This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
File:                     ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json)
Hash identifier:          caE5+curJADmFnuh/A7jMthIPl+l6cTZoDl3IoyOTJ8=
Subject key identifier:   D2:BD:27:58:84:C7:B9:48:EC:05:26:DE:AA:BF:E9:2B:80:A4:E2:44
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Certificate issuer:       /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
Manifest number:          54
Signing time:             Sun 21 Dec 2025 06:15:37 +0000
Manifest this update:     Sun 21 Dec 2025 06:15:37 +0000
Manifest next update:     Sun 28 Dec 2025 06:15:37 +0000
Files and hashes:         1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: XexLdMx5ITWVjOD3f8HwhF5/LnEZhoqAvyJVB9nt63k=)
                          2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: 5pGnOwvPyuBY3emdEWsMf9K+kdFirxYb8pbexFpI8HY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
                          rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 06:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
        Validity
            Not Before: Dec 21 06:15:37 2025 GMT
            Not After : Dec 28 06:15:37 2025 GMT
        Subject: CN=69479089-a21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:be:7d:d0:33:96:47:e3:c9:f7:9c:63:5b:
                    d6:8b:a7:d3:53:13:1b:51:63:ea:f9:fd:31:98:c6:
                    99:79:c1:63:a5:33:0e:eb:95:a8:f8:51:9f:2c:6a:
                    aa:f1:d3:cf:23:4d:de:ad:2b:c4:43:04:0b:c5:38:
                    0a:68:d6:05:2f:6f:10:d7:49:47:d3:d8:a6:89:b7:
                    9e:7b:1d:b3:5a:53:cd:2f:62:8e:c0:d4:c2:3c:a8:
                    92:b9:95:44:62:a9:44:c0:c0:49:8b:46:77:84:7b:
                    28:65:44:74:92:81:33:d2:49:42:e2:9d:5c:7f:b6:
                    ee:d2:14:26:50:af:db:7c:35:4f:48:2c:d7:79:a4:
                    f4:94:a5:3a:78:47:45:ba:f8:5d:e0:bd:79:44:eb:
                    50:47:cd:a1:a2:13:1a:d7:3c:c5:d1:42:70:d6:ef:
                    f4:6a:55:11:5e:31:b2:3c:4c:54:fa:0b:e1:43:bb:
                    0c:1d:0f:98:e6:e0:e7:a3:e5:39:d0:69:27:1b:ce:
                    ba:eb:9f:70:a2:8d:e4:99:17:80:f3:e6:56:6d:40:
                    f8:09:99:65:73:d8:ec:82:ce:f3:49:98:62:51:40:
                    4f:18:4b:d3:df:1c:1e:f2:8d:21:be:17:47:37:01:
                    42:dc:41:c4:5c:90:b8:4d:ba:45:8a:71:d0:52:cb:
                    b7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BD:27:58:84:C7:B9:48:EC:05:26:DE:AA:BF:E9:2B:80:A4:E2:44
            X509v3 Authority Key Identifier:
                keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a6:93:96:6c:b4:5d:3c:60:be:e8:83:27:0c:b7:88:d2:e3:
         89:ce:7c:3a:8c:63:46:97:2a:8a:a8:e1:92:cb:25:ee:a7:7b:
         d8:7d:a5:73:43:2a:a3:cd:f0:ea:47:c7:ef:96:b1:84:14:c6:
         e0:9d:30:ed:81:29:9b:67:68:11:05:cf:3f:0b:31:92:a4:e2:
         fc:e5:33:75:ba:67:4e:08:1d:b0:e8:42:52:37:46:d2:ff:70:
         9e:e4:c8:f5:51:8c:12:fc:23:11:cc:82:54:54:ee:a9:5c:28:
         38:62:ab:63:11:37:e0:01:be:8d:f5:d8:d6:b8:55:4a:11:c0:
         78:a8:ad:d8:b1:ce:d5:82:ed:c7:7b:8e:02:4a:74:09:1c:e9:
         11:cd:20:ce:e2:15:22:44:52:96:89:be:37:4a:8f:22:63:8f:
         bf:38:72:6f:a2:8e:52:3b:50:63:51:ac:02:07:aa:b4:c5:7e:
         49:5d:87:10:74:b0:56:8e:ee:f8:7b:48:04:28:a5:e1:18:6d:
         c3:33:43:45:69:c0:88:6c:51:19:ee:df:af:fa:1a:0c:49:ed:
         a1:00:2a:d6:73:5b:13:47:c9:85:e0:d7:f6:3f:44:ed:58:97:
         91:de:6a:69:a3:63:5b:ea:fb:9d:d4:bc:96:15:db:ec:83:3d:
         e8:fa:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 16:14:06 2025 by rpki-client