This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
File:                     zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json)
Hash identifier:          Mdzbk+WeFbzPIeG+bNVy/L0/8KBhbVgeO6uICrVOjGU=
Subject key identifier:   71:CF:3C:53:8D:D2:EF:73:6A:CD:CA:88:2E:E4:3D:AB:70:C8:55:40
Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
Certificate issuer:       /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
Manifest number:          F1
Signing time:             Fri 05 Dec 2025 03:21:12 +0000
Manifest this update:     Fri 05 Dec 2025 03:21:11 +0000
Manifest next update:     Fri 12 Dec 2025 03:21:11 +0000
Files and hashes:         1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: dhML/1lVHN7kjHBILgHJyhtwAx0rFC5GUo/tnxSuw8M=)
                          2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: Q17c7SW6XFhNWPI3WKGxRhv0/Nc9pxNZN4PlbthaE54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl
                          rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
        Validity
            Not Before: Dec  5 03:21:11 2025 GMT
            Not After : Dec 12 03:21:11 2025 GMT
        Subject: CN=69324fa7-52da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:17:a4:53:36:da:98:5f:bb:a4:1f:82:5a:
                    15:44:06:d5:d2:18:21:9d:f7:7d:46:ea:5b:9e:1b:
                    fd:f7:d6:8c:86:45:0d:9a:7f:82:0f:10:b8:d0:34:
                    0e:0c:48:bc:51:4d:e0:d6:ba:8c:18:2d:a1:b5:c7:
                    3b:f1:64:94:56:0e:d0:4a:a9:58:84:e6:13:c6:4f:
                    cb:ad:3c:db:5c:93:37:c6:14:51:53:bb:b3:85:fd:
                    e9:98:16:85:b4:18:e9:32:30:2f:52:22:9b:09:46:
                    c6:5c:c3:ba:0e:76:e2:c5:c2:f4:94:57:b9:8b:c6:
                    b7:db:a3:56:61:4f:cd:f3:60:48:ed:dd:01:93:be:
                    cc:2b:96:d6:8c:55:28:30:a1:3b:75:23:18:42:ff:
                    51:ac:b8:6d:73:18:80:bb:d7:04:1e:fb:bc:2a:69:
                    d9:b8:2f:59:80:d7:96:80:08:4f:6c:95:19:08:ff:
                    9f:cd:a8:f2:c8:7f:08:04:d4:db:34:06:ef:22:30:
                    9e:db:05:e7:23:91:ce:98:cf:58:33:e1:eb:a4:90:
                    2f:22:02:a2:dc:70:a5:6c:3c:9a:5e:c5:62:f1:f8:
                    23:44:fc:b0:70:ca:96:f8:48:5b:00:22:31:e3:9a:
                    3e:71:85:2e:f5:93:9e:9f:73:f9:66:3b:5b:a9:53:
                    5e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CF:3C:53:8D:D2:EF:73:6A:CD:CA:88:2E:E4:3D:AB:70:C8:55:40
            X509v3 Authority Key Identifier:
                keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9b:66:3a:c7:c8:7c:e9:9c:a2:cc:47:2c:bf:63:cd:40:06:
         04:1a:ba:cf:e2:6a:fb:51:5a:b4:c2:3f:c1:e2:c8:14:aa:f8:
         8c:04:c6:30:50:8a:8f:cb:ab:0a:f3:8c:0e:2b:92:d9:16:51:
         e2:ba:9a:af:15:8e:df:9d:ce:8f:36:fa:ab:49:74:f2:14:b1:
         dc:0d:f5:1b:20:42:f5:19:9e:b2:34:69:6f:57:cc:72:a3:8a:
         7b:eb:fd:b8:39:d5:77:c8:2f:a8:f2:8a:95:39:f3:fe:05:8c:
         af:fe:1c:b7:49:7a:6b:df:d6:ff:66:38:f7:46:e5:d1:60:e9:
         ee:1a:e6:01:3f:24:aa:df:35:e8:4b:bc:db:81:9d:57:14:15:
         96:3a:60:2b:36:fa:8a:31:16:8e:3c:32:48:2a:09:e8:45:87:
         65:c9:16:93:a6:af:5d:e7:b2:ae:55:b0:fd:4b:b0:00:57:4b:
         f0:bd:b4:9a:08:a9:9b:a4:3d:21:35:d8:1a:1d:c1:a6:c3:12:
         86:f4:91:7e:fb:7d:5a:a7:1d:97:4e:88:1b:ad:4d:40:e0:5b:
         2e:b2:b6:d6:bc:68:a3:2a:db:ab:f2:dc:a7:d7:a3:5e:b1:66:
         b0:0f:e1:23:40:c2:6a:9b:b7:9b:bd:f1:1f:f1:be:23:85:ac:
         aa:60:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:35 2025 by rpki-client