This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
File:                     RZTy7BffVsPQZUDzZtKvEYsxfx4.mft (raw, json)
Hash identifier:          SnEO5T09k4wDveh8VMXmFryskIiz2TOPoahEkuXXYj4=
Subject key identifier:   E0:8E:27:C1:F7:E7:32:3F:CC:4E:86:41:86:0E:39:7C:81:1F:4D:43
Authority key identifier: 45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E
Certificate issuer:       /CN=A91CE978/serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
Certificate serial:       016E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
Manifest number:          016B
Signing time:             Thu 18 Dec 2025 14:49:56 +0000
Manifest this update:     Thu 18 Dec 2025 14:49:56 +0000
Manifest next update:     Thu 25 Dec 2025 14:49:56 +0000
Files and hashes:         1: RZTy7BffVsPQZUDzZtKvEYsxfx4.crl (hash: dGbKukxt4HUVZbxSkT6ChtXSn2rNItjYa0EfQPG9xWA=)
                          2: 30EAE110B9AD11EE83063243C4F9AE02.roa (hash: /mgu4P2twSDACdGUYPekQQEcvJH+CFlbuOsPxwdYvXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE978, serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
        Validity
            Not Before: Dec 18 14:49:56 2025 GMT
            Not After : Dec 25 14:49:56 2025 GMT
        Subject: CN=69441494-613d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:2c:ae:f5:4e:ae:7b:55:6f:19:a2:85:25:
                    9a:26:ff:2a:5f:ed:8f:e0:5f:72:e3:c3:dd:d8:d7:
                    6a:92:7f:da:58:b2:f7:7b:cc:5d:b2:ca:ad:e1:c3:
                    d7:fa:b1:84:eb:c6:05:f0:3e:69:3e:6d:ac:6c:ca:
                    53:44:dd:6d:ee:07:d9:1b:63:0b:08:18:9e:9e:c2:
                    e9:14:7e:66:84:c9:c8:8a:3a:66:c6:45:3f:b7:37:
                    9b:b2:d2:fb:70:42:77:5d:34:26:47:cc:72:2e:64:
                    ba:0a:09:d6:5e:d4:ab:ba:07:16:55:b9:9d:fe:18:
                    4c:d2:03:44:2a:8d:ca:d6:8b:d5:bc:14:42:30:b2:
                    5e:3a:5e:29:13:2c:9f:6f:57:8b:32:24:72:28:9d:
                    4b:1c:ef:0a:21:41:00:27:98:20:55:82:8f:b1:50:
                    be:7b:7d:27:ba:af:5f:f2:c1:35:9c:e3:6b:b8:db:
                    b8:aa:d4:45:f4:be:a2:1b:0d:70:35:32:51:0d:9d:
                    01:fe:9f:b0:bb:20:29:a2:2f:38:2e:37:07:a6:65:
                    97:7d:50:58:e7:54:08:e9:95:83:e2:94:14:78:de:
                    b4:29:bd:f8:74:c0:fc:78:9f:21:ca:d2:f3:da:e3:
                    78:a4:6c:6a:b9:77:c7:94:b1:45:b5:96:9e:bc:f2:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8E:27:C1:F7:E7:32:3F:CC:4E:86:41:86:0E:39:7C:81:1F:4D:43
            X509v3 Authority Key Identifier:
                keyid:45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:54:d7:a0:fa:15:01:19:de:bb:60:cf:e9:6f:1f:3c:03:67:
         6e:01:15:ab:e0:a8:3a:ba:ea:26:fe:ef:6b:83:09:14:22:c4:
         f3:76:4f:fc:70:a3:c2:e1:1b:3b:93:49:ab:d8:6e:c8:51:ab:
         a0:2d:f7:e5:13:2f:f1:27:c3:ec:df:5d:e5:da:a2:d0:76:09:
         22:12:33:93:67:72:cd:39:cd:e6:85:b5:97:96:26:d1:ca:90:
         6b:7b:14:2c:ee:fe:5b:d8:f3:a4:27:48:20:55:92:6c:5c:bb:
         ce:fc:7a:3f:79:7c:70:ca:25:6e:f0:2e:4b:6e:22:69:92:fb:
         14:63:56:e5:d6:8b:58:5a:e2:5f:77:e1:0d:bf:4c:96:6c:94:
         7a:37:1a:1f:d2:45:ec:e1:c1:bc:fa:6b:79:82:e1:d8:ab:27:
         e1:dd:cf:63:2d:48:b5:87:cf:28:b5:23:83:f4:79:04:00:db:
         c1:73:4e:06:e1:e4:4a:ee:1a:7f:3a:ad:f1:e9:41:32:86:03:
         6d:36:d6:ba:bb:63:ca:0c:66:89:fd:5e:d2:4a:9f:d2:7b:50:
         b2:a1:aa:8e:c0:98:ee:e7:e3:46:9f:68:4a:f8:86:98:a6:43:
         90:38:d5:5b:7e:56:05:5d:d5:3d:53:75:bc:30:2b:a6:41:54:
         67:ab:d4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:53:32 2025 by rpki-client