This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
File:                     kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json)
Hash identifier:          SJPWJG/Y0/TAuovpMjdcejTTYVstZ5uH9NbgOacjUtg=
Subject key identifier:   AE:E9:88:25:7B:1D:C1:7B:5D:57:11:5A:63:28:A8:7B:DB:4E:0E:0F
Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
Certificate issuer:       /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Certificate serial:       087D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
Manifest number:          0877
Signing time:             Sat 06 Dec 2025 19:43:15 +0000
Manifest this update:     Sat 06 Dec 2025 19:43:15 +0000
Manifest next update:     Sat 13 Dec 2025 19:43:15 +0000
Files and hashes:         1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: T7W6JQFzeJWItHiGWK7eT+K39u6hXqGUkN0Ypw0ZsVw=)
                          2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
                          rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
        Validity
            Not Before: Dec  6 19:43:15 2025 GMT
            Not After : Dec 13 19:43:15 2025 GMT
        Subject: CN=69348753-d8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:c5:81:55:23:e8:ba:9a:93:85:04:9d:4a:
                    17:43:e6:ad:9f:29:ca:4b:ad:4a:6d:01:03:28:0d:
                    09:50:ec:0b:70:7e:02:00:42:37:45:24:72:d3:7f:
                    48:33:be:e2:0a:aa:3f:1f:30:82:87:38:71:00:c6:
                    39:03:0e:d3:ad:73:76:fc:62:2e:5d:76:48:d8:d2:
                    dc:0f:76:61:6c:79:d4:03:85:2a:12:f2:1a:7e:3f:
                    68:84:7e:4d:cf:9d:cd:fa:9c:b1:5e:5d:4d:13:f2:
                    5f:5a:1a:62:56:8b:77:d7:7a:dc:39:b9:96:dc:15:
                    f8:67:a4:4c:95:35:25:f3:73:eb:a4:19:b9:15:10:
                    69:60:6f:02:9d:ce:76:f8:bf:34:f7:e1:54:8c:72:
                    a1:bf:3f:11:bb:13:ff:56:fc:e5:f3:75:c1:61:69:
                    22:f1:cf:23:49:77:22:f4:82:83:9a:f2:55:e1:a0:
                    79:bd:a8:85:c1:2d:cf:18:b8:52:15:b4:0b:e7:b3:
                    7d:0b:83:3d:95:b3:8e:98:c3:7b:45:cb:0d:8e:7c:
                    f4:d6:f5:fa:68:26:b2:9b:14:00:80:a9:eb:6c:82:
                    fe:18:71:02:92:e7:c6:3b:4c:2f:22:08:b0:bf:3a:
                    c1:44:eb:ec:b4:ab:59:c5:a3:ca:dd:45:bd:ca:ff:
                    96:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E9:88:25:7B:1D:C1:7B:5D:57:11:5A:63:28:A8:7B:DB:4E:0E:0F
            X509v3 Authority Key Identifier:
                keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:bf:ca:78:df:e5:9b:ef:a4:c9:62:96:e1:57:bd:e6:88:d9:
         03:05:e8:33:ad:85:29:8f:50:68:0d:95:a4:e5:7c:ac:73:ef:
         1a:bb:9f:2f:2c:b3:96:07:dc:9c:b0:45:b0:e5:dc:19:0c:2b:
         51:b9:f4:57:9d:b5:40:aa:7e:b0:65:b5:09:64:90:21:08:f6:
         83:da:43:8a:12:8e:54:cb:21:96:1b:e5:1b:3e:f2:79:fd:b4:
         19:d5:1c:dd:21:d8:25:8f:91:18:b0:23:2b:9b:6e:aa:df:a8:
         39:7a:4a:9e:bf:99:bc:4b:94:c1:6a:93:12:ce:ae:bd:ee:c7:
         14:22:ca:93:6f:59:eb:51:88:15:fb:3b:e3:70:87:c5:d7:d4:
         5d:06:e3:d7:fa:e5:64:73:44:dc:5d:06:1c:c0:d8:04:3a:fb:
         0a:98:e2:f7:53:58:aa:81:00:cf:55:aa:d9:12:ac:31:6e:20:
         48:75:c9:55:d2:21:3a:51:c4:98:7e:c6:cd:f2:45:f6:73:ef:
         00:c6:d9:de:6e:df:f2:01:0c:35:25:8d:a6:06:b5:bc:d1:8d:
         9d:8c:c7:09:e0:d8:2e:d9:8a:ac:03:29:d5:5c:e9:1f:3f:87:
         46:8b:da:45:b5:cb:a4:54:b5:ee:d3:03:a0:32:b4:66:58:89:
         5a:3a:3d:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3
RDcxNjQyNEIwHhcNMjUxMjA2MTk0MzE1WhcNMjUxMjEzMTk0MzE1WjAYMRYwFAYD
VQQDEw02OTM0ODc1My1kOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwIfFgVUj6Lqak4UEnUoXQ+atnynKS61KbQEDKA0JUOwLcH4CAEI3RSRy039I
M77iCqo/HzCChzhxAMY5Aw7TrXN2/GIuXXZI2NLcD3ZhbHnUA4UqEvIafj9ohH5N
z53N+pyxXl1NE/JfWhpiVot313rcObmW3BX4Z6RMlTUl83PrpBm5FRBpYG8Cnc52
+L809+FUjHKhvz8RuxP/Vvzl83XBYWki8c8jSXci9IKDmvJV4aB5vaiFwS3PGLhS
FbQL57N9C4M9lbOOmMN7RcsNjnz01vX6aCaymxQAgKnrbIL+GHECkufGO0wvIgiw
vzrBROvstKtZxaPK3UW9yv+WPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7piCV7
HcF7XVcRWmMoqHvbTg4PMB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3
ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3
V0NtSl9NdHlfSko5Y1dRa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjv8p43+Wb76TJYpbhV73miNkDBegzrYUpj1BoDZWk5Xysc+8au58v
LLOWB9ycsEWw5dwZDCtRufRXnbVAqn6wZbUJZJAhCPaD2kOKEo5UyyGWG+UbPvJ5
/bQZ1RzdIdglj5EYsCMrm26q36g5ekqev5m8S5TBapMSzq697scUIsqTb1nrUYgV
+zvjcIfF19RdBuPX+uVkc0TcXQYcwNgEOvsKmOL3U1iqgQDPVarZEqwxbiBIdclV
0iE6UcSYfsbN8kX2c+8Axtnebt/yAQw1JY2mBrW80Y2djMcJ4Ngu2YqsAynVXOkf
P4dGi9pFtcukVLXu0wOgMrRmWIlaOj2m
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:19:38 2025 by rpki-client