiZfgHjGrIEnrk+fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl
                          rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
        Validity
            Not Before: Dec  5 04:49:45 2025 GMT
            Not After : Dec 12 04:49:45 2025 GMT
        Subject: CN=69326469-22a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:d3:ef:bb:59:1e:ed:eb:21:9b:76:51:00:
                    ad:2a:ca:3c:53:a7:7a:f7:18:85:9c:f1:74:cc:75:
                    a0:f0:de:18:b4:d4:7b:dd:f0:09:40:e2:92:17:94:
                    ef:43:be:ae:75:aa:38:95:5d:e7:27:ea:eb:0a:9e:
                    89:9f:22:5d:2d:df:71:c6:2c:ea:71:4b:a0:4d:4f:
                    79:9e:62:12:eb:08:90:d6:c2:2a:fb:ca:74:43:51:
                    2a:6a:9a:73:52:4e:21:f8:c1:f9:34:4f:14:a4:3b:
                    ec:2e:00:43:f4:0d:f0:25:96:e8:00:41:bc:33:aa:
                    67:f1:f2:76:73:81:76:eb:42:b4:40:03:ec:7d:ba:
                    35:fc:0f:2b:36:ae:07:7e:c4:d5:5f:ed:14:1e:c9:
                    67:79:1f:47:45:97:f6:94:f5:09:6f:51:2d:b9:a0:
                    17:24:ca:ce:a0:28:7e:d1:7b:7f:63:f7:6b:26:ba:
                    e3:ef:d1:f1:d8:e7:a4:85:e0:b1:25:cc:4c:f3:f9:
                    61:f6:c3:f3:76:d6:1e:14:8b:f3:33:f4:17:8e:07:
                    97:5e:c7:ac:91:88:14:e5:e4:35:83:16:e1:bb:a7:
                    14:b9:3a:23:3d:b5:f4:07:f1:7a:4c:7d:35:f0:e2:
                    44:df:f9:a1:c0:67:cd:cf:90:2b:c9:9e:a3:c5:38:
                    02:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9F:FD:32:62:08:4B:22:40:26:10:24:D7:E1:E0:7E:FD:89:D4:26
            X509v3 Authority Key Identifier:
                keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:73:63:85:fe:ae:6c:ff:fc:90:16:11:b0:5e:74:ee:9f:
         20:3d:38:a3:95:cf:d0:c5:36:cc:71:4a:6a:20:cd:4c:97:1e:
         65:a3:8f:5f:c3:0f:47:e5:85:9a:63:be:ba:12:c6:94:6c:5a:
         c4:45:d0:78:49:c7:77:98:08:7e:16:bb:be:91:11:32:14:f3:
         4f:b8:90:23:9a:a4:a2:b0:7b:63:90:ed:31:8e:99:cc:d6:9c:
         aa:57:fc:f2:7d:ac:d9:39:32:c9:b7:5d:52:86:5f:53:74:0b:
         ab:18:ee:53:e8:79:f6:0e:c7:bf:31:0e:ed:b9:c6:65:ff:bd:
         e6:9a:68:55:eb:2c:12:4f:54:f0:79:fa:d9:cc:2b:97:f1:f8:
         c9:a7:c4:b7:f7:c5:7b:e6:ad:99:89:ff:87:82:4e:64:7f:8d:
         33:e9:36:c1:f3:14:a4:9b:1e:3d:71:18:d8:39:d4:65:a6:1d:
         a9:1c:b6:1a:2c:9c:04:a3:23:b6:1b:d1:42:ec:3a:d9:8d:51:
         31:c3:d9:f4:54:a1:0b:ec:2a:81:15:d0:67:c6:73:8e:9f:0e:
         94:0d:55:5b:06:98:9a:c1:52:10:66:1c:29:07:fb:d4:ce:d7:
         18:8f:bf:2a:ff:81:f7:bc:a0:99:d1:8c:9f:a0:5b:b9:be:8d:
         3f:3d:d9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:53 2025 by rpki-client