This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
File:                     ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft (raw, json)
Hash identifier:          pZx6r59/bItycFpak5lL4uWL5dsksHJMlqOHj/Q1EDk=
Subject key identifier:   B9:A7:0A:6D:BE:44:2D:31:F0:23:96:81:75:A6:1F:87:DD:E5:5A:D9
Authority key identifier: 66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD
Certificate issuer:       /CN=A914DA9E/serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
Manifest number:          75
Signing time:             Fri 05 Dec 2025 04:45:08 +0000
Manifest this update:     Fri 05 Dec 2025 04:45:08 +0000
Manifest next update:     Fri 12 Dec 2025 04:45:08 +0000
Files and hashes:         1: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl (hash: Xllx2lK8VKRG17Hg7JJattj5/fvuhwQVdB1y2ouUBMI=)
                          2: 7E10232C1F3411F0BFBD616EC4F9AE02.roa (hash: ziKAkTq8TDHqlAMGRhZZxal4YT5BAAI3FkEOnc8uPao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl
                          rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA9E, serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD
        Validity
            Not Before: Dec  5 04:45:08 2025 GMT
            Not After : Dec 12 04:45:08 2025 GMT
        Subject: CN=69326354-8e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0d:8b:98:2b:b6:95:91:99:1b:78:f1:44:b2:
                    cb:38:54:76:01:bd:c2:9f:51:59:36:23:7a:e6:3e:
                    9e:66:6e:06:11:28:2a:dd:f4:c0:8a:c2:1d:64:8e:
                    4f:50:2d:4c:93:a1:76:09:ab:df:9f:ab:a3:90:08:
                    1c:83:6b:b2:30:9f:a9:92:d9:45:26:a1:46:3b:31:
                    95:be:f0:65:01:d4:b6:5f:e5:62:00:50:7d:5f:ec:
                    6e:3c:08:ac:e6:e7:e6:86:0f:9b:b5:58:d0:da:db:
                    12:f0:b3:39:3c:b5:99:22:69:28:c4:62:bd:a0:95:
                    f7:b5:40:32:37:83:d3:c0:00:11:87:42:0e:b5:0b:
                    ee:f1:24:33:8a:00:bf:d2:4a:6f:b8:29:71:4d:82:
                    8f:93:ec:76:2b:a2:aa:7e:b3:b3:f3:e5:a5:80:e6:
                    cf:ff:cf:61:1f:77:56:92:b2:a2:ac:0c:f8:5a:65:
                    28:8f:98:cf:6d:96:52:1a:d7:da:43:77:05:d4:f4:
                    8b:42:69:97:2b:d4:6b:b2:16:8b:28:c9:73:26:7c:
                    ab:d8:ae:44:09:38:6f:81:c8:b1:59:71:bc:43:40:
                    0c:e0:d2:f3:f5:1d:1b:74:e0:f2:e7:d8:cd:dd:cd:
                    47:ef:c5:1b:af:d7:2c:6e:87:17:3c:7e:f5:b2:0d:
                    b2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A7:0A:6D:BE:44:2D:31:F0:23:96:81:75:A6:1F:87:DD:E5:5A:D9
            X509v3 Authority Key Identifier:
                keyid:66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:03:86:f1:9b:8f:9b:8d:58:cc:e2:50:2a:03:ee:cb:c4:ec:
         5d:31:c2:e6:06:6c:64:ff:0a:d1:70:92:b3:4e:3a:53:9a:70:
         0f:bf:df:ef:5d:0b:53:31:95:b0:ac:4a:49:79:b0:c9:0f:35:
         84:0b:d9:c3:c3:75:60:55:3e:d3:91:a3:19:82:80:3d:94:1a:
         71:2f:3e:db:58:9d:ff:6d:c4:ec:5d:3b:c8:30:1c:79:0e:24:
         77:39:57:df:52:dd:a8:63:06:84:82:1e:d2:c0:c3:76:ee:d4:
         6c:d1:f7:d2:9e:77:7e:f0:d9:3e:1f:35:7c:b2:c1:2c:6e:a7:
         0d:f7:0b:58:4e:db:c5:8b:cc:d5:ef:f2:e3:07:f3:c1:8e:bc:
         fb:ec:42:c5:71:3f:1c:b4:a9:30:ea:65:15:46:38:ef:5d:49:
         6f:cc:1d:49:6e:16:38:a9:f8:a9:03:3b:f7:b7:ee:aa:dd:1a:
         b9:94:56:dc:68:fc:d0:d7:6e:aa:ae:c0:97:50:20:0e:bd:12:
         a1:11:4f:87:7c:02:d6:b9:23:28:3c:a6:26:2e:3d:b9:8e:a2:
         dd:50:a0:e0:4c:a5:15:85:c8:97:f0:b0:ba:7d:87:a0:e0:1e:
         c0:6d:5b:40:a2:e7:69:02:c3:c5:7f:34:1e:ae:6a:21:46:b2:
         84:c6:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:08:30 2025 by rpki-client