This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft
File:                     zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft (raw, json)
Hash identifier:          lscEEQ0qHYPScfUuWhskhF8Q9Z+zhcunZL3dqBJQXwg=
Subject key identifier:   BA:68:62:65:2F:26:1E:C9:F7:18:43:5C:10:BF:DC:04:D2:31:6B:CF
Authority key identifier: CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E
Certificate issuer:       /CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft
Manifest number:          0167
Signing time:             Fri 05 Dec 2025 02:07:49 +0000
Manifest this update:     Fri 05 Dec 2025 02:07:48 +0000
Manifest next update:     Fri 12 Dec 2025 02:07:48 +0000
Files and hashes:         1: zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl (hash: L250QGyBfpH9ZcGw+SnmXaY6Bdv3kpbo7v+n5fGEjIA=)
                          2: 91056478AF6A11EE93DDE73AC4F9AE02.roa (hash: AurKJa/IQdeMXLDvtgzXzstmuY9lm884aAVif5yLieA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl
                          rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBA0C, serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E
        Validity
            Not Before: Dec  5 02:07:48 2025 GMT
            Not After : Dec 12 02:07:48 2025 GMT
        Subject: CN=69323e75-5578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:16:59:ac:0b:a0:00:56:b1:03:06:db:ab:
                    a6:97:28:8a:b8:6e:b6:1a:a5:65:2a:db:78:a5:7e:
                    86:51:17:56:6e:b1:a1:88:fd:b7:d4:f9:c6:e8:ad:
                    4b:a6:4c:91:ee:43:9d:a7:b6:cb:3a:8e:72:43:ff:
                    ea:d3:84:fd:e7:61:8f:10:45:a2:d9:18:7e:02:74:
                    39:4d:ca:08:20:28:70:1d:aa:60:19:e1:aa:ff:ce:
                    04:ee:65:0c:60:b7:0f:bd:ef:a1:5b:4e:1a:10:2e:
                    57:ad:5f:84:87:68:9b:d1:a7:bc:bd:0c:c6:aa:f8:
                    c4:ea:d6:a3:04:40:34:cf:70:cf:dd:c6:ec:22:40:
                    ed:16:5e:57:db:f2:49:14:4c:f4:01:f0:79:5c:51:
                    c5:fd:7a:3a:f8:98:b3:0c:da:3f:72:8f:96:0b:86:
                    a2:b6:87:ea:0f:46:cb:12:bb:37:b2:70:c4:50:3e:
                    73:6d:12:5c:7c:92:07:01:2d:7c:18:4e:ab:db:d7:
                    94:d5:31:53:f7:5d:59:b0:9d:03:25:50:d0:76:40:
                    92:d4:c2:f2:4b:7f:17:cb:35:be:8b:af:ba:9f:a2:
                    5d:b1:37:5c:d0:be:4a:3e:7b:79:8a:a5:a4:c5:d7:
                    fc:d1:5e:2b:9f:98:4e:5f:72:2d:c8:32:d4:a1:71:
                    ea:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:68:62:65:2F:26:1E:C9:F7:18:43:5C:10:BF:DC:04:D2:31:6B:CF
            X509v3 Authority Key Identifier:
                keyid:CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6b:9f:0e:3e:7d:20:fc:cb:cd:f7:a6:12:c2:1f:03:3d:f6:
         eb:58:cd:cc:14:b0:e5:20:b9:25:d2:e5:c9:3c:76:18:45:0b:
         12:7f:46:5d:96:95:1b:fc:05:ef:ab:ae:b0:5c:41:f1:06:97:
         fb:79:8d:2e:de:99:da:9a:74:94:05:c2:08:3a:87:4f:42:37:
         7e:87:1b:c9:1f:6c:23:ed:d9:b4:ad:3f:50:d5:48:3b:a5:34:
         a7:ab:13:bb:0b:8f:50:4e:dc:bc:8a:20:ef:f7:ee:b0:1f:d7:
         cc:a6:11:82:a4:a5:00:37:63:15:98:d7:ee:b6:2e:6d:5e:37:
         72:75:35:a8:a2:d8:27:ad:2c:af:1b:ed:2b:85:7b:12:bc:a7:
         65:6d:bf:b8:59:9d:26:db:02:3a:a7:9a:35:38:73:44:22:85:
         aa:6b:44:fc:f9:14:6e:99:99:18:cf:d9:ca:2e:b7:b1:57:3f:
         f0:ab:65:8e:e3:f4:d3:b6:5c:f8:e2:94:5f:5f:e2:87:05:6f:
         49:f6:5c:9f:52:07:5b:c9:6c:3c:e6:0a:c8:93:97:31:ab:fd:
         70:a4:69:4b:05:a6:95:f5:14:df:dc:1f:50:f4:37:95:bb:a1:
         23:4b:e6:c3:da:70:f5:91:cd:f8:0f:0d:34:f9:4b:a9:79:07:
         7f:46:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:20:15 2025 by rpki-client