This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
File:                     Zctcy-UxzE70Kh0wffe0XLDpdNk.mft (raw, json)
Hash identifier:          uYvUBHAzX3YPlME0pIZkyFLNs+r01EPYOzkQVPND7vI=
Subject key identifier:   50:79:AF:34:B7:0C:B0:30:C2:92:C1:7B:67:B9:0E:BE:34:9F:AC:AF
Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9
Certificate issuer:       /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9
Certificate serial:       0918
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
Manifest number:          0911
Signing time:             Thu 18 Dec 2025 19:48:54 +0000
Manifest this update:     Thu 18 Dec 2025 19:48:54 +0000
Manifest next update:     Thu 25 Dec 2025 19:48:54 +0000
Files and hashes:         1: Zctcy-UxzE70Kh0wffe0XLDpdNk.crl (hash: yRsIX1Gx8G8ImUuWwvC0d3ka969nUN088pOkEmLyuh0=)
                          2: 593FC45EB89011EA8C060064C4F9AE02.roa (hash: u4NwNX2RS8lU0XdSU+16dmpCRTKIRZP13s5jIKokArg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl
                          rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328 (0x918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915451D, serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9
        Validity
            Not Before: Dec 18 19:48:54 2025 GMT
            Not After : Dec 25 19:48:54 2025 GMT
        Subject: CN=69445aa6-06ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:70:5d:92:c4:57:e1:ea:f9:65:cf:86:61:
                    b6:57:93:b3:ac:c3:00:10:aa:8a:79:cd:e0:fc:74:
                    ca:b4:b5:63:3b:ac:aa:39:3a:c3:0e:9a:75:99:52:
                    df:4a:bc:06:66:83:1f:fc:65:13:d6:fd:80:e5:fc:
                    c0:1b:1e:fc:33:68:d3:2d:c1:72:13:00:41:fd:b1:
                    a3:86:26:47:2d:a2:08:78:a9:a0:be:68:28:a3:a4:
                    d4:99:64:68:43:d9:36:5e:6d:75:22:8a:2d:64:fb:
                    d5:90:0c:51:29:50:94:63:b7:c7:31:ce:77:8b:2b:
                    16:51:98:78:68:1a:38:da:84:ad:90:16:31:2b:74:
                    fd:39:36:45:41:ce:92:18:7b:50:ef:1a:84:87:9c:
                    7c:d6:79:bf:23:3a:3e:49:63:d4:8f:93:fd:3c:10:
                    d5:f1:63:e0:69:85:cd:02:a8:c0:ac:6f:47:3e:55:
                    1d:5b:47:43:d6:6a:8f:de:a4:6c:fb:0d:52:c8:26:
                    fd:05:8e:c0:3b:7b:05:6d:1d:dc:db:c7:23:09:1e:
                    cd:51:eb:b1:c1:2c:fb:34:97:98:52:89:3c:94:50:
                    9d:d4:59:2b:b4:64:ab:6b:2e:48:1a:c0:75:44:28:
                    8b:6a:c4:ff:8a:c4:6a:69:a6:68:9c:87:39:48:87:
                    16:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:79:AF:34:B7:0C:B0:30:C2:92:C1:7B:67:B9:0E:BE:34:9F:AC:AF
            X509v3 Authority Key Identifier:
                keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c5:23:0e:8d:25:c4:e7:35:5a:1e:2a:28:9f:2c:cc:a3:3e:
         f0:30:fb:29:62:00:bd:3d:f3:dc:fa:03:b4:b7:70:ae:c3:c6:
         0d:06:b3:86:e8:20:a1:fa:4c:6e:79:61:53:6b:ef:0d:e2:c9:
         f6:66:38:1e:d1:4c:a4:22:1d:d2:b6:00:fc:94:d4:80:fe:b1:
         0f:2a:8d:5b:80:1d:16:2a:c5:1f:14:34:18:34:18:b8:9e:6a:
         db:87:cc:18:86:10:91:d1:b5:98:7a:07:56:81:8c:b4:4c:0a:
         3d:b0:54:83:43:da:14:d3:9b:30:b0:44:9d:79:0e:48:87:f4:
         c5:b7:51:9a:07:2c:7d:21:01:b9:9e:46:35:30:4d:76:24:6b:
         8e:51:97:8a:3f:6c:68:fb:a0:c3:4d:bf:44:e4:18:14:d5:25:
         ea:f0:8a:d1:65:7d:71:b1:b2:ac:8c:9a:e3:db:b8:74:0f:b0:
         d5:fd:b5:c5:7e:11:ed:ed:cf:13:b4:59:39:1e:2f:24:81:60:
         ac:79:0a:86:ee:9e:e6:96:3a:5a:c0:7b:11:d5:f0:b2:f4:7c:
         e3:4a:a7:ac:57:47:bd:7a:89:e5:04:87:71:bf:11:44:9c:13:
         ed:6a:12:b6:80:ce:d3:d3:74:6a:f8:eb:31:18:b8:8a:36:ef:
         ff:71:38:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:39 2025 by rpki-client