This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
File:                     zamee9M_jsdx_ROc1rNwDJyY8jA.mft (raw, json)
Hash identifier:          7HkGr03Y6gSVD37XiWdQpV3dM5zAWzjiTPqX0xk1IMY=
Subject key identifier:   0B:9B:5A:47:46:79:93:24:3B:62:E0:CC:6D:D3:D7:A4:88:7C:96:42
Authority key identifier: CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30
Certificate issuer:       /CN=A9182DEA/serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
Certificate serial:       08CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
Manifest number:          08C3
Signing time:             Thu 04 Dec 2025 19:37:21 +0000
Manifest this update:     Thu 04 Dec 2025 19:37:21 +0000
Manifest next update:     Thu 11 Dec 2025 19:37:21 +0000
Files and hashes:         1: zamee9M_jsdx_ROc1rNwDJyY8jA.crl (hash: VBkKwo8/O9Kizhzt7bIZHGvGVpn8Zo+X5PHu3mDuZSo=)
                          2: 5EFDF18AC6A111EA988EB242C4F9AE02.roa (hash: KtSyotF5s+fznRFZLUutEOXHGLRSo1CUGsPPNNXjuZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl
                          rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182DEA, serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
        Validity
            Not Before: Dec  4 19:37:21 2025 GMT
            Not After : Dec 11 19:37:21 2025 GMT
        Subject: CN=6931e2f1-c14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:57:c9:13:b6:96:9e:b2:bb:13:44:40:e5:c9:
                    ab:3a:01:a3:9a:16:8d:db:07:2a:23:58:0e:95:a7:
                    61:4f:68:8a:cf:8c:6a:14:0b:3e:91:ee:3f:54:f6:
                    69:70:e5:96:55:75:a3:3f:c5:96:e9:0d:c7:5e:12:
                    d8:85:cc:e0:3f:86:ae:5e:d4:6a:40:b7:e5:d5:53:
                    97:4e:9d:52:e1:29:b5:40:69:ee:d4:e9:cc:1a:c0:
                    8c:e4:86:e5:fb:7e:e2:0d:84:f5:d8:01:48:b1:7b:
                    ff:d4:49:ca:63:4a:48:d7:af:09:ce:27:ea:91:92:
                    df:1f:20:de:03:04:67:85:fa:e7:32:70:13:fe:f2:
                    80:82:cd:88:94:fb:b2:80:f6:23:81:c6:08:f6:6c:
                    f4:d0:90:b5:17:03:67:9d:c0:91:63:df:2a:83:a6:
                    98:56:41:80:18:c3:f2:3c:12:56:c3:57:a3:3f:7b:
                    fe:87:ef:86:8b:e5:e2:e5:45:c5:e0:3e:21:de:4b:
                    24:27:a3:d9:90:8a:3f:b5:b9:74:ac:4f:00:54:de:
                    5d:c3:60:53:7d:44:2e:16:a9:39:c0:6f:07:f2:dd:
                    05:e6:53:c1:f5:69:2b:d6:d9:b0:b4:04:c2:4b:4a:
                    39:a7:ba:31:b2:77:4e:e3:ba:5a:91:27:d1:14:81:
                    e3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9B:5A:47:46:79:93:24:3B:62:E0:CC:6D:D3:D7:A4:88:7C:96:42
            X509v3 Authority Key Identifier:
                keyid:CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:ef:31:db:a6:5a:cc:8c:e7:a3:de:05:c6:33:24:21:30:a4:
         b0:1b:9b:35:4a:d9:98:8d:56:eb:8f:90:5f:83:6e:0c:ae:db:
         5a:74:bf:d0:ae:f1:1d:da:e7:55:2b:44:3e:8b:1a:35:b7:4b:
         41:76:a0:20:09:d7:60:cb:b2:3b:dc:a8:9b:34:85:e0:84:85:
         1e:1a:58:b8:06:a6:82:37:fe:b4:33:fe:f5:15:54:f3:0d:d9:
         61:4d:c9:49:c5:43:3f:1e:c5:cf:ff:ef:9b:cf:9c:a5:54:2d:
         29:23:54:47:bf:82:73:ad:25:dd:2c:af:24:c1:59:fd:d5:6e:
         fc:9d:1d:2d:58:b9:38:2e:be:fe:61:7c:4f:ba:d6:fc:a4:1b:
         b3:e1:93:94:44:e5:ba:fb:fc:35:00:0c:16:6c:44:96:63:f2:
         06:a6:40:b6:43:ed:34:92:22:d7:b9:c2:fc:04:b4:08:8c:28:
         f8:43:b9:8a:e9:fe:03:50:88:47:b5:91:84:01:17:7d:93:c4:
         5a:f7:f6:8e:e4:b8:42:07:9b:cc:6b:e5:96:74:fa:a5:58:c6:
         63:bd:0a:ae:18:4b:f9:8d:84:8a:6d:dd:58:1f:16:99:5d:b9:
         c0:6d:c7:7f:65:6c:48:59:2f:65:a4:29:4b:a0:be:44:52:e0:
         e6:4a:8a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:42:20 2025 by rpki-client