This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
File:                     ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft (raw, json)
Hash identifier:          xIAnpjulfFz7/0IaAcU8gWFpaY3ZAg+qsoTLA+1gGDE=
Subject key identifier:   B5:D9:D8:E1:6E:67:43:0E:07:AA:47:A9:5B:72:5A:26:21:33:5C:1F
Authority key identifier: 65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
Certificate issuer:       /CN=A91A8219/serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Certificate serial:       1774
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
Manifest number:          1768
Signing time:             Mon 22 Dec 2025 16:21:22 +0000
Manifest this update:     Mon 22 Dec 2025 16:21:22 +0000
Manifest next update:     Mon 29 Dec 2025 16:21:22 +0000
Files and hashes:         1: ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl (hash: Be2b7yHC9i10WEKefsDAni3JI43DwOu3SfvK1mg3fMw=)
                          2: 314E917C651E11E8A8903D42C4F9AE02.roa (hash: PelwRr9hgP7dCYd5KU90WVUNYfa/KyN0aFEd88yUz4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl
                          rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 16:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6004 (0x1774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8219, serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
        Validity
            Not Before: Dec 22 16:21:22 2025 GMT
            Not After : Dec 29 16:21:22 2025 GMT
        Subject: CN=69497002-63c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:6d:55:0f:fb:56:e4:00:c2:c5:1e:33:ba:
                    eb:45:3a:31:f1:6a:b6:35:1a:2c:e6:d8:3c:a8:e4:
                    e5:8c:fa:ce:78:a2:a1:ab:74:74:9f:53:d4:0f:91:
                    a9:f1:39:3d:9e:ea:d6:f4:87:b1:3e:45:a1:96:1f:
                    3e:bd:1c:3f:dc:97:ef:33:24:00:67:18:ca:ac:48:
                    e3:87:e8:ae:5b:9a:98:98:50:03:90:da:e2:24:ec:
                    b7:5f:6d:4b:4a:f0:ec:6a:a6:57:98:6a:61:00:87:
                    6a:fe:c0:30:2a:15:4d:61:3d:4a:26:4a:c9:d1:8e:
                    cd:19:e0:86:bc:10:ab:18:5b:ab:33:1f:7f:8e:c5:
                    9f:60:ff:aa:67:70:03:75:df:8f:5c:fb:01:62:ae:
                    a3:8f:17:96:4d:1e:52:74:3d:1d:f3:6c:91:2b:0d:
                    0b:00:6c:c4:17:b0:5b:dd:41:e8:b6:57:1e:8c:d5:
                    d4:d1:46:8d:23:e8:9a:40:31:ff:22:a1:3a:90:59:
                    d3:8f:fc:fe:c6:34:a1:b4:54:32:9c:ae:d5:de:c9:
                    8e:ec:bf:9e:64:8c:e3:58:a8:57:37:f5:2d:f2:5c:
                    8a:5d:0f:0e:f0:48:f5:c1:c2:2a:b7:48:e5:46:aa:
                    17:a2:60:78:4d:11:63:f8:d3:2d:e7:67:2c:5c:43:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D9:D8:E1:6E:67:43:0E:07:AA:47:A9:5B:72:5A:26:21:33:5C:1F
