This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
File:                     2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json)
Hash identifier:          juKq2jCinvmstVFkWbVSgDpDam9MDRuo83QIi011EPM=
Subject key identifier:   DE:31:F3:10:03:51:3B:A3:A7:89:D6:5A:15:01:C3:F3:96:66:3F:17
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Certificate issuer:       /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
Manifest number:          01EB
Signing time:             Fri 21 Nov 2025 01:04:49 +0000
Manifest this update:     Fri 21 Nov 2025 01:04:48 +0000
Manifest next update:     Fri 28 Nov 2025 01:04:48 +0000
Files and hashes:         1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: 7ElV2XW7sPiRbNiHXHpB+8UXAdzRxHd+5V7Ci04cmr0=)
                          2: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: pVr+bUV7osuNpKcdEe2SU8B4kCWvORQSGGyqBngWkWY=)
                          3: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: ou5M00utddUa9B9T2ZjIX4AhXtQUSSATyN+Uf1fiHwE=)
                          4: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: m0+29/xOQkLY0SUQkzyArE5bZt0Gpa6rpxJzQEzTpmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
                          rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Nov 2025 01:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
        Validity
            Not Before: Nov 21 01:04:48 2025 GMT
            Not After : Nov 28 01:04:48 2025 GMT
        Subject: CN=691fbab0-c29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:74:1c:0e:44:7d:64:61:d7:3d:63:5b:b0:8f:
                    67:9f:96:aa:b3:d6:9b:5c:09:ea:34:c0:bc:fe:73:
                    02:8f:9d:a8:98:74:65:45:89:b9:bf:dd:1c:e8:40:
                    ec:aa:9c:dd:b9:ed:72:b4:c8:7b:a6:ff:ad:36:f4:
                    c2:27:b9:e2:ba:6b:7f:60:43:9e:75:db:12:ea:37:
                    b4:94:8b:82:89:b3:71:80:a9:2e:5e:d1:a2:13:5f:
                    c0:6b:38:30:6d:99:cd:0c:ef:e3:79:ed:59:fd:5d:
                    76:f0:07:9e:a5:03:fc:17:e9:1e:5d:4f:c4:8c:41:
                    02:d6:e3:cd:2f:a9:ac:2c:52:7e:40:75:55:54:a5:
                    16:2a:c8:c7:9e:02:9f:b8:11:48:99:2b:c0:1f:d4:
                    e4:b9:6c:b8:aa:e7:f7:52:d8:bd:35:57:a3:c3:06:
                    3f:2c:65:5d:1d:06:b8:2d:38:fa:9c:60:e1:65:ae:
                    9f:e6:8d:b9:b7:35:96:7b:c9:36:b3:67:c4:c3:6f:
                    88:f2:00:03:53:6c:96:9c:7a:64:f2:eb:a6:7a:46:
                    cf:d7:cf:37:6e:7d:b4:f6:45:2f:30:2a:55:eb:3e:
                    db:05:57:cd:fc:e3:e0:8d:3b:55:1a:7b:4e:2a:89:
                    74:38:b1:7c:87:ce:ab:31:65:27:8d:1b:fe:7a:09:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:31:F3:10:03:51:3B:A3:A7:89:D6:5A:15:01:C3:F3:96:66:3F:17
            X509v3 Authority Key Identifier:
                keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:55:5d:db:99:e1:07:89:ff:61:f0:dc:49:f7:8e:3e:a2:83:
         ae:33:c4:51:7e:e3:f3:6f:22:a0:a4:25:b5:72:ec:68:51:3f:
         ed:41:6e:2c:3f:ba:e7:aa:6e:17:bd:02:eb:2a:14:7d:31:9d:
         ed:8c:a4:cf:75:b6:11:ad:20:e7:90:11:73:ba:ef:a4:5d:87:
         a9:b4:ff:32:ee:f9:4e:26:23:7b:30:86:8e:79:e6:7b:c7:08:
         14:dd:ae:49:eb:e4:d0:7f:b0:96:0d:ce:52:ef:d6:13:66:c6:
         26:e6:7d:87:a4:c4:e1:ee:1b:c5:5c:47:e0:5d:d6:ab:c7:7c:
         37:0c:64:c4:e5:62:4c:31:1a:86:c5:11:0c:be:fd:0d:19:8c:
         ba:e5:ff:e1:d4:9b:8f:84:7b:6e:e6:5d:8d:75:a6:a5:c4:c8:
         44:df:c7:80:f7:41:9e:de:c8:83:40:27:a5:09:b5:e3:4d:7d:
         f7:b5:67:0f:8a:62:fe:4a:fc:08:10:e3:1b:3c:d0:f4:ac:2a:
         39:6e:36:56:e2:37:f8:64:03:05:f5:2d:2b:59:d4:f4:6f:fd:
         90:95:68:f2:82:48:38:d5:db:1f:a5:c6:94:ae:12:55:f4:30:
         b7:ad:ca:b6:c8:6f:60:f8:af:5d:02:9c:a3:7c:91:dd:79:c8:
         ef:9d:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 20:56:36 2025 by rpki-client