This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
File:                     zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json)
Hash identifier:          rfujLPkpqe6YBdsdEijM+qKPa1xvy0tRFutwou9qQzI=
Subject key identifier:   6B:33:6F:CD:30:D3:00:7A:38:5A:69:43:E4:E1:C4:2A:DC:B2:7D:BC
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Certificate issuer:       /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial:       0883
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
Manifest number:          0876
Signing time:             Thu 04 Dec 2025 19:43:05 +0000
Manifest this update:     Thu 04 Dec 2025 19:43:05 +0000
Manifest next update:     Thu 11 Dec 2025 19:43:05 +0000
Files and hashes:         1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: BkofENZ5vVfdfa7LWyuoV2k+ZeKsA8Nl2O/Q6EplHz8=)
                          2: 5A020E1229E011EB80A2FF13C4F9AE02.roa (hash: 5FNBX5H270TTnOX6V0W/sXkhhqzheyLbOa1sf514DnQ=)
                          3: 5B1534BE29E011EB80A2FF13C4F9AE02.roa (hash: VBveYclvQ2SVsxz7urPOSzVM9trDrjYG3QLCDnYlh4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
                          rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179 (0x883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
        Validity
            Not Before: Dec  4 19:43:05 2025 GMT
            Not After : Dec 11 19:43:05 2025 GMT
        Subject: CN=6931e449-1633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:c3:b7:97:f7:b9:6d:36:3f:17:57:2a:bb:
                    23:e5:20:8b:01:4a:cc:4b:0a:21:02:e3:1b:46:15:
                    1a:7b:4f:00:8d:60:3c:72:a8:09:96:2c:4b:51:42:
                    34:24:04:8a:f4:81:92:76:81:64:27:5b:22:5e:b1:
                    e9:6f:6d:2a:06:b1:46:42:82:00:26:3b:b1:fe:b0:
                    28:20:2f:1b:4d:35:d6:12:2a:85:c2:5d:38:79:09:
                    f4:30:61:5e:6e:b4:7e:6e:79:94:d9:42:97:dd:e3:
                    5c:9e:ec:a9:05:f6:e1:7c:99:75:4c:02:f9:aa:f8:
                    2e:31:2d:fb:11:a9:a9:e9:ab:fa:ae:91:80:90:58:
                    34:f2:19:c8:92:20:b6:d1:db:d3:fb:6a:77:60:ee:
                    16:82:dd:25:82:3e:df:fc:44:59:c7:44:8c:eb:d2:
                    71:b7:63:75:d8:ef:f6:34:05:e0:86:34:93:08:e5:
                    ff:ef:84:6c:c5:0c:25:fb:2e:39:70:f8:a1:bd:42:
                    65:3a:78:f1:f4:2a:b6:72:15:8f:d5:f5:a1:c3:a9:
                    27:6f:8d:4c:e4:07:18:33:11:ec:b8:a3:74:5f:29:
                    86:38:f1:87:f0:24:55:6c:5a:e2:fb:1f:2b:82:9a:
                    24:3c:9b:8c:df:6c:39:06:1b:32:bb:e2:54:8c:41:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:33:6F:CD:30:D3:00:7A:38:5A:69:43:E4:E1:C4:2A:DC:B2:7D:BC
            X509v3 Authority Key Identifier:
                keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:14:85:ba:1c:28:3e:0a:b8:ee:25:1a:22:54:3c:ce:d8:2c:
         11:d0:22:87:8a:12:da:ee:0f:82:75:4a:3a:d4:78:52:b2:f1:
         a3:ed:30:19:e9:94:ad:ad:8b:ca:fd:5f:58:6c:d5:3a:ab:6c:
         75:39:3c:5f:13:6a:26:47:cc:90:7e:f6:ee:bc:80:90:86:68:
         a5:93:8f:54:86:c3:b0:28:31:6e:72:74:ae:b7:87:9b:e3:df:
         80:45:94:bc:4d:af:eb:b2:e3:1e:e4:d5:f4:30:96:9c:a4:c4:
         5c:a3:78:81:17:bd:a9:f7:ac:a3:23:ab:13:de:ab:4b:79:bd:
         13:48:e5:7e:aa:56:b6:13:f2:2f:2f:ab:4f:49:0c:60:9c:4f:
         23:f3:24:d8:d1:18:74:23:76:02:af:30:ac:0d:8c:73:50:62:
         61:3f:d8:90:d4:e3:c5:9a:38:ef:fa:b8:d0:01:f5:39:9d:e6:
         40:1c:fe:42:f9:6e:6f:5d:1c:c0:94:b3:18:0c:18:90:c0:38:
         e5:1a:64:d5:0a:66:13:6a:8b:6b:1e:7b:cf:30:c5:05:11:eb:
         8a:aa:13:bf:c1:95:7f:e5:b0:5c:33:9a:9a:0e:47:53:81:c4:
         e0:00:8a:0f:a7:fd:5e:b7:03:8a:23:80:55:da:c6:db:42:73:
         d5:3e:44:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:26 2025 by rpki-client