This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
File:                     zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json)
Hash identifier:          v0brZ/0k/Y6O1VG7A4Bqfqn8eWOG6dIPVQCAQiOnFr8=
Subject key identifier:   84:69:1D:9E:5B:73:A0:AD:0D:37:A5:5A:15:CD:24:5E:5F:4F:6C:54
Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2
Certificate issuer:       /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2
Certificate serial:       0C9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
Manifest number:          0C94
Signing time:             Thu 04 Dec 2025 17:52:22 +0000
Manifest this update:     Thu 04 Dec 2025 17:52:21 +0000
Manifest next update:     Thu 11 Dec 2025 17:52:21 +0000
Files and hashes:         1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: 5eaPKwWPqpMBsTCIg4vLZfseTRmNlNBntkbA1DTLWB0=)
                          2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: tGg2gZvvqmK1MXVY5rUGUJI2gxizSYf5OdYwsS9Mmfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl
                          rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3230 (0xc9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2
        Validity
            Not Before: Dec  4 17:52:21 2025 GMT
            Not After : Dec 11 17:52:21 2025 GMT
        Subject: CN=6931ca55-c93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fd:30:08:31:10:f2:3e:8a:1c:0d:de:a3:9d:
                    c7:89:db:a9:dc:ff:dc:62:2d:2f:bc:58:ff:c8:c8:
                    43:0d:e1:f7:4a:3d:03:20:be:e7:3d:22:a0:22:b2:
                    d5:55:0c:16:93:58:86:84:33:7b:c5:4d:35:43:71:
                    8d:fd:c0:b7:a0:2f:c8:b1:56:22:8b:64:9c:da:5b:
                    97:11:c2:2e:7b:66:be:8d:69:32:32:36:8c:3d:b5:
                    24:4c:26:55:5b:f3:3e:aa:fd:c5:88:b3:65:76:bf:
                    5e:a6:18:96:d6:9c:8a:7b:76:a4:26:93:e0:e8:ca:
                    fd:2a:f7:df:b1:0b:69:2d:db:2f:cb:eb:6f:06:18:
                    c2:58:f0:86:93:56:09:69:d5:c3:2d:ee:1e:20:ee:
                    a6:23:cd:cd:3a:66:7e:47:f9:5d:56:56:6f:77:36:
                    4f:19:9e:e1:96:81:46:35:fb:04:46:61:29:99:cb:
                    aa:35:6c:b5:14:be:dd:49:93:16:27:3e:ed:5f:62:
                    07:20:83:45:93:ff:76:d4:ee:44:89:e1:52:93:77:
                    32:ba:0f:3f:a2:80:13:f8:78:70:1a:16:42:a8:7a:
                    72:66:2a:cb:39:61:e5:a5:52:cb:72:52:03:c1:48:
                    7a:ae:f1:89:1d:10:33:d6:a4:cd:08:7a:ab:a8:e5:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:69:1D:9E:5B:73:A0:AD:0D:37:A5:5A:15:CD:24:5E:5F:4F:6C:54
            X509v3 Authority Key Identifier:
                keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:62:72:a3:53:c5:44:8d:c6:47:f2:08:94:32:a1:3f:2c:91:
         da:b3:a8:59:0f:09:16:74:8a:0a:eb:de:4f:72:70:3a:df:3c:
         0d:99:ca:10:67:4f:71:bf:bd:9a:f9:25:21:da:5c:9d:ca:6e:
         36:58:8d:a8:7a:31:ff:57:39:62:bb:e2:57:cd:a3:cb:df:7f:
         56:ba:27:31:9c:ee:cc:8b:96:bd:f2:c7:8a:3d:59:76:f9:71:
         f5:8f:bd:3a:3b:1e:52:b4:eb:13:f4:01:4d:18:ef:96:4f:bf:
         c4:0b:71:c6:49:3b:de:02:3e:1f:e6:18:65:c2:c6:41:23:01:
         1c:15:73:6d:7b:00:10:a6:c1:bf:e0:8f:f6:1e:ea:bd:90:22:
         b8:be:44:7d:68:8d:2b:1a:1d:f2:d0:38:80:b4:55:48:ef:7e:
         5f:fd:43:de:1e:f3:ed:c2:ba:b4:8e:35:1a:f1:ef:be:26:9c:
         30:9c:8b:4d:af:4e:69:2a:ed:1d:a4:22:8c:54:97:b9:d6:bb:
         44:aa:d9:17:bd:e5:d2:8d:72:f5:fe:0c:c7:ed:29:01:18:67:
         cc:fd:5a:25:ef:30:6b:40:73:68:90:11:fa:66:d6:da:a3:13:
         f0:06:6e:2b:9f:08:14:ee:33:eb:5b:18:eb:17:08:83:6a:ba:
         78:db:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:49 2025 by rpki-client