This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
File:                     MZsxRPBqjysw1BIHH-EhB3T-huc.mft (raw, json)
Hash identifier:          XeXGfBTW3uWteoGYoWQKdPFvnuNuQ6DDkBQ2PmSZdZs=
Subject key identifier:   65:CC:D2:11:1C:A0:41:15:98:CE:91:47:8A:55:DC:27:B0:90:E4:CC
Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Certificate issuer:       /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Certificate serial:       06DF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
Manifest number:          06D8
Signing time:             Sat 06 Dec 2025 15:03:46 +0000
Manifest this update:     Sat 06 Dec 2025 15:03:45 +0000
Manifest next update:     Sat 13 Dec 2025 15:03:45 +0000
Files and hashes:         1: MZsxRPBqjysw1BIHH-EhB3T-huc.crl (hash: 7T4uhXfYvu2gX1UrREZFax+L296egG+XC5ycIo4Lfq4=)
                          2: 27C29E5EF94411EDB4C6E91CC4F9AE02.roa (hash: PGlTDpEV17D+1hrLu4fdfibpz1YbRKMAlzpsoNFgyb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1759 (0x6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB, serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
        Validity
            Not Before: Dec  6 15:03:45 2025 GMT
            Not After : Dec 13 15:03:45 2025 GMT
        Subject: CN=693445d2-df8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:53:75:33:d6:b3:c2:22:8a:56:80:0c:22:
                    e6:9c:45:1a:a9:09:f0:a0:07:79:b2:42:d8:51:d1:
                    37:bf:91:2f:23:26:fb:fe:b2:23:29:16:42:88:ca:
                    77:4d:a6:65:a7:8d:0d:67:58:5e:ab:82:5f:0a:a8:
                    d8:67:58:62:13:cb:eb:8b:b1:a2:93:9c:40:26:3a:
                    f0:2b:01:63:54:4f:51:7c:bf:a6:b5:34:b5:1b:e3:
                    3f:e8:ce:0b:8b:e2:7f:7e:4c:6a:83:70:ce:0d:d4:
                    ca:d6:6c:3f:39:f4:ce:92:bf:b6:ea:e6:7f:64:4e:
                    83:e7:9f:cd:7f:d1:75:65:d0:4d:70:c5:7a:ee:60:
                    50:b7:9c:3b:6a:62:98:b8:dc:b4:f5:71:0d:36:4a:
                    f2:54:74:70:ac:af:39:21:55:4b:be:27:05:e4:6c:
                    5f:2d:05:aa:fd:12:17:17:ee:9d:a9:80:cc:59:d9:
                    9e:30:ae:34:88:cf:3a:2d:f6:68:8f:62:c4:18:60:
                    56:4e:85:f1:08:b0:60:06:05:58:65:62:60:cf:f6:
                    20:2a:54:08:ea:05:e2:09:7b:36:9a:62:28:a1:38:
                    09:10:51:a8:90:e1:84:5c:7a:bb:6c:16:85:f1:14:
                    c0:53:d8:8c:d8:74:ba:49:4e:01:c7:c2:ab:d7:bf:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CC:D2:11:1C:A0:41:15:98:CE:91:47:8A:55:DC:27:B0:90:E4:CC
            X509v3 Authority Key Identifier:
                keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8e:09:bb:d3:d6:cc:e5:48:f4:0b:6a:6c:d1:61:8b:8a:c3:
         c9:dc:1f:31:51:8f:7c:57:f7:78:d2:0f:7b:50:cf:4a:1b:18:
         99:d3:a6:15:87:08:4d:ae:9a:fa:07:cc:72:85:3e:02:53:77:
         22:76:0f:53:40:9d:cc:9b:99:1f:9f:a7:fe:c1:a2:4a:5d:3f:
         b6:c7:5a:b3:55:00:75:ed:ba:3e:75:66:89:13:01:82:d7:71:
         90:72:60:2f:b6:f2:33:c9:c3:fd:3c:9d:e8:d4:e5:9c:e6:e0:
         c5:41:cb:93:97:3d:b0:45:a2:67:77:0a:b0:88:f1:fd:3b:d2:
         3d:12:1e:13:6b:d3:79:7e:ee:c5:47:11:33:17:38:33:b1:25:
         f6:b2:ee:7b:8a:a4:86:e8:ad:ea:83:df:64:48:45:ca:c9:d1:
         cd:84:66:b8:87:2e:ba:94:16:78:ee:5c:79:8d:53:2a:4b:5f:
         fb:8f:76:b6:7d:a5:40:a8:98:25:e1:d4:68:5f:ca:df:56:34:
         8d:1f:f1:a3:86:f8:5f:b6:70:9d:4b:fb:69:3f:a1:80:75:3f:
         41:75:2b:4d:75:c7:0f:cf:10:16:08:8d:44:58:8b:53:f4:34:
         20:61:2a:b5:17:4e:f1:da:9c:73:b2:05:1c:76:33:1a:04:56:
         a9:41:30:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcxQ0IxMTAvBgNVBAUTKDMxOUIzMTQ0RjA2QThGMkIzMEQ0MTIwNzFGRTEyMTA3
NzRGRTg2RTcwHhcNMjUxMjA2MTUwMzQ1WhcNMjUxMjEzMTUwMzQ1WjAYMRYwFAYD
VQQDEw02OTM0NDVkMi1kZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzhlTdTPWs8IiilaADCLmnEUaqQnwoAd5skLYUdE3v5EvIyb7/rIjKRZCiMp3
TaZlp40NZ1heq4JfCqjYZ1hiE8vri7Gik5xAJjrwKwFjVE9RfL+mtTS1G+M/6M4L
i+J/fkxqg3DODdTK1mw/OfTOkr+26uZ/ZE6D55/Nf9F1ZdBNcMV67mBQt5w7amKY
uNy09XENNkryVHRwrK85IVVLvicF5GxfLQWq/RIXF+6dqYDMWdmeMK40iM86LfZo
j2LEGGBWToXxCLBgBgVYZWJgz/YgKlQI6gXiCXs2mmIooTgJEFGokOGEXHq7bBaF
8RTAU9iM2HS6SU4Bx8Kr17+3QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXM0hEc
oEEVmM6RR4pV3CewkOTMMB8GA1UdIwQYMBaAFDGbMUTwao8rMNQSBx/hIQd0/obn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8wMTBFQjI4ODgw
ODkxMUVCOEI1MDVGMjBDNEY5QUUwMi9NWnN4UlBCcWp5c3cxQklISC1FaEIzVC1o
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL01ac3hSUEJxanlzdzFCSUhILUVoQjNULWh1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzFDQi8wMTBFQjI4ODgwODkxMUVCOEI1MDVGMjBDNEY5QUUwMi9NWnN4UlBCcWp5
c3cxQklISC1FaEIzVC1odWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBijgm709bM5Uj0C2ps0WGLisPJ3B8xUY98V/d40g97UM9KGxiZ06YV
hwhNrpr6B8xyhT4CU3cidg9TQJ3Mm5kfn6f+waJKXT+2x1qzVQB17bo+dWaJEwGC
13GQcmAvtvIzycP9PJ3o1OWc5uDFQcuTlz2wRaJndwqwiPH9O9I9Eh4Ta9N5fu7F
RxEzFzgzsSX2su57iqSG6K3qg99kSEXKydHNhGa4hy66lBZ47lx5jVMqS1/7j3a2
faVAqJgl4dRoX8rfVjSNH/GjhvhftnCdS/tpP6GAdT9BdStNdccPzxAWCI1EWItT
9DQgYSq1F07x2pxzsgUcdjMaBFapQTCl
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:06:50 2025 by rpki-client