This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
File:                     i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft (raw, json)
Hash identifier:          QgsahBLn15zbCzISoviRzNaoEEEe30rE77iXg2ZVFPo=
Subject key identifier:   4B:B4:52:B3:2C:74:1C:5F:1C:39:B1:6D:6E:EB:97:7C:B9:8E:E1:D0
Authority key identifier: 8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90
Certificate issuer:       /CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290
Certificate serial:       0C70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
Manifest number:          1556
Signing time:             Thu 04 Dec 2025 17:57:49 +0000
Manifest this update:     Thu 04 Dec 2025 17:57:48 +0000
Manifest next update:     Thu 11 Dec 2025 17:57:48 +0000
Files and hashes:         1: i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl (hash: 5j1RPq9yaywfkIGXZz4Fyw0O3xUS2Zt/J1tAfAv/nDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl
                          rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3184 (0xc70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FD04, serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290
        Validity
            Not Before: Dec  4 17:57:48 2025 GMT
            Not After : Dec 11 17:57:48 2025 GMT
        Subject: CN=6931cb9d-90fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:58:a6:b2:48:cf:ee:d6:ea:f1:62:3d:72:
                    44:7b:d9:71:6d:89:b9:75:e9:b0:76:11:88:09:b0:
                    d3:a7:97:2d:b9:cd:ad:5a:6c:61:ce:ff:41:06:bb:
                    a1:48:d0:c3:ec:ac:a4:55:36:f2:e6:0a:08:00:6c:
                    9e:f2:47:80:00:1b:de:a6:4e:78:63:ea:c8:32:26:
                    bc:15:03:a7:8c:64:27:71:95:8d:a8:4e:e9:02:85:
                    26:5b:38:cb:b6:77:c3:09:20:3f:ce:8d:b7:3c:ac:
                    3f:bf:53:72:91:01:d9:ce:ab:ee:bc:33:0f:1f:f7:
                    ad:6f:4f:68:4c:a1:a8:b2:a7:45:74:70:a0:d3:cf:
                    b5:37:dd:5b:f1:cc:90:10:e1:37:42:b1:50:0c:7d:
                    48:68:c2:87:f6:37:30:09:db:bc:0b:9f:86:a7:5d:
                    77:ef:5b:c3:a3:ce:89:42:4d:1b:ce:70:32:06:36:
                    2f:42:d3:97:68:6e:9b:ea:e6:f0:65:a1:50:4d:77:
                    36:4f:ed:97:6a:b3:da:f9:37:6b:03:0a:ea:06:e1:
                    76:52:de:5e:97:d4:3d:c2:0b:bd:45:6d:7d:f7:7a:
                    1a:f7:52:71:86:b6:8e:dc:35:0a:a5:c7:80:1f:a8:
                    e6:0d:a9:bb:28:da:42:e8:58:4e:cb:3c:8f:ba:d6:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B4:52:B3:2C:74:1C:5F:1C:39:B1:6D:6E:EB:97:7C:B9:8E:E1:D0
            X509v3 Authority Key Identifier:
                keyid:8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:27:68:c7:bd:83:87:cf:89:5c:17:7d:f1:80:26:7e:a6:32:
         3f:cc:75:7d:9c:66:1c:f4:9e:ac:9b:1f:3a:bf:5f:31:a6:7b:
         7c:5c:29:b1:41:0e:eb:1b:13:14:a3:66:5b:02:a4:9d:46:1d:
         cb:b0:cc:1c:4f:9d:a9:63:56:7f:07:11:9f:a5:20:ad:19:5b:
         c3:70:63:6e:c1:8d:a7:f0:ea:d6:90:01:d7:c4:74:7d:5c:88:
         57:a0:7e:3e:a7:67:d3:ca:f5:1e:08:94:be:e2:6a:b7:86:1f:
         67:ce:24:86:ae:4b:ec:f1:22:83:36:46:31:a1:b7:25:71:77:
         56:39:9d:dd:4b:7f:22:99:7d:6f:0b:01:f8:e6:73:40:15:a4:
         3d:a9:98:4d:e0:7c:0c:9b:4e:ac:60:97:b9:ae:91:93:78:a0:
         13:af:6f:1d:b6:9f:56:d5:01:e5:63:c6:44:aa:62:12:48:1d:
         c7:2c:2f:fa:39:2e:52:d6:97:1d:e4:1d:04:f9:50:87:2c:55:
         73:b7:46:1d:20:98:38:bf:6f:f1:a8:4d:b7:9d:7a:1f:19:8a:
         9f:57:94:ae:cc:92:ad:4a:58:ae:47:e9:a8:7a:f4:b9:34:f7:
         cb:5b:56:59:67:5c:88:54:75:90:76:00:db:95:63:ea:fe:82:
         92:9b:63:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZEMDQxMTAvBgNVBAUTKDhCRTlEOTJFM0IzMUQ0MENBMzNCM0JCNjI5NDc0MzJF
ODQ1NkQyOTAwHhcNMjUxMjA0MTc1NzQ4WhcNMjUxMjExMTc1NzQ4WjAYMRYwFAYD
VQQDEw02OTMxY2I5ZC05MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAukpYprJIz+7W6vFiPXJEe9lxbYm5demwdhGICbDTp5ctuc2tWmxhzv9BBruh
SNDD7KykVTby5goIAGye8keAABvepk54Y+rIMia8FQOnjGQncZWNqE7pAoUmWzjL
tnfDCSA/zo23PKw/v1NykQHZzqvuvDMPH/etb09oTKGosqdFdHCg08+1N91b8cyQ
EOE3QrFQDH1IaMKH9jcwCdu8C5+Gp11371vDo86JQk0bznAyBjYvQtOXaG6b6ubw
ZaFQTXc2T+2XarPa+TdrAwrqBuF2Ut5el9Q9wgu9RW1993oa91JxhraO3DUKpceA
H6jmDam7KNpC6FhOyzyPutZKSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEu0UrMs
dBxfHDmxbW7rl3y5juHQMB8GA1UdIwQYMBaAFIvp2S47MdQMozs7tilHQy6EVtKQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQwNC8wQUJCRjQ3MjBE
RjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFBeWpPenUyS1VkRExvUlcw
cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ktblpManN4MUF5ak96dTJLVWRETG9SVzBwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkQwNC8wQUJCRjQ3MjBERjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFB
eWpPenUyS1VkRExvUlcwcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQJ2jHvYOHz4lcF33xgCZ+pjI/zHV9nGYc9J6smx86v18xpnt8XCmx
QQ7rGxMUo2ZbAqSdRh3LsMwcT52pY1Z/BxGfpSCtGVvDcGNuwY2n8OrWkAHXxHR9
XIhXoH4+p2fTyvUeCJS+4mq3hh9nziSGrkvs8SKDNkYxobclcXdWOZ3dS38imX1v
CwH45nNAFaQ9qZhN4HwMm06sYJe5rpGTeKATr28dtp9W1QHlY8ZEqmISSB3HLC/6
OS5S1pcd5B0E+VCHLFVzt0YdIJg4v2/xqE23nXofGYqfV5SuzJKtSliuR+moevS5
NPfLW1ZZZ1yIVHWQdgDblWPq/oKSm2Oq
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:36:10 2025 by rpki-client