This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
File:                     gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json)
Hash identifier:          99c7zk15UC1yrTSfcr+f6jKzd9CWe97lhcjTSYL7+OA=
Subject key identifier:   BD:CE:61:65:E5:E7:34:BB:83:AD:92:91:72:0E:CD:E2:DD:3E:2C:C5
Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
Certificate issuer:       /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
Manifest number:          6C
Signing time:             Tue 09 Dec 2025 04:46:48 +0000
Manifest this update:     Tue 09 Dec 2025 04:46:48 +0000
Manifest next update:     Tue 16 Dec 2025 04:46:48 +0000
Files and hashes:         1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: oSQ8lLp5LUGm/biidwIulO9Jgelte3/gv/lH9g8JBko=)
                          2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: teBU/xY5fyCYlDvGRSOFgRvi80EiZfgHjGrIEnrk+fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl
                          rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 04:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
        Validity
            Not Before: Dec  9 04:46:48 2025 GMT
            Not After : Dec 16 04:46:48 2025 GMT
        Subject: CN=6937a9b8-1cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0a:f2:18:23:28:86:44:cb:ef:1c:6a:48:ba:
                    68:08:f1:c2:03:31:20:33:5e:e6:73:83:d9:b4:c1:
                    dd:7d:a9:a0:cb:b6:cd:63:6c:c1:f8:59:86:75:d5:
                    87:36:0b:9f:de:99:f9:9e:a0:02:f7:88:6d:6a:0a:
                    c0:db:10:41:01:79:61:a8:ae:f6:50:81:ef:ca:b2:
                    e4:81:97:d3:e5:ff:e5:29:0e:cf:93:46:a0:b2:95:
                    16:56:4d:e5:91:c9:1c:9d:6d:42:95:6e:08:15:53:
                    27:32:9c:25:6a:23:a9:58:1c:3b:62:b0:e3:30:69:
                    41:ab:0e:2e:8e:c3:ba:d4:4d:e6:99:e7:f2:1e:d5:
                    b8:35:b7:32:a1:7e:4e:9b:f7:8c:08:39:e5:43:0a:
                    04:eb:c0:47:64:1f:bd:a5:54:61:99:df:ec:2e:03:
                    40:9a:52:b7:dc:5b:95:ea:69:1e:69:66:3d:18:eb:
                    af:55:97:00:f6:39:51:1b:dd:09:18:cf:c8:93:39:
                    46:5d:06:15:49:a4:d0:53:29:ef:a5:ec:9d:a5:34:
                    22:ed:44:f6:48:78:29:bc:62:23:2c:aa:60:1a:1e:
                    9c:c4:4a:d2:95:88:36:d4:50:44:c7:9c:02:7e:2b:
                    84:78:cb:7c:d2:8b:48:85:21:73:9d:12:05:8a:95:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CE:61:65:E5:E7:34:BB:83:AD:92:91:72:0E:CD:E2:DD:3E:2C:C5
            X509v3 Authority Key Identifier:
                keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f2:d0:5e:98:f8:20:5c:1c:87:b9:f3:80:5d:92:ff:de:1f:
         1f:75:4d:6f:ac:27:dd:3f:fe:49:bc:d1:1c:e7:68:f7:57:11:
         e5:cc:4a:b1:79:f3:23:ed:9a:60:47:68:1c:cb:aa:a4:5a:a7:
         09:e1:ad:33:f5:9e:0d:51:33:b4:6f:53:8b:6b:16:e6:04:23:
         b1:67:f7:9e:0a:dc:74:1b:c2:29:88:63:26:7f:3e:3b:a1:50:
         41:23:3d:52:82:eb:8e:6a:5a:28:4a:c4:cf:be:c3:ce:ce:46:
         74:0b:c2:59:ef:65:29:a6:d8:ac:0b:06:fc:59:b3:07:c0:ea:
         f1:99:95:1b:a8:be:dd:06:a5:af:a0:91:10:5f:44:78:1f:67:
         99:38:6d:f8:10:cb:20:b3:66:f7:b4:12:72:27:a7:a3:ea:56:
         74:16:70:21:74:74:e7:8d:32:0c:a0:44:79:b8:ab:4c:f8:77:
         50:23:2d:fd:ab:92:95:a4:66:26:25:07:fe:4d:6d:ce:53:ff:
         73:48:5c:20:f0:65:fe:aa:6f:f6:60:24:50:6c:43:28:be:27:
         73:54:67:de:a9:27:ca:e7:a4:8e:0e:cf:11:68:6a:4d:6f:d6:
         8f:d8:5d:1b:63:ae:63:6d:0b:e2:b0:dd:65:7a:5f:a3:32:d5:
         ff:67:f8:81
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NzA0OTExMC8GA1UEBRMoODMzQkQ3OUNGMTdFNjYwMjNGNzBBNjI1MkQ1MTU5QzlD
RDdBNTBFMzAeFw0yNTEyMDkwNDQ2NDhaFw0yNTEyMTYwNDQ2NDhaMBgxFjAUBgNV
BAMTDTY5MzdhOWI4LTFjZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLCvIYIyiGRMvvHGpIumgI8cIDMSAzXuZzg9m0wd19qaDLts1jbMH4WYZ11Yc2
C5/emfmeoAL3iG1qCsDbEEEBeWGorvZQge/KsuSBl9Pl/+UpDs+TRqCylRZWTeWR
yRydbUKVbggVUycynCVqI6lYHDtisOMwaUGrDi6Ow7rUTeaZ5/Ie1bg1tzKhfk6b
94wIOeVDCgTrwEdkH72lVGGZ3+wuA0CaUrfcW5XqaR5pZj0Y669VlwD2OVEb3QkY
z8iTOUZdBhVJpNBTKe+l7J2lNCLtRPZIeCm8YiMsqmAaHpzEStKViDbUUETHnAJ+
K4R4y3zSi0iFIXOdEgWKlf7dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvc5hZeXn
NLuDrZKRcg7N4t0+LMUwHwYDVR0jBBgwFoAUgzvXnPF+ZgI/cKYlLVFZyc16UOMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0E4MDRBNDhFMkM2
NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJX2NLWWxMVkZaeWMxNlVP
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZ3p2WG5QRi1aZ0lfY0tZbExWRlp5YzE2VU9NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3
MDQ5L0E4MDRBNDhFMkM2NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJ
X2NLWWxMVkZaeWMxNlVPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAETy0F6Y+CBcHIe584Bdkv/eHx91TW+sJ90//km80RznaPdXEeXMSrF5
8yPtmmBHaBzLqqRapwnhrTP1ng1RM7RvU4trFuYEI7Fn954K3HQbwimIYyZ/Pjuh
UEEjPVKC645qWihKxM++w87ORnQLwlnvZSmm2KwLBvxZswfA6vGZlRuovt0Gpa+g
kRBfRHgfZ5k4bfgQyyCzZve0EnInp6PqVnQWcCF0dOeNMgygRHm4q0z4d1AjLf2r
kpWkZiYlB/5Nbc5T/3NIXCDwZf6qb/ZgJFBsQyi+J3NUZ96pJ8rnpI4OzxFoak1v
1o/YXRtjrmNtC+Kw3WV6X6My1f9n+IE=
-----END CERTIFICATE-----
Generated at Wed Dec 10 05:08:35 2025 by rpki-client