This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
File:                     zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft (raw, json)
Hash identifier:          lDgt+Q3HjhcFK8iByHZWTObcXjPkdWAyH36rPCuHxRE=
Subject key identifier:   E5:DE:8B:6B:41:36:77:BE:E8:26:44:B3:58:59:5A:E2:EE:44:F7:1E
Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84
Certificate issuer:       /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084
Certificate serial:       06BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
Manifest number:          06B1
Signing time:             Sat 20 Dec 2025 21:39:31 +0000
Manifest this update:     Sat 20 Dec 2025 21:39:30 +0000
Manifest next update:     Sat 27 Dec 2025 21:39:30 +0000
Files and hashes:         1: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl (hash: maFLe6HB2itLPRyS5UQ/NBPjQc57wIcTNnCj+8raWLw=)
                          2: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (hash: 3IT5sXfzQ0Hxvtz12P+0YoEVny7bB7FC9cV7U/XrkKk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112407, serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084
        Validity
            Not Before: Dec 20 21:39:30 2025 GMT
            Not After : Dec 27 21:39:30 2025 GMT
        Subject: CN=69471793-63db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:51:67:66:ef:6e:0a:40:69:04:d7:39:f5:48:
                    63:22:44:c1:b2:9d:bb:de:f8:83:eb:df:52:f0:4c:
                    f3:f6:72:d3:0a:99:9e:53:9f:28:cc:c2:a3:a1:93:
                    62:40:b6:94:26:31:64:a2:7d:f7:70:5b:b7:49:f2:
                    ea:d9:51:54:de:ab:20:91:8f:5f:b4:08:15:b5:68:
                    fa:aa:9e:57:30:27:1b:62:ad:5c:e7:7e:72:d1:ba:
                    1d:64:f8:8e:d6:47:d4:52:3a:28:f5:1b:17:d0:fe:
                    e6:d0:7a:88:58:cf:a4:d1:bb:4e:14:17:7c:be:63:
                    2c:fa:53:df:f6:f5:3a:f9:46:31:91:93:45:1f:b0:
                    a8:95:9d:49:fa:d5:f3:08:16:7c:83:a3:10:c8:7f:
                    61:8e:0e:e2:c9:bc:a3:ad:7f:ce:25:36:e8:3a:70:
                    b4:c2:6e:30:ea:82:be:9c:e9:28:25:09:7e:92:6b:
                    3d:ea:1a:45:bd:cf:6b:ce:ed:49:c7:2c:d7:6c:4e:
                    68:33:10:c5:5f:40:87:fb:9b:90:d2:7d:b6:73:c8:
                    d5:da:05:06:90:10:49:cc:dc:15:ec:96:de:07:bf:
                    98:87:9e:66:07:31:5c:99:9a:82:c0:0b:61:d7:46:
                    94:62:fc:16:a8:37:9d:49:3d:01:84:93:d8:76:38:
                    65:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DE:8B:6B:41:36:77:BE:E8:26:44:B3:58:59:5A:E2:EE:44:F7:1E
            X509v3 Authority Key Identifier:
                keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5a:ac:c5:a4:40:3e:83:39:9d:db:e8:9d:29:ca:4e:ae:55:
         05:ac:5e:fb:9e:dc:5c:a6:b0:9d:54:47:58:67:f3:b8:ef:48:
         62:f0:33:4e:7e:7a:62:55:a6:3b:27:d0:94:8d:99:71:03:66:
         d8:97:93:48:f6:ef:69:c1:ad:0c:b3:11:d0:5d:01:01:4c:ac:
         b9:d6:c3:a9:0c:93:98:99:0f:0b:d7:6f:e1:a3:fb:ce:4a:b8:
         0a:b2:4b:c4:c0:7f:0b:3a:93:45:12:0c:37:85:ac:05:a1:86:
         6f:df:fa:96:72:a7:78:a5:cf:af:8e:44:91:a4:ea:dc:43:43:
         20:78:f0:87:ae:5c:70:61:19:47:1d:42:21:ef:d1:e7:58:98:
         19:0a:9e:47:db:af:b7:58:ae:94:6b:e0:ad:0f:5e:36:d8:b4:
         b8:0c:2f:b5:f7:72:e3:c2:38:8c:c9:84:c4:ba:36:a7:7d:06:
         c9:cf:7d:c3:71:9d:73:85:2c:18:9e:ee:aa:02:f4:bb:3b:72:
         71:0c:6d:78:1b:21:38:25:1a:11:57:60:03:91:14:3a:25:3c:
         fb:c8:cb:b1:2a:4c:3a:37:e3:9b:3d:62:4b:e4:21:a0:d6:6d:
         a2:5d:52:4d:dd:55:ce:88:34:5e:dd:e2:06:c3:d5:f2:4b:a4:
         90:73:73:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:44:01 2025 by rpki-client