This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File:                     ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier:          darku+CWmqAW/6ObK2+nQRyNzX/7wpGUzkXC73iHez0=
Subject key identifier:   71:51:E9:1B:8F:C6:42:56:7A:34:50:8C:91:8F:26:82:9A:DD:CB:82
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer:       /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number:          016D
Signing time:             Fri 05 Dec 2025 02:11:16 +0000
Manifest this update:     Fri 05 Dec 2025 02:11:16 +0000
Manifest next update:     Fri 12 Dec 2025 02:11:16 +0000
Files and hashes:         1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: onyLVSC8GLvWJ3180AEDvYdvbmHUOo7bTp3Nltni9sA=)
                          2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: pIjFgpXQkNuUPeRzo+5CJIylR9ungXVNTfm0zEXHuWU=)
                          3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: gE5e/awh7V8v8LgWL9FQLpqEcqvec4IO81dUfYKKL1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
                          rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
        Validity
            Not Before: Dec  5 02:11:16 2025 GMT
            Not After : Dec 12 02:11:16 2025 GMT
        Subject: CN=69323f44-c2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:d0:fc:e8:c5:5f:82:ce:cf:01:f2:81:ad:
                    e0:a6:47:68:73:de:44:cd:ae:b0:0f:1f:de:ab:00:
                    79:80:69:39:ab:44:8b:54:63:16:b8:bc:08:0b:18:
                    e5:4a:75:69:95:52:3f:6f:07:2b:7e:15:e7:b0:1e:
                    c0:d3:b8:30:c7:29:c0:6e:9c:8f:fa:8e:8f:a2:79:
                    50:8a:4c:74:6e:8a:d8:f9:31:1b:14:d6:52:74:34:
                    7f:25:84:81:7b:db:55:23:7f:a4:1b:0b:75:33:0e:
                    9a:2f:cd:10:20:14:4b:fb:c8:ff:53:87:a3:6c:74:
                    e7:f3:5a:6e:bb:35:91:00:6b:09:67:53:a6:d8:98:
                    eb:93:95:a9:6e:3f:09:82:af:d5:52:82:d3:84:7c:
                    99:7c:36:af:76:fd:f1:35:fe:97:dd:ac:4d:39:6e:
                    9c:da:76:c9:ac:64:38:30:f8:0b:92:a6:b3:72:8c:
                    81:71:1b:70:dd:d7:d1:bc:8e:1f:cb:c5:32:75:8b:
                    0b:41:79:b6:00:ba:43:79:88:f1:bd:77:71:f2:74:
                    3f:a6:a6:f9:00:77:24:38:d0:6d:09:eb:d5:46:ef:
                    24:4e:1a:75:a1:f5:b6:5e:66:13:65:2e:d7:3f:ba:
                    c9:71:0e:4e:0b:b2:c5:67:d1:9a:98:98:01:8e:af:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:E9:1B:8F:C6:42:56:7A:34:50:8C:91:8F:26:82:9A:DD:CB:82
            X509v3 Authority Key Identifier:
                keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7a:54:15:bc:0e:65:8c:86:68:fe:69:2e:81:a3:bc:01:fe:
         9e:71:22:e6:a3:24:64:89:d8:e1:8c:eb:eb:93:93:f7:4f:ac:
         47:52:11:a7:17:1d:67:f2:bc:17:80:7a:7d:fa:7e:25:62:70:
         76:fd:cc:1d:85:40:a4:c6:ce:8e:eb:67:f2:aa:29:00:fc:e4:
         30:c1:79:39:b2:84:59:1f:61:1e:70:90:9a:c8:1f:63:c5:1c:
         a3:46:0f:54:96:a2:ee:bc:17:2b:8a:ef:af:4b:41:7a:55:2d:
         04:b7:60:7b:0a:e0:6c:81:66:9d:55:c7:08:a2:ad:f8:02:ec:
         fc:f4:82:16:8a:70:7d:98:59:9e:24:e1:4f:07:26:79:1c:3f:
         d3:75:c6:05:fc:64:79:40:6d:96:60:04:20:96:93:2b:fa:66:
         0a:2c:c2:a5:00:76:a9:e4:d6:fa:c1:53:a1:67:b5:92:5f:f5:
         52:2b:63:c0:a6:a4:d5:63:61:68:e3:02:92:92:e3:aa:8e:63:
         ce:3b:f5:38:95:8e:ff:72:08:8d:de:c4:6c:95:b1:f5:99:0e:
         b7:7d:f4:85:a3:7d:f7:5d:eb:ee:09:14:5f:85:39:7a:7a:91:
         30:7a:40:7a:23:a3:4b:88:f0:d9:51:1a:b0:a7:b4:9a:c3:88:
         9a:d1:84:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz
OERDRTZBODMwHhcNMjUxMjA1MDIxMTE2WhcNMjUxMjEyMDIxMTE2WjAYMRYwFAYD
VQQDEw02OTMyM2Y0NC1jMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtmzQ/OjFX4LOzwHyga3gpkdoc95Eza6wDx/eqwB5gGk5q0SLVGMWuLwICxjl
SnVplVI/bwcrfhXnsB7A07gwxynAbpyP+o6PonlQikx0borY+TEbFNZSdDR/JYSB
e9tVI3+kGwt1Mw6aL80QIBRL+8j/U4ejbHTn81puuzWRAGsJZ1Om2Jjrk5Wpbj8J
gq/VUoLThHyZfDavdv3xNf6X3axNOW6c2nbJrGQ4MPgLkqazcoyBcRtw3dfRvI4f
y8UydYsLQXm2ALpDeYjxvXdx8nQ/pqb5AHckONBtCevVRu8kThp1ofW2XmYTZS7X
P7rJcQ5OC7LFZ9GamJgBjq+I2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFR6RuP
xkJWejRQjJGPJoKa3cuCMB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1
OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U
M1dRT0FrNjVUWTA0M09hb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBelQVvA5ljIZo/mkugaO8Af6ecSLmoyRkidjhjOvrk5P3T6xHUhGn
Fx1n8rwXgHp9+n4lYnB2/cwdhUCkxs6O62fyqikA/OQwwXk5soRZH2EecJCayB9j
xRyjRg9UlqLuvBcriu+vS0F6VS0Et2B7CuBsgWadVccIoq34Auz89IIWinB9mFme
JOFPByZ5HD/TdcYF/GR5QG2WYAQglpMr+mYKLMKlAHap5Nb6wVOhZ7WSX/VSK2PA
pqTVY2Fo4wKSkuOqjmPOO/U4lY7/cgiN3sRslbH1mQ63ffSFo333XevuCRRfhTl6
epEwekB6I6NLiPDZURqwp7Saw4ia0YT2
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:24:36 2025 by rpki-client