This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
File:                     jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json)
Hash identifier:          yvPZxwb52erH1/a06hUDlZEUmZKndF+Vt3l2y/rsl6A=
Subject key identifier:   F2:63:47:E6:8A:51:C6:54:B4:89:6D:26:DB:D5:45:4C:80:DD:81:D2
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Certificate issuer:       /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial:       350B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
Manifest number:          34F6
Signing time:             Sat 06 Dec 2025 14:33:47 +0000
Manifest this update:     Sat 06 Dec 2025 14:33:46 +0000
Manifest next update:     Sat 13 Dec 2025 14:33:46 +0000
Files and hashes:         1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: E9jPQreJUksNLE2w+vPI/nx7+oV6qilsRxBLoNaY/jM=)
                          2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=)
                          3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=)
                          4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
                          rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13579 (0x350b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
        Validity
            Not Before: Dec  6 14:33:46 2025 GMT
            Not After : Dec 13 14:33:46 2025 GMT
        Subject: CN=69343ecb-911b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:8b:b1:32:eb:9b:14:96:72:81:ae:e9:3c:
                    30:cb:32:15:7c:7d:53:c3:1b:d3:c7:8c:97:f1:21:
                    d3:dc:49:04:af:b3:f1:cb:38:b5:49:12:fe:20:6f:
                    0d:cb:1a:bb:44:5f:8b:9e:a0:7e:f4:43:1b:87:6d:
                    c5:c9:a0:d4:8c:d0:f0:4f:19:c1:ad:b2:0e:ab:1a:
                    0b:4f:55:46:80:f3:64:3e:e3:26:b8:09:c4:56:7d:
                    1a:34:75:79:43:52:a7:91:5c:d7:e1:97:14:4f:f5:
                    f3:69:b9:79:ab:83:be:92:0e:dd:b8:92:f9:ac:39:
                    00:e9:30:b8:30:19:99:f6:93:44:2a:6a:ca:9d:b2:
                    26:ec:bc:6b:ba:84:49:ba:9b:b0:ea:35:04:1b:61:
                    10:00:fe:9c:ba:ce:b8:8b:78:75:d1:ae:95:f7:fa:
                    80:f3:6b:d9:ee:ea:5d:51:52:02:3f:25:c7:8b:87:
                    40:5a:53:fc:17:8f:5b:23:d2:bc:7e:fb:96:c4:27:
                    5d:48:cb:54:31:25:e6:a8:4a:40:61:c4:00:f2:a0:
                    af:ff:c6:b8:07:46:ae:63:5e:f8:46:15:84:2f:a1:
                    2e:6a:b3:0a:85:ed:78:68:71:be:38:eb:2a:bc:ad:
                    bc:9b:93:a0:94:cc:78:c5:e1:cf:5a:f8:7d:15:84:
                    2e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:63:47:E6:8A:51:C6:54:B4:89:6D:26:DB:D5:45:4C:80:DD:81:D2
            X509v3 Authority Key Identifier:
                keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:74:44:78:ed:9d:41:04:ce:4a:ee:4c:af:dc:f1:59:b6:5e:
         79:09:4a:41:26:fc:bc:75:76:f7:d7:51:b0:0d:c2:cc:de:62:
         94:b1:37:ca:1d:96:ec:d4:f5:31:1f:50:60:45:cb:95:61:5b:
         fe:a3:28:f4:b5:11:79:36:93:49:4f:ed:6a:47:39:95:bc:74:
         4f:df:55:cb:37:7b:ea:dc:55:74:20:58:8d:86:4f:d2:31:7b:
         0e:67:3e:28:02:ac:8d:8e:e4:f2:ed:1f:ae:8a:80:b5:d2:4b:
         b6:95:89:69:56:dc:6e:c2:c3:ab:ba:cd:e1:96:24:96:25:c2:
         d3:c9:8d:b0:da:14:6b:a4:3d:33:83:fc:e9:b9:57:dd:4d:0c:
         f1:c1:8e:94:ba:7e:e2:04:c7:ac:9a:d1:a5:7f:08:58:29:c9:
         2b:21:8e:2d:b4:74:8c:3c:e2:3a:c8:cf:c3:0a:8f:b4:83:7e:
         35:ca:00:a8:6b:c8:d9:ce:64:15:e3:d1:6a:43:29:ce:d8:cc:
         7f:fe:9a:be:db:8f:1c:24:a5:c4:07:2d:e1:e1:7f:97:01:2f:
         f3:89:15:bc:81:36:96:ec:92:a3:2f:2b:f9:37:cd:31:2f:1c:
         df:00:b5:0e:21:63:93:a0:f8:09:29:8e:8b:06:42:d3:ac:26:
         55:33:ff:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:33:14 2025 by rpki-client