This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File:                     Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier:          gGwF00foyKyrCJkj8wC9epcDZc73l7ZzDv6UB8OW4f8=
Subject key identifier:   9C:53:1E:28:9F:A9:80:99:C8:9A:CD:B9:6A:D1:D6:AC:46:EE:94:EC
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer:       /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial:       07E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number:          07DD
Signing time:             Thu 18 Dec 2025 20:42:14 +0000
Manifest this update:     Thu 18 Dec 2025 20:42:13 +0000
Manifest next update:     Thu 25 Dec 2025 20:42:13 +0000
Files and hashes:         1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: FwfohdXEj6pT/8/FDyIOWtVfmdMC8fa5C27WX38XAYY=)
                          2: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: wFGCcQD71t0xbsG6j/RT9j5S1Xu9ekdDINtwsZ1h1tw=)
                          3: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: EkYpQdNZWCIX2JfAIndqxsEp1szJAw+vQsJTZ2qL1gE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
                          rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025 (0x7e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
        Validity
            Not Before: Dec 18 20:42:13 2025 GMT
            Not After : Dec 25 20:42:13 2025 GMT
        Subject: CN=69446726-b6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:1b:da:11:99:85:44:44:99:59:9a:76:69:
                    a2:fa:0c:2a:86:c4:c4:05:dd:96:b1:df:2d:03:fc:
                    7c:ec:6e:43:3b:d7:35:d3:5d:14:48:ad:a6:c6:cc:
                    4b:60:d4:19:f8:30:fc:a4:e6:af:65:f0:e5:c0:04:
                    a7:bc:30:4e:a9:f2:b5:80:ac:7c:36:3a:1b:6e:c3:
                    84:45:92:36:b2:80:c6:4c:f4:24:b5:b0:15:ce:24:
                    a7:27:1c:73:a5:2b:7c:bf:19:af:43:41:4c:ae:c1:
                    67:a6:06:53:32:3c:73:e7:6b:71:a5:c5:ec:3f:f2:
                    f8:88:59:c2:89:ac:7c:fe:fb:82:b8:83:ca:1c:0c:
                    aa:5b:4a:60:c5:8e:75:67:58:cf:88:07:32:2c:53:
                    e2:e1:12:82:01:98:f6:d4:e4:a1:56:3c:8d:1e:c9:
                    7a:6f:36:fa:93:8a:d8:6c:57:05:cf:05:2e:35:d4:
                    c5:7f:ba:4e:1d:7a:db:e7:7b:ea:d7:82:f5:fc:ea:
                    0b:1d:96:37:de:fd:ea:34:c3:86:6e:7d:25:f4:16:
                    e0:22:9a:e8:01:2a:a5:18:0e:65:df:dd:af:eb:ba:
                    f4:00:e4:fb:9d:05:9d:04:31:53:d5:72:c2:03:80:
                    c1:d1:b7:d9:ee:92:e1:41:56:64:01:3e:43:9b:63:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:53:1E:28:9F:A9:80:99:C8:9A:CD:B9:6A:D1:D6:AC:46:EE:94:EC
            X509v3 Authority Key Identifier:
                keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:42:53:a5:ee:5a:1b:da:3f:3e:5d:d1:c3:92:29:94:31:
         39:1a:23:f2:29:27:15:b0:6f:ea:aa:28:cb:56:37:98:7d:ec:
         97:ea:3b:dc:71:ba:f0:39:5d:9c:87:be:9d:3a:0b:3d:b4:dc:
         c1:ac:87:b1:53:73:1e:dd:7a:57:dc:7b:b1:9c:05:ca:b0:08:
         03:70:d1:d4:5b:20:50:c4:ff:be:a7:c4:28:1a:1e:31:88:c6:
         e1:bd:eb:36:cf:3d:3f:a6:7e:51:82:f0:da:e0:6d:8b:33:c5:
         25:ef:6f:cd:9d:3a:7d:7d:81:9e:02:a1:e6:94:71:32:34:73:
         4e:82:01:73:45:eb:3b:e6:cd:e3:ed:51:77:e1:6d:8b:2b:31:
         e0:d1:92:d2:d8:0d:53:8e:43:92:1b:6f:9c:11:fe:c9:2d:5a:
         71:0e:89:1d:ed:94:1f:31:7a:6e:01:51:fa:d8:25:91:c4:85:
         99:8c:6f:8a:b3:61:4a:d7:d4:2e:66:f2:7e:72:16:e0:41:8d:
         31:00:98:60:29:70:c5:31:10:e2:22:90:fb:97:d7:63:46:93:
         26:84:0d:d5:22:c5:ac:fb:92:4d:07:17:48:e4:5c:05:3b:e6:
         fd:e4:fe:ad:34:39:95:37:f0:2f:31:a2:0d:7d:27:09:c6:40:
         db:32:26:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:35:43 2025 by rpki-client