This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
File:                     zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json)
Hash identifier:          oTjlp3IU+MwNdkBfB1yKNNW/jHM7euSvPbhaHVCmvAE=
Subject key identifier:   0B:F8:D4:BA:CA:80:7A:9C:DF:36:14:FB:61:2E:51:B6:07:36:EC:F9
Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
Certificate issuer:       /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Certificate serial:       04B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
Manifest number:          04A6
Signing time:             Thu 18 Dec 2025 23:23:59 +0000
Manifest this update:     Thu 18 Dec 2025 23:23:59 +0000
Manifest next update:     Thu 25 Dec 2025 23:23:59 +0000
Files and hashes:         1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: 8kzaBrQZJiOtGfANyDUozpaFPx9FMV3ue6M7bbpdRpI=)
                          2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: 93TPr/85vvGVIiqA6bZpnH8xjG5sIgL1KJJ97Kjzq6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
                          rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202 (0x4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
        Validity
            Not Before: Dec 18 23:23:59 2025 GMT
            Not After : Dec 25 23:23:59 2025 GMT
        Subject: CN=69448d0f-9506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:7b:a3:b1:17:88:95:1e:95:8c:bd:ff:b2:
                    63:f1:5e:1c:93:fd:20:a8:19:bd:0b:c5:65:3a:24:
                    d4:f3:90:4f:3e:aa:0f:29:cf:c5:f9:8a:7c:64:44:
                    e9:f1:07:87:6f:96:bc:aa:66:17:7e:fc:74:9f:f1:
                    eb:2d:34:da:62:ea:51:d7:5f:3f:40:f1:16:77:52:
                    66:b3:3e:45:62:82:1b:a8:fb:85:2c:20:8c:06:3e:
                    ea:72:79:b4:6f:22:e9:9c:e3:fb:88:21:d8:c9:7a:
                    04:c0:b6:54:be:bb:78:3c:f2:80:4c:85:b9:38:b7:
                    64:2a:cb:1a:fa:0b:3a:ea:5c:e4:9c:4c:f9:d1:a4:
                    87:49:bd:10:5e:b4:d5:d7:1e:e8:a3:33:7f:95:41:
                    5c:65:5d:d4:a3:5b:60:28:cf:82:e5:4d:87:d6:aa:
                    5c:94:d4:92:96:ee:f8:00:3b:fd:c8:fa:1c:e7:2b:
                    f4:95:99:ad:09:88:bc:d0:0a:37:a3:5d:29:06:80:
                    c3:42:c9:31:1c:cc:21:f0:e6:b2:39:48:18:ea:59:
                    b9:c3:ff:4b:b9:45:b5:2c:5e:c7:ab:fa:09:7c:87:
                    e4:99:35:d5:67:f8:62:87:8f:59:3a:9b:b5:ba:a4:
                    1a:8f:07:9c:fd:9c:65:58:b2:a8:0a:e2:95:5a:3c:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F8:D4:BA:CA:80:7A:9C:DF:36:14:FB:61:2E:51:B6:07:36:EC:F9
            X509v3 Authority Key Identifier:
                keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:aa:b6:e2:84:77:69:67:64:be:fe:f9:6e:d9:88:95:f1:57:
         84:4e:77:e2:95:ec:c0:b8:b3:67:04:fb:d8:07:08:5f:b9:40:
         a0:1e:28:04:c7:68:81:7b:1e:99:06:3e:87:37:b4:4f:45:3d:
         7e:52:8b:2d:cd:b3:52:b0:bc:70:02:96:5f:19:33:c3:25:43:
         c9:45:2a:14:3c:b5:20:42:f9:c5:dd:94:41:ef:83:40:8e:81:
         f2:d0:82:fb:11:a4:2c:9a:51:f0:d5:2d:7f:a9:60:ac:a2:05:
         9d:aa:b1:06:4a:db:98:66:08:06:34:2f:5f:05:1b:26:3c:7e:
         bc:3a:3e:99:0c:33:91:28:09:cc:9e:55:2c:82:1c:2e:6c:97:
         a4:19:52:ef:94:d4:9e:59:28:16:1d:ea:55:75:9c:e7:48:27:
         de:ad:c8:8a:39:63:c9:ea:3d:f5:8d:de:7f:6f:8c:0d:bd:9d:
         3f:e3:dc:db:00:63:1d:30:fb:9c:82:33:b4:82:d4:94:70:63:
         27:86:33:85:b7:22:49:50:18:b3:5d:a4:d8:0a:a2:85:1e:c9:
         06:18:0b:2d:09:37:8e:9f:4d:14:41:38:0a:c2:d6:8f:55:33:
         7b:d7:9f:25:33:d8:03:16:af:43:f4:23:cf:d5:07:d8:cd:5c:
         54:c9:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:00:58 2025 by rpki-client