This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
File:                     zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json)
Hash identifier:          TXNEYXzga+aVmxBKRaujtHfUvk/6tqalPY3etu9tUMo=
Subject key identifier:   D9:6F:B8:CB:D4:8E:BA:61:CD:B1:17:DB:BE:52:67:D3:29:20:9E:AE
Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
Certificate issuer:       /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
Manifest number:          6C
Signing time:             Fri 19 Dec 2025 05:56:42 +0000
Manifest this update:     Fri 19 Dec 2025 05:56:41 +0000
Manifest next update:     Fri 26 Dec 2025 05:56:41 +0000
Files and hashes:         1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: 63ru/qbogB+BaHzwaARrNthIn6PTw9Hiir4q+6ioEfg=)
                          2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: Q2OV3NsfBJcMxHBSs801cjjdjHl9svmtSMg1krMtAx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
                          rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
        Validity
            Not Before: Dec 19 05:56:41 2025 GMT
            Not After : Dec 26 05:56:41 2025 GMT
        Subject: CN=6944e919-4c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:a9:19:10:f6:33:e7:0d:b4:ed:d8:46:7c:
                    28:b1:d2:c8:f9:49:2f:4b:84:a5:ba:9d:7a:f8:9f:
                    70:8f:d0:8e:d4:f2:c8:90:d1:bf:99:68:2d:22:22:
                    8c:22:fa:0d:69:6f:79:7c:9f:a2:78:b9:76:56:ca:
                    b9:5b:4b:c9:75:b2:9d:3d:98:db:e4:cd:70:03:b3:
                    6a:de:85:41:63:f2:f6:c2:27:b8:aa:98:f5:a5:c9:
                    38:44:56:cb:94:57:a8:48:75:91:e3:76:fd:b0:ac:
                    db:ca:ea:b8:d0:29:46:f6:22:50:1f:a0:1c:f3:98:
                    5c:c0:0d:2c:c6:f0:4c:43:5a:bd:a2:2c:22:c2:da:
                    bc:f7:fc:1e:a4:06:72:4f:5a:9f:2b:d8:51:25:68:
                    95:ef:32:7a:10:e1:fb:48:9a:e1:7c:2e:f0:50:92:
                    04:ea:d2:d2:de:0e:67:95:83:a4:36:5c:87:9a:0a:
                    a7:d8:23:d4:c0:99:82:1c:9f:7f:e5:f5:41:ff:f4:
                    ee:1d:06:91:37:ea:53:ef:53:91:5f:dd:cc:56:61:
                    37:47:10:3d:92:5b:d5:45:5e:5d:31:d8:56:05:f1:
                    40:b7:be:fd:1f:d3:73:c6:8c:b3:45:7f:f7:0a:61:
                    ec:d3:5d:95:9c:e2:4b:ab:7d:8f:53:63:b2:cc:17:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6F:B8:CB:D4:8E:BA:61:CD:B1:17:DB:BE:52:67:D3:29:20:9E:AE
            X509v3 Authority Key Identifier:
                keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:8a:88:bd:e6:8e:c1:b2:3f:49:2c:7a:84:01:2e:a6:08:
         db:c8:15:53:ac:8e:d0:3c:2d:be:82:8c:c1:84:3a:89:fa:33:
         9d:7d:ab:18:a2:cf:c8:5c:22:c6:70:ac:b5:5e:39:e2:ba:f7:
         09:a9:9e:c6:13:d5:08:91:81:2a:02:e0:dd:f7:3c:1e:10:8c:
         7b:78:90:64:df:a4:e5:c9:28:6d:14:ee:f0:fd:c6:c0:e4:e9:
         47:71:c2:d8:de:9d:1f:1a:07:89:f3:24:0f:8f:72:bc:af:53:
         23:5f:3b:53:6e:32:29:88:f4:82:fb:26:bc:e9:f7:73:d9:50:
         a9:20:56:db:46:1f:ad:01:4c:a8:d1:bb:6f:02:29:8d:22:3a:
         a9:f0:70:fb:fa:d4:76:ff:30:27:ea:6d:3a:f9:a3:f8:29:a4:
         f3:86:8d:71:30:e2:7a:22:79:c2:9b:f8:fa:d5:36:13:c0:2a:
         59:cf:d8:2a:d0:4d:14:ee:ed:60:49:61:9a:5e:f9:e3:77:a0:
         60:eb:e3:18:6d:df:7f:d2:d8:c7:12:85:12:51:d6:a4:77:5a:
         f4:3a:e9:cb:ca:85:46:9c:9b:c3:28:d7:b5:41:77:48:3e:d9:
         46:ca:91:66:c1:9f:3e:96:f6:5d:44:9d:c7:4b:ab:d5:a1:b8:
         46:4e:cd:aa
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MEU5MDExMC8GA1UEBRMoQ0YxRTBFNUJENzdCMUZGQjUzNTY3ODFGNjE2MzE1OEMy
RTJGN0I2RDAeFw0yNTEyMTkwNTU2NDFaFw0yNTEyMjYwNTU2NDFaMBgxFjAUBgNV
BAMMDTY5NDRlOTE5LTRjOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpLqkZEPYz5w207dhGfCix0sj5SS9LhKW6nXr4n3CP0I7U8siQ0b+ZaC0iIowi
+g1pb3l8n6J4uXZWyrlbS8l1sp09mNvkzXADs2rehUFj8vbCJ7iqmPWlyThEVsuU
V6hIdZHjdv2wrNvK6rjQKUb2IlAfoBzzmFzADSzG8ExDWr2iLCLC2rz3/B6kBnJP
Wp8r2FElaJXvMnoQ4ftImuF8LvBQkgTq0tLeDmeVg6Q2XIeaCqfYI9TAmYIcn3/l
9UH/9O4dBpE36lPvU5Ff3cxWYTdHED2SW9VFXl0x2FYF8UC3vv0f03PGjLNFf/cK
YezTXZWc4kurfY9TY7LMFwKVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2W+4y9SO
umHNsRfbvlJn0ykgnq4wHwYDVR0jBBgwFoAUzx4OW9d7H/tTVngfYWMVjC4ve20w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwRTkwL0JCNkZCNjg4Mzk2
NTExRjBBNkE4MUI0M0M0RjlBRTAyL3p4NE9XOWQ3SF90VFZuZ2ZZV01WakM0dmUy
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveng0T1c5ZDdIX3RUVm5nZllXTVZqQzR2ZTIwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw
RTkwL0JCNkZCNjg4Mzk2NTExRjBBNkE4MUI0M0M0RjlBRTAyL3p4NE9XOWQ3SF90
VFZuZ2ZZV01WakM0dmUyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIWmioi95o7Bsj9JLHqEAS6mCNvIFVOsjtA8Lb6CjMGEOon6M519qxii
z8hcIsZwrLVeOeK69wmpnsYT1QiRgSoC4N33PB4QjHt4kGTfpOXJKG0U7vD9xsDk
6UdxwtjenR8aB4nzJA+PcryvUyNfO1NuMimI9IL7Jrzp93PZUKkgVttGH60BTKjR
u28CKY0iOqnwcPv61Hb/MCfqbTr5o/gppPOGjXEw4noiecKb+PrVNhPAKlnP2CrQ
TRTu7WBJYZpe+eN3oGDr4xht33/S2McShRJR1qR3WvQ66cvKhUacm8Mo17VBd0g+
2UbKkWbBnz6W9l1EncdLq9WhuEZOzao=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:36 2025 by rpki-client