This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
File:                     zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json)
Hash identifier:          No4rHm3TmzFf4rlGO2CMc0Owbt7rnGMEmA7MZm3GLZI=
Subject key identifier:   08:7D:2B:82:84:B5:37:98:9B:3E:8E:03:A9:77:3F:CB:CF:4E:F7:0F
Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58
Certificate issuer:       /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758
Certificate serial:       177D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
Manifest number:          1773
Signing time:             Sat 06 Dec 2025 16:11:57 +0000
Manifest this update:     Sat 06 Dec 2025 16:11:56 +0000
Manifest next update:     Sat 13 Dec 2025 16:11:56 +0000
Files and hashes:         1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: rX4X/NgZV3egoQoVgjD4nrcS3q8UbtPyupHam34fbQc=)
                          2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: uASyVgC1Cwioz2zhPx4P08otp7ZGZ17OkqWd5dxa/vo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl
                          rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6013 (0x177d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758
        Validity
            Not Before: Dec  6 16:11:56 2025 GMT
            Not After : Dec 13 16:11:56 2025 GMT
        Subject: CN=693455cd-526e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:ea:eb:dd:a8:90:54:fa:89:a1:83:25:3a:
                    a7:02:34:2d:c8:be:27:d3:96:d2:24:21:9e:cd:26:
                    4c:18:f1:ba:15:c4:cc:9c:5a:8c:4a:15:41:4d:94:
                    0a:d8:2c:33:58:f3:db:94:4a:ba:2e:62:0c:60:2f:
                    3b:82:d3:25:ed:d5:97:cb:ee:2b:7b:4a:03:84:89:
                    46:ce:de:53:35:19:af:00:af:a9:a1:4c:aa:28:d1:
                    e4:81:0b:a3:cd:62:2f:3f:f9:68:51:f5:b4:20:73:
                    b3:1b:98:55:8d:51:0d:e2:7b:01:c6:26:26:3a:8d:
                    dd:c2:3f:4b:04:45:96:74:86:67:69:bb:30:1a:a9:
                    95:a8:0c:0b:68:7b:63:47:2e:f1:f7:ee:fb:3f:46:
                    7a:80:36:63:e7:f4:f1:74:e7:b6:2c:cb:1f:44:67:
                    42:09:c2:55:30:f6:76:2e:a7:52:2a:5f:2b:dd:51:
                    98:b0:bb:cb:51:90:0f:86:d1:de:00:67:31:7a:94:
                    4a:b6:c0:54:8e:c0:75:ba:22:ea:aa:7b:3e:ef:ef:
                    f0:dc:ce:21:1d:5d:ec:25:70:ee:17:f5:df:01:e4:
                    06:b2:0f:b0:e2:16:82:88:0f:a7:2f:9a:48:2c:54:
                    34:15:47:6d:9e:d2:2e:9a:69:49:48:ef:48:de:14:
                    fb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7D:2B:82:84:B5:37:98:9B:3E:8E:03:A9:77:3F:CB:CF:4E:F7:0F
            X509v3 Authority Key Identifier:
                keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e5:6c:8a:a8:55:1c:ed:74:fc:e8:95:97:5b:75:9d:b3:53:
         6e:0a:e0:ee:75:ab:0d:5d:e1:41:c9:b7:af:3c:e1:32:c6:bf:
         55:44:88:82:64:6b:4d:9b:67:24:39:25:df:61:1e:fb:2f:3f:
         14:25:29:7a:ad:fb:be:8a:04:38:db:48:bd:00:3c:62:67:42:
         84:3b:d9:cb:b4:e8:88:73:fd:de:71:80:b3:85:aa:eb:08:56:
         f1:3e:13:99:ca:76:3a:89:5f:ed:43:d3:e7:cd:22:01:e0:cf:
         34:21:ea:87:b8:4a:24:a7:36:d7:ef:c0:99:fe:a7:e5:7b:01:
         5a:76:d9:1a:67:2f:88:bd:90:dc:e4:19:f3:be:c6:0a:97:70:
         58:e9:92:07:c6:f6:52:76:5b:9a:8b:9b:bf:10:d9:1a:6f:58:
         65:dc:77:63:cb:3a:a0:2d:1a:5e:86:d8:91:9d:26:78:00:98:
         09:8b:c3:fa:ad:5b:fe:df:27:91:ab:3a:bc:89:ed:7b:87:1f:
         06:c4:a5:fa:65:b3:df:30:01:81:eb:55:73:e9:43:93:67:47:
         18:9a:b9:17:32:5f:59:dc:de:41:b1:36:ca:71:9f:5d:87:4e:
         6b:f7:00:37:a5:ef:78:b3:26:77:37:4b:8b:ed:65:3a:2f:45:
         96:e6:9e:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICF30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD
RTYyQ0E3NTgwHhcNMjUxMjA2MTYxMTU2WhcNMjUxMjEzMTYxMTU2WjAYMRYwFAYD
VQQDEw02OTM0NTVjZC01MjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr/Lq692okFT6iaGDJTqnAjQtyL4n05bSJCGezSZMGPG6FcTMnFqMShVBTZQK
2CwzWPPblEq6LmIMYC87gtMl7dWXy+4re0oDhIlGzt5TNRmvAK+poUyqKNHkgQuj
zWIvP/loUfW0IHOzG5hVjVEN4nsBxiYmOo3dwj9LBEWWdIZnabswGqmVqAwLaHtj
Ry7x9+77P0Z6gDZj5/TxdOe2LMsfRGdCCcJVMPZ2LqdSKl8r3VGYsLvLUZAPhtHe
AGcxepRKtsBUjsB1uiLqqns+7+/w3M4hHV3sJXDuF/XfAeQGsg+w4haCiA+nL5pI
LFQ0FUdtntIummlJSO9I3hT7fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAh9K4KE
tTeYmz6OA6l3P8vPTvcPMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1
RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw
MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl
V0hzQlhoQkU4SmpPWXNwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBk5WyKqFUc7XT86JWXW3Wds1NuCuDudasNXeFBybevPOEyxr9VRIiC
ZGtNm2ckOSXfYR77Lz8UJSl6rfu+igQ420i9ADxiZ0KEO9nLtOiIc/3ecYCzharr
CFbxPhOZynY6iV/tQ9PnzSIB4M80IeqHuEokpzbX78CZ/qflewFadtkaZy+IvZDc
5BnzvsYKl3BY6ZIHxvZSdluai5u/ENkab1hl3HdjyzqgLRpehtiRnSZ4AJgJi8P6
rVv+3yeRqzq8ie17hx8GxKX6ZbPfMAGB61Vz6UOTZ0cYmrkXMl9Z3N5BsTbKcZ9d
h05r9wA3pe94syZ3N0uL7WU6L0WW5p7Z
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:09:41 2025 by rpki-client