This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
File:                     8mzvyND2FJXOpWXLF0zPkuc6CJk.mft (raw, json)
Hash identifier:          AwRKL076169SPFodPzPs28HV8S3oFPKlmax8OQN6n3I=
Subject key identifier:   DA:44:CC:EE:72:F4:57:3C:A0:0D:AD:17:85:52:ED:C3:8A:A0:BD:6A
Authority key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
Certificate issuer:       /CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
Manifest number:          012A
Signing time:             Fri 05 Dec 2025 02:42:40 +0000
Manifest this update:     Fri 05 Dec 2025 02:42:39 +0000
Manifest next update:     Fri 12 Dec 2025 02:42:39 +0000
Files and hashes:         1: 8mzvyND2FJXOpWXLF0zPkuc6CJk.crl (hash: Hi0ubwUIyoEtHq/i0S1+uyS9OuF+Ism7KhVrOUcAG+g=)
                          2: 81DED04C065411EFAAF0D25DC4F9AE02.roa (hash: KnA/iGGYoBgm/bcH9BItyxCBripYpEURjIllmAUmPC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl
                          rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184A0A, serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899
        Validity
            Not Before: Dec  5 02:42:39 2025 GMT
            Not After : Dec 12 02:42:39 2025 GMT
        Subject: CN=6932469f-7d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:fb:88:95:09:b3:7b:fc:4e:91:e1:d7:19:
                    52:c6:06:2e:ba:33:90:aa:fa:99:b4:27:3c:b6:08:
                    79:4b:60:54:ad:ef:c5:65:67:9a:8a:33:d7:5f:d6:
                    a5:6c:5c:1a:fb:79:a6:63:43:1c:6c:9a:8a:d5:14:
                    1f:99:22:45:f1:91:dd:20:67:d2:49:5a:a1:12:3d:
                    86:a6:b8:d8:5d:db:a1:b8:a2:1a:07:86:30:09:f8:
                    53:40:92:5a:c3:70:81:82:24:1d:28:44:7b:d9:69:
                    96:43:41:32:53:2a:83:98:d2:1e:18:e0:37:36:32:
                    ed:86:35:fc:69:ba:56:a7:e3:0a:2b:d9:3a:7d:d9:
                    9d:0a:2d:d8:40:51:cf:19:e0:80:4d:08:fd:d2:d1:
                    00:bb:92:a0:ff:59:d4:0b:f2:65:c9:51:6a:09:fe:
                    d8:da:42:a1:c0:ea:84:73:58:a1:99:3c:3f:79:b3:
                    7d:1c:7d:b4:8c:d8:9b:84:af:e5:21:2d:04:8b:17:
                    5c:9f:af:a0:4f:40:c0:56:cd:b8:fa:30:fc:d5:49:
                    e0:ef:9b:20:02:2b:b8:ee:ad:06:8f:35:95:8d:99:
                    69:09:46:a0:4e:98:68:cd:c3:43:c1:45:36:56:60:
                    d5:2f:05:a1:04:5f:58:77:9f:b6:32:69:3b:f1:8f:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:44:CC:EE:72:F4:57:3C:A0:0D:AD:17:85:52:ED:C3:8A:A0:BD:6A
            X509v3 Authority Key Identifier:
                keyid:F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:d2:f6:6b:1c:c3:5a:c5:cd:34:d5:6c:c2:92:3b:89:6a:
         84:f5:02:f9:12:f4:f2:5c:9f:84:fd:d3:5d:1c:a2:bd:c1:48:
         ba:c6:b5:59:d2:1f:87:b0:e8:70:ae:80:f0:8b:c8:48:a4:10:
         55:31:44:8c:05:96:a9:8e:c9:63:f7:56:d1:fd:4b:3f:e9:b9:
         67:b1:7c:ca:64:0a:d9:7b:97:c6:c4:e2:78:04:4b:76:e8:b2:
         48:65:05:07:87:3d:6c:af:b2:e4:bd:9b:07:53:6a:6b:64:67:
         9e:64:0d:09:b4:e1:08:b5:46:63:aa:40:2d:e8:f0:13:e0:ff:
         f9:24:43:92:48:e7:84:c0:71:22:d0:10:b7:c6:1b:24:2c:19:
         ec:f6:9f:86:b7:69:06:0d:27:d1:11:84:30:52:3b:82:b5:fb:
         3c:c1:91:ff:7e:c8:1e:1e:de:ca:fa:bc:52:90:e4:db:3f:df:
         b3:43:2f:9e:b8:c1:91:27:45:d0:26:25:fe:e4:7a:81:bc:dc:
         e5:d1:2b:12:d9:68:14:6e:9d:51:39:57:6f:81:dc:0e:8e:fe:
         8d:99:15:a1:51:3c:7d:62:a4:b7:a7:9a:b4:70:40:ff:c6:80:
         ec:4a:28:73:98:af:e3:8c:82:75:77:c5:ab:75:b8:f6:c4:81:
         f2:21:79:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:56 2025 by rpki-client