This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
File:                     Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json)
Hash identifier:          ggpvaMn0OcLK060wJYnOLFeoyHiEb+b5LbIKszhHlaw=
Subject key identifier:   97:6A:CA:A9:D8:1C:65:7C:E8:8B:F9:12:50:29:D5:DE:FA:4A:DE:1C
Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
Certificate issuer:       /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Certificate serial:       1850
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
Manifest number:          183B
Signing time:             Sat 06 Dec 2025 16:08:16 +0000
Manifest this update:     Sat 06 Dec 2025 16:08:16 +0000
Manifest next update:     Sat 13 Dec 2025 16:08:16 +0000
Files and hashes:         1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: +6X4+d2qCcoya7s/Jee9yfdBX6d5iohFg9Vq/AVH9Ow=)
                          2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: QjWbiFJAMwmBAEMY1qS6fhF8PiRDmATsLV7gaqED+dA=)
                          3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: kpwpM+xpk8U22mtjo8dxh920QIvbJsAopAqetejoueY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6224 (0x1850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
        Validity
            Not Before: Dec  6 16:08:16 2025 GMT
            Not After : Dec 13 16:08:16 2025 GMT
        Subject: CN=693454f0-c080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:1d:e2:48:0c:4f:f3:4c:e5:70:7b:66:e7:
                    08:04:92:02:69:ff:da:cd:cc:17:4d:de:70:8f:ff:
                    e4:0c:fc:a8:4b:e3:d2:90:91:7f:56:51:38:10:50:
                    72:2a:f0:01:55:de:a1:01:ab:0b:aa:0f:a9:fe:81:
                    9a:81:a1:fe:36:69:b4:3b:c7:26:94:30:71:13:31:
                    e5:6e:6c:07:b3:88:df:cb:38:01:03:07:1e:5f:85:
                    a5:96:1a:4b:92:76:54:75:56:33:bb:f5:3e:8c:e6:
                    31:e1:7d:8d:0d:fa:0f:8f:50:c1:97:dc:35:f2:1a:
                    20:2f:2b:16:75:0f:da:23:16:2f:6d:bc:96:11:b8:
                    17:ec:5b:b9:fd:8d:8c:5e:46:ba:10:b8:4e:97:1a:
                    54:fc:db:dc:07:4f:24:27:28:e3:43:07:23:f6:ee:
                    e6:f5:7e:3f:42:00:fb:3f:34:8c:84:69:82:18:81:
                    91:fe:fe:8a:83:44:62:23:d8:fa:90:fd:39:5d:dc:
                    2e:7e:27:4c:e0:fb:4a:ab:ca:38:76:59:e6:3b:35:
                    4b:f0:37:40:c4:bc:ec:4c:29:7e:84:fa:45:e1:44:
                    14:c6:b9:1a:bc:a7:cd:c8:67:1d:eb:8a:57:87:05:
                    20:46:42:88:c7:cf:f9:02:20:a9:fe:11:2e:0d:00:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6A:CA:A9:D8:1C:65:7C:E8:8B:F9:12:50:29:D5:DE:FA:4A:DE:1C
            X509v3 Authority Key Identifier:
                keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4c:04:f0:de:ee:f6:4f:83:0c:39:ea:e6:c2:db:1a:94:dd:
         dd:c6:6e:74:e7:13:6b:cc:b4:aa:32:2c:03:63:10:4e:0b:c4:
         53:5b:f0:16:29:c2:cf:29:ab:00:11:22:cf:93:64:9e:47:27:
         68:2c:42:b2:d0:ed:95:0b:de:2d:6b:7a:9e:fb:14:c6:74:a3:
         ac:65:50:57:7c:ef:bd:27:3c:8c:38:40:d6:9c:c5:2c:92:2e:
         b0:60:8f:20:82:31:d2:d7:ac:b2:45:3f:88:b0:81:9b:f8:3f:
         b8:5d:32:13:de:cc:03:f9:bf:42:6b:d0:f7:05:93:67:67:53:
         32:5c:6d:e1:cf:43:df:87:bb:f9:ac:d1:3b:5e:fb:ad:27:00:
         94:f4:f9:d1:9e:f2:db:f0:89:7c:db:c7:ef:b8:38:5b:81:48:
         76:d2:a5:6d:c3:43:b3:d1:24:a0:d5:08:61:67:6e:b8:eb:49:
         56:ef:b4:8e:69:e5:6a:7c:c8:65:34:4a:50:5c:b7:48:88:db:
         0b:e3:a8:a7:bd:e0:47:e0:94:f1:46:74:b0:73:d9:27:8c:34:
         ef:7d:b0:b4:96:53:e6:c8:11:96:6c:87:f7:85:2d:e3:3a:5f:
         5e:d9:02:82:25:7a:ca:22:2a:3c:04:15:86:f6:a1:18:aa:f4:
         80:e7:79:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:44:17 2025 by rpki-client