            X509v3 Authority Key Identifier:
                keyid:65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:12:0c:75:a2:69:76:cd:69:5e:60:32:9c:57:d0:9c:33:01:
         2d:52:78:3c:d2:cb:06:dc:3a:4e:29:a6:f3:ac:94:bd:03:ca:
         03:8a:dd:38:83:1c:c2:d6:c3:1b:a0:b2:4d:d0:69:ad:fe:93:
         a6:ab:d5:a6:46:58:60:09:a4:6f:75:c1:0f:54:7d:9b:6b:bc:
         81:f8:a7:c0:83:40:81:69:8b:97:8c:1b:54:e9:27:22:57:5c:
         96:3e:0d:1d:65:64:ea:ee:ed:91:a1:c6:87:b7:4c:e2:81:69:
         37:fd:81:f7:fe:74:f0:ce:9b:42:67:de:9d:b9:84:b5:d8:78:
         fe:eb:15:35:fe:40:d3:43:3e:a3:0d:a1:c1:32:44:97:7e:81:
         8e:ea:ad:85:a4:53:ff:85:b9:2a:ca:c9:3b:8f:b2:49:a5:b4:
         67:14:6d:94:5d:1b:d2:4a:bf:d8:bc:94:71:27:dd:bc:18:b1:
         21:86:48:7b:ab:0d:ab:ea:9a:b4:33:64:45:ae:58:a7:c4:44:
         eb:17:7f:74:a3:2a:eb:db:a4:45:b3:63:c1:0e:5d:0f:cf:16:
         13:88:59:b3:b1:b2:6b:f1:e5:93:1c:9c:3f:bc:33:5a:c2:ec:
         4e:5b:48:d0:e6:79:df:67:a6:9d:34:ac:7d:db:dd:69:f5:e9:
         b8:09:78:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICF3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgyMTkxMTAvBgNVBAUTKDY1NTNDM0MyMTgwQjk3RTJFQjM3Q0I3MUY2QTFDRUFB
N0I5NUNBNDcwHhcNMjUxMjIyMTYyMTIyWhcNMjUxMjI5MTYyMTIyWjAYMRYwFAYD
VQQDDA02OTQ5NzAwMi02M2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAst9tVQ/7VuQAwsUeM7rrRTox8Wq2NRos5tg8qOTljPrOeKKhq3R0n1PUD5Gp
8Tk9nurW9IexPkWhlh8+vRw/3JfvMyQAZxjKrEjjh+iuW5qYmFADkNriJOy3X21L
SvDsaqZXmGphAIdq/sAwKhVNYT1KJkrJ0Y7NGeCGvBCrGFurMx9/jsWfYP+qZ3AD
dd+PXPsBYq6jjxeWTR5SdD0d82yRKw0LAGzEF7Bb3UHotlcejNXU0UaNI+iaQDH/
IqE6kFnTj/z+xjShtFQynK7V3smO7L+eZIzjWKhXN/Ut8lyKXQ8O8Ej1wcIqt0jl
RqoXomB4TRFj+NMt52csXEM0UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXZ2OFu
Z0MOB6pHqVtyWiYhM1wfMB8GA1UdIwQYMBaAFGVTw8IYC5fi6zfLcfahzqp7lcpH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIxOS9FQzBBNzBGOEVB
ODAxMUU3OEI0MkE0MzJDNEY5QUUwMi9aVlBEd2hnTGwtTHJOOHR4OXFIT3FudVZ5
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pWUER3aGdMbC1Mck44dHg5cUhPcW51VnlrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODIxOS9FQzBBNzBGOEVBODAxMUU3OEI0MkE0MzJDNEY5QUUwMi9aVlBEd2hnTGwt
THJOOHR4OXFIT3FudVZ5a2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8Egx1oml2zWleYDKcV9CcMwEtUng80ssG3DpOKabzrJS9A8oDit04
gxzC1sMboLJN0Gmt/pOmq9WmRlhgCaRvdcEPVH2ba7yB+KfAg0CBaYuXjBtU6Sci
V1yWPg0dZWTq7u2RocaHt0zigWk3/YH3/nTwzptCZ96duYS12Hj+6xU1/kDTQz6j
DaHBMkSXfoGO6q2FpFP/hbkqysk7j7JJpbRnFG2UXRvSSr/YvJRxJ928GLEhhkh7
qw2r6pq0M2RFrlinxETrF390oyrr26RFs2PBDl0PzxYTiFmzsbJr8eWTHJw/vDNa
wuxOW0jQ5nnfZ6adNKx9291p9em4CXjH
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:59:24 2025 by rpki-client