This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
File:                     ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft (raw, json)
Hash identifier:          jqO/yMq5lD+ZksruNvOVy20yKgvEJCfs8rfFlo0BnBo=
Subject key identifier:   E6:06:DF:D0:36:27:8D:4D:39:34:FF:7E:DC:6C:BD:52:EB:9A:CC:5C
Authority key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7
Certificate issuer:       /CN=A916CAE6/serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
Manifest number:          09F2
Signing time:             Sat 06 Dec 2025 19:10:12 +0000
Manifest this update:     Sat 06 Dec 2025 19:10:12 +0000
Manifest next update:     Sat 13 Dec 2025 19:10:12 +0000
Files and hashes:         1: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl (hash: QH5x0CBbTi5iEZuIct15EnuTTELPPb2SPu0AC9pQ3zQ=)
                          2: 8D3F53F6A15F11F09B632177C4F9AE02.roa (hash: fqaNqrT+Qg2pLwuLNri5RTiMJOZQlavEcVcSmaNEBIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl
                          rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
        Validity
            Not Before: Dec  6 19:10:12 2025 GMT
            Not After : Dec 13 19:10:12 2025 GMT
        Subject: CN=69347f94-1268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:13:52:4e:03:3e:ae:bc:9d:16:bd:ef:fe:
                    a3:4e:a9:2c:60:dd:24:80:3e:68:c6:1d:fc:5e:39:
                    ad:3a:f6:2d:8e:9e:7c:10:34:0c:25:90:e2:25:09:
                    bd:08:88:49:02:40:61:34:47:90:d9:d9:4c:60:bf:
                    be:b6:8c:8a:46:86:22:80:cc:0f:94:9d:8c:c0:f2:
                    6e:1a:1c:95:d2:10:95:1a:10:a7:40:2e:b0:be:e0:
                    c2:60:cb:e2:85:62:78:c4:2a:0f:8f:ec:c9:79:61:
                    d6:af:e2:dd:1d:23:1b:b6:c9:0e:93:21:47:c4:b0:
                    bf:88:4c:27:e2:a5:d0:03:c4:b9:b2:4a:a6:d3:2d:
                    90:b2:f0:09:93:50:ab:d2:0e:ca:ed:85:b0:75:14:
                    a0:57:48:69:9c:c7:93:5e:a7:1e:98:5f:a5:46:eb:
                    fb:1f:19:3e:92:47:ec:11:9b:2b:ac:fe:2d:8d:20:
                    f3:48:1e:26:c3:92:1b:f0:ac:81:24:ec:7f:42:e9:
                    15:e5:7a:53:2b:23:fb:ef:d9:e8:70:ae:6c:f8:3a:
                    a9:f5:1b:45:1a:b7:f8:16:ee:b7:c3:7a:fb:bf:f6:
                    4a:3d:b3:40:5a:46:72:b2:0b:4b:0c:93:c5:8e:a3:
                    1a:73:c6:e2:4a:f6:7f:22:af:c7:23:15:ee:35:81:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:06:DF:D0:36:27:8D:4D:39:34:FF:7E:DC:6C:BD:52:EB:9A:CC:5C
            X509v3 Authority Key Identifier:
                keyid:64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:1e:33:a0:98:59:9b:bb:dd:33:3b:fd:79:1a:10:b1:2a:
         71:70:1f:84:5f:c8:7a:8a:2e:f5:0e:98:46:9c:14:3f:15:7e:
         fc:72:3b:7d:85:b9:19:a9:10:ac:de:5e:01:da:df:1e:7c:08:
         a2:fb:0b:61:fd:3d:e6:b3:e4:4c:1e:34:ae:2c:ae:f7:b0:fe:
         a4:8e:e8:bf:52:b0:66:81:30:43:be:57:8f:b0:8f:d8:3d:a2:
         9b:28:4f:d5:92:9f:c7:c5:28:b7:21:82:d8:e7:e7:2b:d7:d1:
         74:f1:d7:53:b6:a0:86:cc:65:ff:fd:05:f6:8e:24:55:c1:30:
         c7:97:f7:df:40:08:1a:f8:25:20:cb:e8:6d:52:08:9f:e0:5d:
         9b:85:3d:15:48:ed:fe:05:ce:2f:7e:74:9d:9d:14:32:fc:89:
         6a:b4:40:47:11:e0:f8:52:6c:5b:ae:65:01:2a:fa:67:82:ad:
         19:16:65:18:a0:c9:02:05:b9:b9:d1:8b:4e:15:0f:58:fb:02:
         1b:bf:78:96:30:90:82:57:dc:eb:6f:b2:6e:37:b1:d3:91:a1:
         f4:d2:c2:7e:0b:3f:68:0c:f9:e0:3c:13:00:58:d6:e0:64:1b:
         96:8b:d3:88:db:e3:d7:0a:5f:7c:a6:6b:0b:44:cf:df:b8:29:
         fd:90:52:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:45:39 2025 by rpki-client