This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File:                     aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier:          ctOYI3MsSs2WGXLZCzdWy3D6vzHccfM9UJvi3ivK/OQ=
Subject key identifier:   23:AC:02:C4:61:74:C7:3D:25:49:FE:DF:36:54:AA:72:8F:1F:36:3B
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer:       /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial:       3513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number:          34F4
Signing time:             Sat 06 Dec 2025 15:08:13 +0000
Manifest this update:     Sat 06 Dec 2025 15:08:12 +0000
Manifest next update:     Sat 13 Dec 2025 15:08:12 +0000
Files and hashes:         1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: RNMq4wICX7cgnY4+fiK3lExT+IZD9TPOH7PpO+0XdkE=)
                          2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: lhbAPGcQQjVfLeBPPvSfLGakAoAsie+moEAIzx57Z0Y=)
                          3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: 1AXC4CdSqCeZreg7Kdx8zTNNLCij2RY2Acpk7gs3UmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
                          rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13587 (0x3513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
        Validity
            Not Before: Dec  6 15:08:12 2025 GMT
            Not After : Dec 13 15:08:12 2025 GMT
        Subject: CN=693446dd-f63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:02:be:a4:be:f6:dd:9e:97:51:cf:13:12:
                    0c:e4:cc:c6:aa:1b:3c:13:14:8e:29:26:22:34:ef:
                    33:e7:b0:0e:98:c3:81:48:29:36:d4:eb:fb:55:c4:
                    57:aa:1a:98:93:a4:02:68:ed:6f:85:40:04:06:00:
                    9d:4f:64:78:4e:da:b7:c9:61:b3:ee:4f:4d:46:4c:
                    a4:c1:60:86:15:e3:49:03:72:3b:31:df:ff:76:21:
                    d0:a8:18:cb:1b:3f:4d:74:34:7e:c1:44:6c:3b:9a:
                    54:ed:39:db:f7:31:b4:bb:fb:fc:3b:b9:0e:00:1b:
                    5e:2f:93:83:6d:6b:92:8d:86:bf:c9:f4:af:07:0e:
                    b4:f9:50:bc:22:45:80:d5:21:f0:37:2a:b1:b5:9f:
                    32:e2:cf:33:47:d3:90:63:4f:ac:31:56:7c:24:c9:
                    fe:0d:97:d6:16:25:96:ce:e4:32:d8:ba:8f:e4:f7:
                    ef:65:94:4a:0b:e1:f8:71:2d:c3:ac:73:b0:75:35:
                    1a:61:c2:4c:d9:f5:51:60:26:7b:9c:ca:e2:9a:16:
                    8c:4b:f3:a5:03:1f:92:57:7a:51:5c:f2:a8:ce:e2:
                    dc:fa:35:53:70:f5:6c:11:6d:28:af:2a:45:f6:aa:
                    1c:7b:6e:4a:96:ec:90:e5:78:30:5a:e3:87:35:bb:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AC:02:C4:61:74:C7:3D:25:49:FE:DF:36:54:AA:72:8F:1F:36:3B
            X509v3 Authority Key Identifier:
                keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:24:29:d3:64:be:71:bd:04:b8:9f:36:e3:bf:bc:4a:07:1c:
         45:53:01:57:83:d5:19:7a:e9:0c:cc:13:4b:bf:56:5f:d8:7a:
         93:a3:26:25:53:eb:4a:a3:26:a4:e8:87:76:1d:69:28:4a:c0:
         12:3c:6b:4a:51:27:2d:4e:a1:97:9d:8a:8d:66:07:c7:97:4e:
         8b:b7:02:d9:30:de:3f:4c:3e:4a:02:a0:1b:e6:e9:61:f7:36:
         4e:d7:64:e7:ad:45:73:db:d3:a7:73:33:a0:9c:09:7e:c6:68:
         52:e9:95:63:f5:ab:4b:cb:76:92:a3:f7:1d:d5:97:e1:1f:d9:
         57:1f:52:4f:67:ea:38:d7:91:29:e4:ab:09:a6:c8:af:a2:05:
         e7:45:c0:46:c0:83:af:45:df:15:57:78:10:47:64:4e:59:5e:
         5c:86:d5:b6:16:90:56:1c:65:b6:74:94:66:0f:75:c1:38:69:
         7d:a7:e7:24:b7:b1:a6:e2:3a:4d:a5:29:fa:23:b8:9a:6e:f2:
         58:cc:30:f4:a7:0d:ca:7a:ca:59:46:93:27:0d:47:7c:1f:97:
         99:f8:e0:cf:65:5c:e7:ee:de:72:1b:9e:2f:24:d8:23:95:06:
         e8:a6:4e:08:8c:63:a9:dd:05:78:a4:34:67:cd:2e:22:37:97:
         99:97:25:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:41:48 2025 by rpki-client