This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
File:                     Z15jpMF4xvVmAmQCRHJGTrmOG10.mft (raw, json)
Hash identifier:          gZBBmMemYrcPpQgJqqdGpi7R8OPslkXvginTz3gd3Nw=
Subject key identifier:   42:B2:B4:71:13:C9:D5:E9:48:C6:02:C4:B8:F4:4A:17:AF:75:41:59
Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D
Certificate issuer:       /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
Certificate serial:       04EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
Manifest number:          04E3
Signing time:             Thu 04 Dec 2025 22:19:21 +0000
Manifest this update:     Thu 04 Dec 2025 22:19:20 +0000
Manifest next update:     Thu 11 Dec 2025 22:19:20 +0000
Files and hashes:         1: Z15jpMF4xvVmAmQCRHJGTrmOG10.crl (hash: dfIcrwp5rjz4ggD3IUvQEpjKXG7tFuUymXBedwORnY4=)
                          2: CBCD0962B91511EE865E5E34C4F9AE02.roa (hash: cZhErBuJWTvRXCMGhnT1PF4hHeIUULRK1nW7jNBX110=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl
                          rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01FF, serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
        Validity
            Not Before: Dec  4 22:19:20 2025 GMT
            Not After : Dec 11 22:19:20 2025 GMT
        Subject: CN=693208e8-f1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:86:06:1f:43:b8:73:54:50:c6:f1:34:11:2d:
                    b9:d3:d1:98:62:3a:e2:88:45:84:2f:7a:bc:14:84:
                    5c:aa:88:3a:58:31:f2:95:89:ac:d6:7e:d4:cc:64:
                    fe:fb:71:6c:78:99:67:dd:51:22:54:e9:59:30:37:
                    bf:3d:fb:05:f8:92:30:aa:94:4c:41:c7:b4:9e:7f:
                    a4:cd:6c:8c:4f:0d:a2:27:f5:28:e4:ea:7f:d6:62:
                    06:52:1d:cd:4e:91:90:30:c6:7b:30:92:9e:ec:a1:
                    ad:7f:86:63:7d:5d:d1:17:dd:e2:f0:c0:ee:2a:40:
                    43:c3:59:d0:b7:64:10:ec:c8:98:34:bd:df:c6:2f:
                    85:ae:bc:df:93:3d:b9:de:d8:40:04:ee:aa:3b:90:
                    02:57:87:64:76:41:68:33:68:bf:b2:90:be:e4:b1:
                    55:63:e5:1d:2b:5a:cc:48:c2:0a:2f:04:b5:94:70:
                    fe:85:09:b5:ab:66:51:8e:cf:cc:85:61:3c:e4:f1:
                    d2:a7:37:2b:32:13:34:23:c5:c0:ca:a5:88:f6:5c:
                    45:a5:56:6f:86:3d:02:70:51:4f:66:ea:72:07:e4:
                    24:2c:c9:03:8c:1e:f3:42:b0:b1:f9:40:60:a6:c3:
                    99:85:36:2d:5d:28:53:01:1a:42:c0:e8:e7:0b:c6:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B2:B4:71:13:C9:D5:E9:48:C6:02:C4:B8:F4:4A:17:AF:75:41:59
            X509v3 Authority Key Identifier:
                keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:4e:1f:c4:3a:44:15:13:4e:3c:59:ca:50:58:a2:71:73:18:
         c4:d4:40:3d:08:44:d7:93:20:f6:ad:c4:90:36:30:3b:09:f8:
         af:26:d7:16:3a:44:5e:42:a5:5d:bf:7e:d4:fc:79:6c:9f:e9:
         f9:97:ca:aa:b7:89:89:ed:b3:92:ae:0a:7f:8c:34:08:b4:5d:
         f0:e6:ec:8f:90:d7:85:bd:0d:a4:f5:a9:dd:3d:e6:c8:14:44:
         df:ba:a9:d4:4c:eb:46:20:33:b8:ef:1a:59:12:1c:2c:33:18:
         79:03:83:75:2d:7e:07:93:fb:ee:00:82:85:a7:6d:6d:bd:b9:
         1b:40:f9:c2:88:a5:50:78:bd:38:32:26:c3:5a:14:3c:94:0f:
         fe:55:93:b2:ca:f0:45:d1:d6:60:29:e0:c0:24:6c:f0:f8:d4:
         ea:ed:1b:de:c9:df:4e:19:f0:96:f8:31:9d:9f:4c:6f:4c:d5:
         92:ee:34:bf:62:06:45:b1:50:0c:28:cf:2c:7e:27:99:a7:24:
         87:83:75:17:2a:f0:08:80:74:5d:f0:af:b5:1f:36:ab:92:98:
         07:72:52:54:dc:db:f2:d8:ab:80:a9:49:03:a0:ae:63:c4:bf:
         90:f6:9e:ae:8b:ee:9a:09:76:97:64:e6:a4:c6:73:8a:8a:33:
         89:0c:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:29:36 2025 by rpki-client