This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
File:                     IiZie3PlFUazvVEODioN6qglIHg.mft (raw, json)
Hash identifier:          22gGOSSA/1gdm3bAidV4m+HkkqrQjTTXlU1jN+1y2nU=
Subject key identifier:   5A:4F:16:F1:7C:B1:AF:CC:81:4F:74:42:BD:9A:5A:A9:5E:59:8E:EB
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Certificate issuer:       /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
Manifest number:          06
Signing time:             Wed 03 Dec 2025 06:14:08 +0000
Manifest this update:     Wed 03 Dec 2025 06:14:07 +0000
Manifest next update:     Wed 10 Dec 2025 06:14:07 +0000
Files and hashes:         1: IiZie3PlFUazvVEODioN6qglIHg.crl (hash: IoMeiMGCtSpqxEJH9ootOfYiP+lRrFQdv3oPdk5On5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
        Validity
            Not Before: Dec  3 06:14:07 2025 GMT
            Not After : Dec 10 06:14:07 2025 GMT
        Subject: CN=692fd530-f792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:58:9e:9b:94:d0:b6:8a:9b:a7:0d:52:c1:
                    ba:47:96:3d:44:8c:5b:0a:0f:72:3c:39:c7:2e:75:
                    c0:7c:51:8b:40:ef:d0:4f:82:ab:98:ac:f9:d2:19:
                    79:ec:c0:cc:b1:84:e5:8c:ec:45:80:0b:ff:a0:67:
                    e5:5f:93:96:d0:a9:d3:10:0d:6c:52:53:aa:86:6d:
                    9f:8f:49:fb:67:ef:8e:20:56:2b:dd:6c:12:ef:6d:
                    e5:c8:cf:c2:ca:35:53:96:1e:7f:da:f2:f0:83:20:
                    d1:d0:18:38:f4:6f:b8:42:2f:ac:fa:99:69:02:22:
                    49:35:d3:84:e1:a6:06:c7:2a:80:e1:d7:23:b3:35:
                    f7:81:23:f4:8e:8e:87:b3:62:88:4e:3c:cb:b0:6f:
                    a3:d1:34:43:81:59:5d:6a:b0:4c:78:76:54:72:b4:
                    e0:eb:3d:f9:06:e3:eb:bc:0b:d7:a7:ba:50:be:b7:
                    f7:99:ae:88:61:80:a8:63:1e:95:f3:68:ee:48:2e:
                    4e:91:b6:99:ab:e4:71:28:82:95:fc:df:9a:d2:7a:
                    02:54:fb:18:4d:0a:6d:2d:00:02:aa:b2:f4:4d:27:
                    3d:3e:46:ac:a6:a4:ee:a0:2f:30:ab:9b:84:99:df:
                    27:6e:dd:77:3f:65:c3:40:af:6f:f9:ba:3a:3b:6d:
                    58:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4F:16:F1:7C:B1:AF:CC:81:4F:74:42:BD:9A:5A:A9:5E:59:8E:EB
            X509v3 Authority Key Identifier:
                keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:00:13:ca:c9:51:26:1e:90:c1:6a:f2:d5:76:9d:b5:63:8a:
         c7:c3:95:91:03:33:87:ff:57:1b:e0:0d:46:20:2e:05:88:5f:
         df:69:15:c0:3c:02:78:3c:ab:dc:1f:b4:ab:25:ca:45:ed:ed:
         66:40:01:88:0c:84:53:32:0c:74:74:fc:1c:9f:eb:90:0c:18:
         63:28:8e:bd:1b:69:41:f6:5d:ab:46:e0:05:95:d3:7a:88:f6:
         16:96:06:6c:6c:37:92:23:9c:97:06:1b:26:cc:e1:48:74:6b:
         c4:2d:b5:d2:06:8d:25:25:4a:c2:b2:1f:72:38:1c:b1:f6:6e:
         56:9a:08:92:d9:0a:d1:b7:7b:f9:aa:94:b3:d4:63:a6:56:42:
         74:ae:e8:6b:28:4c:c6:fa:d2:4d:ba:43:3d:fb:1a:3c:d2:43:
         f7:4e:7e:07:46:ec:8f:2e:e8:bb:ab:bd:59:d9:92:eb:9f:88:
         9b:87:58:63:e8:61:52:da:f4:76:66:5d:48:4f:b8:66:8a:7f:
         a5:32:6b:e8:c0:72:c9:e7:bd:51:7b:e2:b9:2a:fe:5d:2e:de:
         d1:6e:b9:37:5d:9a:d4:ff:b3:97:bc:b6:d2:f7:da:dd:29:a0:
         3d:6e:0d:a6:14:da:69:87:e7:74:4e:b6:c9:dd:59:dc:b4:04:
         34:0d:e5:1c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Njk1QTExMC8GA1UEBRMoMjIyNjYyN0I3M0U1MTU0NkIzQkQ1MTBFMEUyQTBERUFB
ODI1MjA3ODAeFw0yNTEyMDMwNjE0MDdaFw0yNTEyMTAwNjE0MDdaMBgxFjAUBgNV
BAMTDTY5MmZkNTMwLWY3OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGaViem5TQtoqbpw1SwbpHlj1EjFsKD3I8OccudcB8UYtA79BPgquYrPnSGXns
wMyxhOWM7EWAC/+gZ+Vfk5bQqdMQDWxSU6qGbZ+PSftn744gVivdbBLvbeXIz8LK
NVOWHn/a8vCDINHQGDj0b7hCL6z6mWkCIkk104ThpgbHKoDh1yOzNfeBI/SOjoez
YohOPMuwb6PRNEOBWV1qsEx4dlRytODrPfkG4+u8C9enulC+t/eZrohhgKhjHpXz
aO5ILk6Rtpmr5HEogpX835rSegJU+xhNCm0tAAKqsvRNJz0+RqympO6gLzCrm4SZ
3ydu3Xc/ZcNAr2/5ujo7bViXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWk8W8Xyx
r8yBT3RCvZpaqV5ZjuswHwYDVR0jBBgwFoAUIiZie3PlFUazvVEODioN6qglIHgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTVBLzVBNzk3MTQwQzhG
MTExRjA4MEVFMzc3NkM0RjlBRTAyL0lpWmllM1BsRlVhenZWRU9EaW9ONnFnbElI
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSWlaaWUzUGxGVWF6dlZFT0Rpb042cWdsSUhnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
OTVBLzVBNzk3MTQwQzhGMTExRjA4MEVFMzc3NkM0RjlBRTAyL0lpWmllM1BsRlVh
enZWRU9EaW9ONnFnbElIZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIMAE8rJUSYekMFq8tV2nbVjisfDlZEDM4f/VxvgDUYgLgWIX99pFcA8
Ang8q9wftKslykXt7WZAAYgMhFMyDHR0/Byf65AMGGMojr0baUH2XatG4AWV03qI
9haWBmxsN5IjnJcGGybM4Uh0a8QttdIGjSUlSsKyH3I4HLH2blaaCJLZCtG3e/mq
lLPUY6ZWQnSu6GsoTMb60k26Qz37GjzSQ/dOfgdG7I8u6LurvVnZkuufiJuHWGPo
YVLa9HZmXUhPuGaKf6Uya+jAcsnnvVF74rkq/l0u3tFuuTddmtT/s5e8ttL32t0p
oD1uDaYU2mmH53ROtsndWdy0BDQN5Rw=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:00:23 2025 by rpki-client