This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File:                     zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier:          drAQ+ee4ZyCGJjHp2RGQIaMGEka7kqiPZZ6X3fiCETQ=
Subject key identifier:   D2:1F:05:1B:4A:69:DE:4F:4A:B3:58:FA:EA:D2:6D:AA:F7:87:A6:29
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer:       /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number:          0148
Signing time:             Wed 03 Dec 2025 02:47:27 +0000
Manifest this update:     Wed 03 Dec 2025 02:47:27 +0000
Manifest next update:     Wed 10 Dec 2025 02:47:27 +0000
Files and hashes:         1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: W0qZRk8tLct5C+JO4Js9atCw+hQ/ehBv5FNmivC44pE=)
                          2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
                          rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 02:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
        Validity
            Not Before: Dec  3 02:47:27 2025 GMT
            Not After : Dec 10 02:47:27 2025 GMT
        Subject: CN=692fa4bf-bede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:cc:37:34:65:c5:04:f0:7a:8e:b0:25:cf:
                    51:cb:09:e2:50:ba:a0:91:6e:d7:1f:21:81:41:93:
                    ce:21:82:38:9d:9f:1a:cf:c2:19:0e:f8:15:2d:42:
                    4e:ef:d0:c7:7b:4f:0f:13:e6:12:c7:fb:54:dd:9d:
                    ce:54:6a:c8:13:2e:49:63:da:af:e7:e0:3d:e0:8d:
                    cc:c9:f0:36:a0:3c:5b:32:fa:b6:cc:f8:92:b1:a2:
                    04:0a:f2:5e:ab:0e:5c:71:47:8d:cc:7e:4f:07:ae:
                    dc:cf:ea:c0:9d:a8:c1:be:b0:25:51:8c:15:9e:a6:
                    46:85:c3:55:e3:05:fa:c5:20:14:c4:61:43:31:47:
                    df:08:9b:c5:91:f2:35:a7:ab:e5:8e:84:e0:04:36:
                    a0:ed:02:51:78:aa:e9:fe:62:51:e2:9a:f0:00:aa:
                    81:8c:ff:b1:d3:60:f6:b0:1c:d5:19:e2:9c:17:3d:
                    50:3a:66:89:17:4b:a5:61:5b:30:1b:6e:b1:a0:fe:
                    36:f5:63:64:88:ec:89:11:43:20:e4:77:29:e8:5d:
                    d7:39:79:d6:80:79:4d:4c:8e:1e:19:8d:e0:f5:78:
                    96:0a:5a:4b:a8:9b:22:96:b1:08:6b:14:0b:1a:62:
                    88:86:42:e1:f7:98:16:ad:0c:ee:fe:62:71:60:7c:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1F:05:1B:4A:69:DE:4F:4A:B3:58:FA:EA:D2:6D:AA:F7:87:A6:29
            X509v3 Authority Key Identifier:
                keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ac:a6:3f:6d:a9:bc:b4:a6:f5:65:11:29:b6:81:64:7d:3f:
         27:13:0e:13:de:43:1d:eb:62:ed:79:67:7e:61:de:4b:39:61:
         c5:a9:60:8d:20:6d:0d:68:53:e5:62:96:7d:20:dc:73:1c:f9:
         30:80:aa:67:af:be:55:1e:13:ed:68:0d:3e:9f:b7:1b:01:be:
         9f:3f:04:93:28:d1:af:87:75:30:6f:f8:5b:2a:80:d9:d8:e4:
         f6:d0:2f:82:05:eb:27:1d:0d:b9:89:40:f8:8f:3d:1d:8a:19:
         ce:72:cd:39:96:fe:0e:51:1c:1b:ab:1c:c5:5d:1e:22:9d:61:
         e2:59:20:22:5b:fe:71:af:8e:61:06:11:8a:ae:bd:f7:0d:76:
         cd:63:7f:6d:1e:2d:64:51:66:bc:46:a8:5d:5b:07:04:eb:91:
         62:d3:f0:ad:0d:c5:a4:31:99:6e:47:85:f6:32:76:76:a2:c1:
         85:d6:ed:b9:b6:54:79:c2:d7:ec:2c:2b:44:9b:71:f1:90:51:
         60:ce:3f:64:2a:e5:54:97:7e:34:57:7f:a8:cc:91:6b:63:04:
         a6:8b:e5:d2:73:ca:11:52:0e:fa:ad:0f:eb:13:4d:b3:ad:ff:
         37:15:f6:53:9c:5a:57:87:d9:ed:57:bf:3a:fb:95:58:4c:e0:
         a4:83:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:48:32 2025 by rpki-client