This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
File:                     _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json)
Hash identifier:          ZQLrcTVph3K5HjcAh6cuysKr1RIyxbNrCtD7c1l1UA4=
Subject key identifier:   55:53:7C:9A:A6:FA:A1:20:6E:07:34:22:EB:44:52:9B:50:CA:F8:39
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Certificate issuer:       /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
Manifest number:          E0
Signing time:             Fri 05 Dec 2025 03:38:50 +0000
Manifest this update:     Fri 05 Dec 2025 03:38:49 +0000
Manifest next update:     Fri 12 Dec 2025 03:38:49 +0000
Files and hashes:         1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: /9BG7sHkte9Ex/j/ywNHTz/vOf3GNVA30Anm4a+sNuM=)
                          2: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: Qazlfs79oNGaasbKODSLWu+fgrJyIj3LMIoA2bg+8Bs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
                          rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
        Validity
            Not Before: Dec  5 03:38:49 2025 GMT
            Not After : Dec 12 03:38:49 2025 GMT
        Subject: CN=693253ca-3536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:40:25:3d:14:9f:23:cf:d7:c5:89:96:9e:
                    09:f5:bd:6c:f5:94:77:14:05:ab:9c:50:cc:50:2b:
                    73:1c:ff:6f:ba:44:c9:65:0e:12:c6:53:af:29:05:
                    f6:20:f1:00:f3:89:dd:af:23:15:6c:44:36:5d:7f:
                    2a:a9:79:4b:77:92:9d:76:c6:76:70:bc:fa:33:24:
                    5f:d7:96:77:65:1b:64:c6:30:0f:4f:f1:4b:69:95:
                    51:c7:91:9b:e2:1b:93:be:b3:26:b8:70:a6:f1:8f:
                    58:bb:39:f7:d1:ad:48:42:68:c2:43:b9:94:a0:8e:
                    0a:69:bb:6d:42:f0:5e:7b:d5:82:dd:f6:61:a7:27:
                    f6:fd:66:a4:5d:c9:88:c1:dc:80:b1:07:14:90:27:
                    6e:d4:6b:38:41:50:c6:79:04:c7:3a:d4:0e:71:59:
                    31:60:c3:83:c2:41:14:e8:3d:53:f6:05:06:16:5e:
                    ef:9d:aa:45:b1:4f:a9:2c:7d:cd:c4:7a:27:0f:bc:
                    cc:ca:92:46:39:b9:09:64:cc:8a:06:44:b4:27:af:
                    d3:33:ba:ea:83:c6:fa:42:d1:17:f7:5b:68:5a:ca:
                    29:5e:b6:d4:64:1e:b2:9c:10:8a:a4:28:22:bb:d8:
                    6d:dc:2a:eb:3d:fe:17:92:7d:f3:82:53:e3:97:08:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:53:7C:9A:A6:FA:A1:20:6E:07:34:22:EB:44:52:9B:50:CA:F8:39
            X509v3 Authority Key Identifier:
                keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:91:4e:45:46:02:89:0a:48:1d:88:3d:93:8f:38:e3:1e:
         70:ac:d1:05:77:dd:e5:7e:3c:2e:e4:c0:b9:fd:8b:7f:8d:d9:
         13:7b:bb:96:e0:d0:f3:57:b1:6d:26:77:d9:ea:b9:21:9f:74:
         98:40:67:14:70:0b:84:b8:6e:30:0e:46:f5:6d:8f:69:c9:fd:
         80:49:4d:c5:1a:e3:14:2e:49:f0:d7:e5:e4:29:14:6e:c3:4c:
         03:5b:25:50:b8:99:4f:b9:e0:da:67:72:48:e1:25:a8:b6:29:
         bf:78:91:51:cd:3f:5b:a7:ea:8e:b9:56:45:69:b1:d3:12:9b:
         ed:89:26:0b:50:e4:cd:0b:8a:79:99:66:27:60:83:b3:c7:63:
         3b:3c:7c:35:19:cf:56:56:45:3f:01:fa:88:21:f3:cb:59:c3:
         33:e5:4a:6a:51:65:d0:b0:8a:e0:a8:80:8d:17:60:05:53:5e:
         f3:c9:32:8e:0f:dd:3a:bb:16:84:ec:7b:a8:66:b2:bc:91:8c:
         6f:bd:68:8e:d2:e4:c8:57:4f:30:c8:74:35:e1:57:88:63:2c:
         21:42:db:2f:0c:c6:f0:12:74:d8:de:0b:54:87:da:8c:ff:3f:
         e1:66:30:44:a3:2d:47:48:a8:1c:ce:7a:0e:92:37:f3:0d:b6:
         ce:55:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:54:28 2025 by rpki-client