This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
File:                     zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json)
Hash identifier:          IUTboVKvUbTeSGPMgD2Z6axrr64YqvMuXaUVe7fNJnU=
Subject key identifier:   06:C3:BC:41:D2:68:3A:CC:82:A5:90:2B:8C:49:97:79:4C:38:D7:2C
Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
Certificate issuer:       /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
Manifest number:          0176
Signing time:             Fri 05 Dec 2025 02:06:05 +0000
Manifest this update:     Fri 05 Dec 2025 02:06:05 +0000
Manifest next update:     Fri 12 Dec 2025 02:06:05 +0000
Files and hashes:         1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: dl/MfmAbwM0qCzmO5wPAICao2zJDyMKGlYe16Ed0H8k=)
                          2: 830F1BDA978411F08BB09F58C4F9AE02.roa (hash: FpYEPHuQF99JDKCuUc3yqcVj2WEdBYJEb7SK3ufBnnQ=)
                          3: 4D73A1D0978411F08E9E8257C4F9AE02.roa (hash: vFJD24sm3q+X0tzldJmiXgclrTTUTfBHbE5J1wRCfmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl
                          rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
        Validity
            Not Before: Dec  5 02:06:05 2025 GMT
            Not After : Dec 12 02:06:05 2025 GMT
        Subject: CN=69323e0d-a5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:e6:f6:6e:b8:ad:43:2b:5a:72:d7:5f:fc:
                    df:e6:32:3b:f2:55:0d:d3:c2:c2:38:30:51:35:42:
                    c0:e0:f4:1d:f4:5c:57:4d:2f:9f:66:69:96:ec:dc:
                    1c:39:a9:80:de:c0:ea:cd:a1:78:d7:70:43:5a:d7:
                    fd:1d:2c:be:e9:f6:5d:10:65:29:37:45:c3:85:6d:
                    e4:e6:7f:ac:cc:8b:68:26:2f:11:b3:04:3d:f0:0e:
                    35:5d:3f:6a:6b:16:4d:21:88:60:9f:6a:bd:6a:a8:
                    35:7c:1b:53:21:4a:50:0b:23:18:15:96:22:34:12:
                    a0:61:30:33:95:71:6b:bd:9f:c3:e6:4c:7a:2e:ef:
                    ef:4b:85:d1:9a:f1:79:fd:2a:51:6d:a1:f3:fe:da:
                    ba:13:81:4a:c9:bf:8b:b8:29:43:30:4f:f4:4d:1d:
                    15:9c:3b:38:99:60:b8:b1:de:e3:66:a3:06:c5:ae:
                    01:93:4d:f1:6b:37:75:32:aa:14:d4:50:fb:08:27:
                    52:73:b7:f7:eb:18:95:d0:77:69:03:3a:52:d5:e3:
                    5e:08:00:5d:17:54:fb:19:71:7b:6d:59:bd:78:c3:
                    6d:ea:e2:bc:10:ee:0d:3d:19:e5:7a:07:cc:36:43:
                    6e:ab:66:47:9d:c5:06:dd:23:81:5f:01:17:cd:cf:
                    f3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C3:BC:41:D2:68:3A:CC:82:A5:90:2B:8C:49:97:79:4C:38:D7:2C
            X509v3 Authority Key Identifier:
                keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ec:ff:af:b9:83:b0:91:0a:c6:b5:c1:4d:31:de:d0:bc:f9:
         aa:af:34:ea:ec:66:3a:8f:f2:c8:4a:4e:ac:cd:bb:79:ee:2c:
         6a:bf:02:d1:26:d5:d5:e5:bc:8a:9a:39:7e:aa:85:69:b7:38:
         c5:7b:4e:4e:be:f2:a9:65:4b:41:b8:7e:00:ac:86:4c:7d:0a:
         65:e0:f9:c3:a8:21:2b:3d:ef:35:29:db:a8:40:09:7f:56:3c:
         d7:67:5c:0b:41:66:87:1d:b1:3b:9d:88:28:eb:60:e8:4b:02:
         9d:13:fc:ac:ac:ea:42:0a:f3:3f:01:82:2b:f7:5e:c2:dc:b8:
         25:43:e8:fb:84:b6:e7:71:08:71:f8:ee:92:6c:b6:b5:00:06:
         2a:e8:3b:4d:f2:b3:63:5f:ef:e3:37:30:7e:f5:29:a4:5a:e6:
         cb:8e:34:ea:a7:eb:9c:65:62:fd:82:21:e7:05:5c:85:77:65:
         cc:d1:0b:77:a3:ab:91:02:db:39:e5:97:d5:57:5a:5c:db:a5:
         43:88:f4:9e:a2:c9:71:d6:96:6e:b0:f2:6f:67:b5:8b:f7:a5:
         76:75:2a:49:18:2e:39:75:10:a0:53:ae:0d:31:5a:18:c1:fb:
         cb:e6:d0:94:98:76:27:1e:f9:8b:bf:b4:71:8a:62:a6:88:f6:
         86:d5:09:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:16:45 2025 by rpki-client