This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
File:                     ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json)
Hash identifier:          fJ9J4FscJcwKnHt7L03cxszjuzSP2xXnoun8PZlnzPM=
Subject key identifier:   CE:85:49:86:31:85:F3:BF:BD:50:94:DB:2C:AA:32:91:6E:EB:D6:1D
Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
Certificate issuer:       /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Certificate serial:       05F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
Manifest number:          05E4
Signing time:             Thu 04 Dec 2025 21:43:26 +0000
Manifest this update:     Thu 04 Dec 2025 21:43:25 +0000
Manifest next update:     Thu 11 Dec 2025 21:43:25 +0000
Files and hashes:         1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: y1yL3A13fgZz4QikhUfUdk4r2Vgd1z2qxtqyJlPKiYc=)
                          2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: NrV4RWB6V75WI2Mvh0+7ZjOQEbL/JgM6j62JOrXUpjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
                          rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1521 (0x5f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
        Validity
            Not Before: Dec  4 21:43:25 2025 GMT
            Not After : Dec 11 21:43:25 2025 GMT
        Subject: CN=6932007d-a997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:55:98:fd:3a:6d:98:62:8a:66:f4:9f:6b:
                    4d:68:ad:22:8e:53:e5:a7:cf:a1:88:8e:6d:72:4d:
                    2e:53:c2:4e:ce:52:dc:8b:f4:00:1e:3a:97:0e:fc:
                    ee:d5:22:d8:2c:5d:1f:8b:2a:ce:b5:36:ed:94:62:
                    ab:2e:c4:e6:f5:d6:77:9d:08:4c:a8:62:f5:8e:d2:
                    88:0a:39:fb:7c:a3:94:70:34:ee:a9:9b:15:38:26:
                    10:fc:92:d3:c6:d9:c0:f9:b1:ec:df:c6:b3:32:28:
                    e9:91:3d:40:05:ac:cc:b6:1a:22:d3:44:7f:c8:f9:
                    26:aa:80:55:05:10:59:53:5d:7d:4d:31:52:75:d2:
                    75:a9:2d:2d:e7:48:51:0b:a7:f4:ad:96:1b:06:12:
                    ee:4a:45:01:8a:25:9f:86:bc:14:e2:9a:2f:7c:13:
                    24:89:22:7c:87:29:1c:98:50:6e:63:48:8b:15:ef:
                    cf:91:d5:93:a0:72:c7:07:28:ef:08:f2:29:77:ed:
                    4a:58:21:8d:ca:df:82:6e:6e:59:7b:98:c6:d9:83:
                    dc:ad:ad:36:13:ef:3a:a1:f6:5a:49:f2:7d:b8:8d:
                    71:af:3f:e1:80:ad:3e:08:03:b9:d0:6d:8b:1e:85:
                    eb:54:47:30:31:69:d7:47:c8:11:1e:62:3e:78:cd:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:85:49:86:31:85:F3:BF:BD:50:94:DB:2C:AA:32:91:6E:EB:D6:1D
            X509v3 Authority Key Identifier:
                keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:da:7b:49:fd:c1:e5:7f:51:7b:ff:69:f7:9e:b6:6e:48:d6:
         92:2d:d1:03:07:20:4f:80:80:94:f2:92:55:90:25:dd:23:cb:
         98:ea:18:fe:2e:c9:0c:49:36:7c:7e:7e:36:20:45:cf:b1:b4:
         ea:6e:45:91:5a:d4:ea:d2:c2:43:5b:e0:b6:26:dc:01:18:ac:
         21:be:88:3e:45:5c:ea:76:95:3a:b4:bb:b7:5c:d7:6f:0c:5a:
         ed:22:60:5e:64:03:59:1d:3c:1d:c3:90:d2:88:4c:9c:a5:67:
         98:2f:78:d7:23:ff:81:67:7d:12:f2:ba:e6:d3:79:4d:61:ab:
         ff:b3:e6:22:16:73:e3:a5:65:78:fa:4f:8b:c2:41:51:8f:66:
         1a:6b:bf:69:83:62:6e:f8:1e:02:0d:95:46:6d:15:8e:89:65:
         7b:59:43:01:8b:0b:90:bc:9c:95:62:b9:fe:5a:18:af:64:fc:
         3d:b5:c0:a3:b9:7b:47:b3:6c:c1:c2:66:f6:e4:4d:d2:39:fe:
         2d:63:c3:f5:01:20:0b:75:b9:8f:9f:0e:5b:76:8e:ca:7c:f0:
         95:2d:ea:10:44:66:84:45:cd:e5:f8:c8:55:39:98:e1:b3:c2:
         a9:ba:9e:51:1b:f4:a6:d1:90:70:55:a7:3e:f8:35:78:b3:d3:
         eb:b2:83:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx
QzBDNUQ1QUMwHhcNMjUxMjA0MjE0MzI1WhcNMjUxMjExMjE0MzI1WjAYMRYwFAYD
VQQDEw02OTMyMDA3ZC1hOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnCZVmP06bZhiimb0n2tNaK0ijlPlp8+hiI5tck0uU8JOzlLci/QAHjqXDvzu
1SLYLF0fiyrOtTbtlGKrLsTm9dZ3nQhMqGL1jtKICjn7fKOUcDTuqZsVOCYQ/JLT
xtnA+bHs38azMijpkT1ABazMthoi00R/yPkmqoBVBRBZU119TTFSddJ1qS0t50hR
C6f0rZYbBhLuSkUBiiWfhrwU4povfBMkiSJ8hykcmFBuY0iLFe/PkdWToHLHByjv
CPIpd+1KWCGNyt+Cbm5Ze5jG2YPcra02E+86ofZaSfJ9uI1xrz/hgK0+CAO50G2L
HoXrVEcwMWnXR8gRHmI+eM0CNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6FSYYx
hfO/vVCU2yyqMpFu69YdMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF
RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx
YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC
ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBy2ntJ/cHlf1F7/2n3nrZuSNaSLdEDByBPgICU8pJVkCXdI8uY6hj+
LskMSTZ8fn42IEXPsbTqbkWRWtTq0sJDW+C2JtwBGKwhvog+RVzqdpU6tLu3XNdv
DFrtImBeZANZHTwdw5DSiEycpWeYL3jXI/+BZ30S8rrm03lNYav/s+YiFnPjpWV4
+k+LwkFRj2Yaa79pg2Ju+B4CDZVGbRWOiWV7WUMBiwuQvJyVYrn+WhivZPw9tcCj
uXtHs2zBwmb25E3SOf4tY8P1ASALdbmPnw5bdo7KfPCVLeoQRGaERc3l+MhVOZjh
s8Kpup5RG/Sm0ZBwVac++DV4s9PrsoNl
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:27:57 2025 by rpki-client