This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
File:                     CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json)
Hash identifier:          Z9gfg/HZTPnbuLhrFe9gWYI2wB1RzvSfhCRwgokVSMI=
Subject key identifier:   0A:1C:05:09:DE:BD:C0:DC:58:AA:E0:89:B8:2E:D4:08:90:0D:FC:59
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Certificate issuer:       /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial:       0229
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
Manifest number:          0223
Signing time:             Fri 05 Dec 2025 00:26:16 +0000
Manifest this update:     Fri 05 Dec 2025 00:26:16 +0000
Manifest next update:     Fri 12 Dec 2025 00:26:16 +0000
Files and hashes:         1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: LpHp8EVkbKMLwM32kgA8AaYfch+HKhqVP3HY6CDSaEQ=)
                          2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: MmbQus/ep65NlWLekYokD81GuyXquRa4J0H16aokObA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
        Validity
            Not Before: Dec  5 00:26:16 2025 GMT
            Not After : Dec 12 00:26:16 2025 GMT
        Subject: CN=693226a8-7d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:72:c0:66:87:0e:83:83:ad:4a:bd:ce:82:
                    6d:09:fe:7b:97:af:9a:b4:aa:86:af:13:1e:6c:88:
                    d0:7e:bc:2e:81:6d:59:94:21:fb:fc:70:fd:87:14:
                    d1:6f:f0:e4:43:29:10:7e:f0:9c:4d:5f:bf:5b:69:
                    71:1c:15:b6:4e:a8:4b:e3:95:f1:c3:44:ca:11:4d:
                    37:19:45:b6:48:fb:3c:b0:60:fd:f8:94:59:d2:87:
                    e6:6c:39:fe:ce:f5:d2:15:b4:25:db:87:0a:da:76:
                    57:22:a6:6e:90:d5:8a:44:3f:ef:00:f8:36:4d:2e:
                    93:da:6f:31:f1:8e:21:b6:ce:4c:bc:59:de:1a:8c:
                    12:88:65:1a:d2:09:dd:ea:75:d1:61:1e:af:c1:a5:
                    c4:2b:3c:1e:ad:0d:3c:51:25:44:4d:50:92:02:6b:
                    ae:02:e3:8a:ff:d9:20:34:6a:39:80:57:2e:3f:85:
                    fb:60:fa:46:e5:b8:a2:94:08:00:cb:6a:0e:ff:17:
                    b8:fa:a9:1a:3d:02:5f:ad:49:88:6e:c0:b8:20:ec:
                    1a:52:af:73:d3:2c:90:f9:db:07:73:3e:c7:cd:8c:
                    83:c3:3a:76:f2:4c:89:8a:5b:fe:87:25:69:28:a0:
                    c3:e1:77:b6:4d:f6:96:e7:8d:d9:8e:d2:3c:51:91:
                    f3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1C:05:09:DE:BD:C0:DC:58:AA:E0:89:B8:2E:D4:08:90:0D:FC:59
            X509v3 Authority Key Identifier:
                keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6f:36:4e:ee:ed:96:e6:fa:20:50:cd:f6:dc:68:94:67:60:
         80:5e:b7:ee:de:6e:6d:7e:a1:85:e3:6b:a2:7b:e3:00:d8:99:
         98:bb:91:5f:b2:10:1e:f8:f9:35:bd:a1:ea:96:a1:4e:b4:c7:
         01:63:a6:3a:2f:9a:43:6d:21:63:ee:8c:51:91:9a:e2:9a:22:
         53:80:7c:0e:ce:55:41:21:86:5f:f9:0b:46:1f:89:6f:e9:21:
         b3:2e:85:ae:6a:27:0d:c8:f3:ef:fb:8f:66:3f:f6:c6:6b:9a:
         2f:d4:a8:c0:d1:ef:86:b6:f1:bb:1a:57:fe:7b:d7:3e:b3:a5:
         3f:5a:ab:cf:4a:f3:78:54:58:e6:bf:01:a1:61:70:ea:20:88:
         d7:a0:01:b0:bc:9d:4b:d2:08:82:65:2c:da:15:db:8a:26:55:
         26:22:b0:8f:20:c2:87:2b:71:66:4c:f6:bf:a9:99:10:dc:0c:
         1d:cd:f7:77:e8:ee:b0:a2:24:39:15:b0:ea:40:a3:60:51:cc:
         74:bf:60:7f:46:79:98:90:77:4b:4c:3f:81:92:24:0c:f5:af:
         d3:c3:b2:cf:5d:da:72:d9:4e:c4:e2:29:82:28:dd:16:10:90:
         01:15:a3:16:80:16:d7:b5:4c:ce:ca:b6:3c:ea:3e:71:92:69:
         a8:79:69:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVCMkUxMTAvBgNVBAUTKDA5OUM4MTVGQ0E2ODJBNkUyODYwNEZFOTYyRkQxMDcx
NTgyN0U5NUQwHhcNMjUxMjA1MDAyNjE2WhcNMjUxMjEyMDAyNjE2WjAYMRYwFAYD
VQQDEw02OTMyMjZhOC03ZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5KFywGaHDoODrUq9zoJtCf57l6+atKqGrxMebIjQfrwugW1ZlCH7/HD9hxTR
b/DkQykQfvCcTV+/W2lxHBW2TqhL45Xxw0TKEU03GUW2SPs8sGD9+JRZ0ofmbDn+
zvXSFbQl24cK2nZXIqZukNWKRD/vAPg2TS6T2m8x8Y4hts5MvFneGowSiGUa0gnd
6nXRYR6vwaXEKzwerQ08USVETVCSAmuuAuOK/9kgNGo5gFcuP4X7YPpG5biilAgA
y2oO/xe4+qkaPQJfrUmIbsC4IOwaUq9z0yyQ+dsHcz7HzYyDwzp28kyJilv+hyVp
KKDD4Xe2TfaW543ZjtI8UZHzGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAocBQne
vcDcWKrgibgu1AiQDfxZMB8GA1UdIwQYMBaAFAmcgV/KaCpuKGBP6WL9EHFYJ+ld
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIyRS82RkM4QkZERThD
MjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0ttNG9ZRV9wWXYwUWNWZ242
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NaeUJYOHBvS200b1lFX3BZdjBRY1ZnbjZWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUIyRS82RkM4QkZERThDMjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0tt
NG9ZRV9wWXYwUWNWZ242VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfbzZO7u2W5vogUM323GiUZ2CAXrfu3m5tfqGF42uie+MA2JmYu5Ff
shAe+Pk1vaHqlqFOtMcBY6Y6L5pDbSFj7oxRkZrimiJTgHwOzlVBIYZf+QtGH4lv
6SGzLoWuaicNyPPv+49mP/bGa5ov1KjA0e+GtvG7Glf+e9c+s6U/WqvPSvN4VFjm
vwGhYXDqIIjXoAGwvJ1L0giCZSzaFduKJlUmIrCPIMKHK3FmTPa/qZkQ3Awdzfd3
6O6woiQ5FbDqQKNgUcx0v2B/RnmYkHdLTD+BkiQM9a/Tw7LPXdpy2U7E4imCKN0W
EJABFaMWgBbXtUzOyrY86j5xkmmoeWkQ
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:33:22 2025 by rpki-client