This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
File:                     zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json)
Hash identifier:          /d1WDCgUc/Dc/zSt9bELQxJXN2Tbg/VrfMAoyd3KUm0=
Subject key identifier:   0B:6E:F4:F5:05:E4:95:F2:39:07:0F:04:42:7B:4E:2A:92:9E:4F:36
Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49
Certificate issuer:       /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
Manifest number:          83
Signing time:             Tue 23 Dec 2025 05:36:01 +0000
Manifest this update:     Tue 23 Dec 2025 05:36:01 +0000
Manifest next update:     Tue 30 Dec 2025 05:36:01 +0000
Files and hashes:         1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: IDBm9eSuB46axfR+fJw5ENmxXjawNkqngbCusEEp23Y=)
                          2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: xcQ6KMeOwPBa3kM6RN7EIqcZWY/AVRdB3wdKsSFg0tw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl
                          rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049
        Validity
            Not Before: Dec 23 05:36:01 2025 GMT
            Not After : Dec 30 05:36:01 2025 GMT
        Subject: CN=694a2a41-0521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c8:3d:3b:27:bc:ba:1f:18:88:92:07:8e:f1:
                    6c:05:22:9e:4e:fb:35:58:f1:79:aa:18:1c:7c:38:
                    a9:39:02:8d:6a:37:9c:89:32:99:e4:a6:42:5a:c5:
                    4f:ef:7e:0e:28:77:5a:58:e0:31:a2:bb:a9:92:e7:
                    92:e5:cf:8e:8e:0a:e7:14:11:37:dd:bb:f0:79:67:
                    10:a0:a0:b9:b0:1a:f6:75:57:e9:50:9e:34:02:a1:
                    19:ca:50:ec:da:05:25:8d:90:5b:ef:81:61:48:d4:
                    a8:35:06:cc:3d:92:2f:e4:d7:56:51:ea:b8:45:29:
                    1a:f1:36:eb:ca:36:4b:42:6a:15:05:21:c9:08:99:
                    18:29:84:97:0b:aa:ca:d4:c3:db:9d:6c:26:34:85:
                    3f:d1:cd:57:49:39:b9:da:b3:bb:c7:2b:18:e4:54:
                    bf:23:2c:62:92:28:f5:c3:81:75:48:43:30:38:e1:
                    5c:3f:83:19:c4:c2:a0:2c:1c:dd:fb:f4:f7:c2:b9:
                    21:f3:a6:81:fc:2e:56:17:47:9c:97:72:9b:c2:8f:
                    a8:7a:43:35:77:1a:e1:dd:1e:24:0d:2e:40:be:5b:
                    b6:cd:bc:f1:c4:42:2d:ae:b9:4c:bc:38:04:90:a0:
                    de:ba:6c:36:da:18:ca:d3:83:30:84:20:d1:17:ea:
                    d2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6E:F4:F5:05:E4:95:F2:39:07:0F:04:42:7B:4E:2A:92:9E:4F:36
            X509v3 Authority Key Identifier:
                keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:d0:72:0a:36:fa:8d:b6:bd:44:01:41:25:31:82:8d:f6:85:
         31:43:f5:56:81:77:7b:4d:d8:fb:6b:66:45:21:9e:8c:bd:0e:
         e3:5e:58:51:9e:9b:dd:e9:0b:0e:a8:3a:9c:21:ee:db:a5:58:
         04:56:37:66:37:f2:91:d8:35:99:73:57:c7:87:ef:dd:88:7d:
         ee:cc:a6:1a:e1:93:3a:f6:74:38:a5:07:f4:85:ad:f0:c6:7c:
         05:dd:0a:ea:ee:45:b5:00:76:40:a2:24:ee:a3:52:b1:db:06:
         df:c8:bc:f6:0c:45:e1:d4:b5:aa:27:44:db:e7:7f:1e:10:af:
         2b:64:5e:70:f5:82:08:e5:18:4a:8d:79:bc:a7:84:74:c9:de:
         f3:82:78:88:af:0d:d6:36:6f:e9:bf:cc:7e:75:0b:ee:3d:fb:
         d0:fc:21:a5:c2:ac:e4:fd:56:68:ed:51:66:9e:27:d5:a2:85:
         c2:20:75:2c:ef:7c:d9:64:91:9b:ac:12:97:14:63:82:35:86:
         a6:7b:1d:92:b4:1f:94:4c:9b:9a:28:5a:25:0d:62:16:f1:d4:
         4c:fa:e5:ab:98:08:af:50:62:80:28:04:72:49:44:7a:1a:6e:
         6a:9a:1d:f9:3f:10:d6:fa:9e:c3:d7:74:7f:db:d7:6b:d7:29:
         c2:6c:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:02 2025 by rpki-client