This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File:                     ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier:          2WqmcjktwocJD/kQ2YIAxZRXVvzT5H8U2heQW1GS3Qs=
Subject key identifier:   63:0F:B5:1E:C4:1C:9C:1E:85:CE:36:B6:FD:36:77:EC:9C:8D:13:B1
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number:          016B
Signing time:             Fri 19 Dec 2025 03:31:26 +0000
Manifest this update:     Fri 19 Dec 2025 03:31:26 +0000
Manifest next update:     Fri 26 Dec 2025 03:31:26 +0000
Files and hashes:         1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: tPSBJoxWytkds6yDqoQG3LyE4wfQiYMdnpOd3dW1dUE=)
                          2: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: C0PtpzbGpwbpDFL/uYPMPp9j/9TP8PxpK7PTzvirT4A=)
                          3: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: yTjA76KeDCsVYv0UnIasiwZD8KPOw92OzNyZSl311Yw=)
                          4: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: fipJjxVQQqucnYRkrt/KQhZVIF8y9rvqf5C1ioWIVjk=)
                          5: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: ESqolF4y5qDuTvymMR58zkbGmDho8m2vhFnhCpHR9XI=)
                          6: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: xBAC2IeuuzKl82FU9KBewyyGYj38dZfZQ7//75oYBSo=)
                          7: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: IstPUkbFjM6rU7VueDJ0IDYmqIEAooyhlbMWvQsaLpk=)
                          8: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fzQzGSAIs0EVXNYEuUhQCq5Xv3M4UYk0ENH+A/wJ0lg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Dec 19 03:31:26 2025 GMT
            Not After : Dec 26 03:31:26 2025 GMT
        Subject: CN=6944c70e-6582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:79:30:e3:1a:18:48:bd:8f:27:07:43:6a:
                    c0:fe:f1:de:86:5c:ff:d5:1a:0a:c0:71:36:0f:88:
                    4f:14:d6:c6:4f:63:38:6e:71:ad:96:b5:74:5d:da:
                    bd:5d:49:ae:a8:ce:b9:6b:df:91:82:da:d7:96:a2:
                    01:24:ee:8e:25:73:3c:29:4b:cd:ae:40:c4:11:13:
                    5a:78:f2:27:f1:4f:a3:6a:78:dc:4d:36:13:9d:42:
                    8a:50:f9:07:78:fb:03:a1:15:98:06:24:16:8d:b0:
                    e7:f8:b6:cb:10:b8:de:bd:7e:93:1d:5b:c6:91:fc:
                    4d:4b:be:21:4e:50:b3:4f:db:3e:23:f2:4b:d5:81:
                    6f:48:29:52:93:da:8e:fa:1f:24:22:f7:17:8c:ac:
                    3c:ec:73:32:96:2a:ff:56:18:cd:b9:df:10:04:74:
                    51:fc:62:fb:1e:1d:48:61:d5:6a:0d:5f:4d:5f:b3:
                    8f:fb:41:14:0b:e4:c9:f8:0a:b0:bd:e5:1a:b5:68:
                    6b:f3:e4:6e:70:a9:81:17:78:38:6a:cd:a1:e0:3d:
                    28:dd:d8:90:40:76:bc:a3:8c:f7:cc:bd:83:6b:1e:
                    a4:6c:17:5c:54:2a:e5:07:a0:38:c0:3f:82:55:86:
                    2b:f3:82:17:86:75:b2:a4:0b:49:8c:4b:f2:63:45:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0F:B5:1E:C4:1C:9C:1E:85:CE:36:B6:FD:36:77:EC:9C:8D:13:B1
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:50:51:20:ec:89:9e:af:3c:15:36:48:18:e0:89:4c:b3:
         6d:a4:73:ad:da:80:83:99:d9:1f:e0:25:c9:a1:22:a9:a6:5e:
         d2:19:58:55:97:04:14:ab:99:d4:13:17:0e:b5:6e:59:11:ef:
         1b:43:c5:01:a1:43:41:a0:19:03:66:8f:9b:34:92:86:89:91:
         2c:a3:b1:ea:de:5e:f5:db:fd:2f:3d:77:d6:91:9c:a2:08:7c:
         d7:2e:39:97:fd:d9:bf:2d:d7:12:3f:4e:1b:cf:72:42:62:da:
         9d:6f:c1:81:f7:5c:7f:c7:69:49:fa:a9:e3:4e:cf:d1:05:92:
         c6:c0:cb:df:52:09:ef:d4:e3:81:ab:19:c1:70:22:2f:03:e3:
         1c:02:e6:77:b5:e2:f8:4f:c0:e7:a3:d2:b9:b7:b8:40:4f:ec:
         ac:c2:5f:0d:53:78:fe:b7:79:e5:c7:5e:39:f0:ff:e7:76:03:
         57:76:d1:21:72:b2:32:6b:9c:e6:b1:ec:0e:78:74:4b:13:12:
         d5:6e:5b:f6:08:f5:a0:0d:31:5b:22:b4:e9:68:5e:bb:ff:61:
         b5:7e:19:e1:e2:ed:fb:52:50:cb:bf:4f:c7:b5:a2:e3:52:ab:
         e8:8b:1d:10:18:d4:e8:13:3b:76:71:94:74:6d:76:bd:bb:fc:
         ff:50:01:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:18:17 2025 by rpki-client