This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
File:                     Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json)
Hash identifier:          ODGa9WEewpZlGw76NMoKWp0jap+Udl3vlo+EGbYB26o=
Subject key identifier:   ED:99:9C:6F:89:F8:DD:D0:C1:59:EE:DA:B1:34:F5:87:04:2C:71:A3
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Certificate issuer:       /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial:       0982
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
Manifest number:          097B
Signing time:             Mon 22 Dec 2025 19:27:40 +0000
Manifest this update:     Mon 22 Dec 2025 19:27:40 +0000
Manifest next update:     Mon 29 Dec 2025 19:27:40 +0000
Files and hashes:         1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: izVm5DZv9ca3B6wWAboPkrjQyz/qoY7c51Ub5WVzVcI=)
                          2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: wrze88X7jsa3VSsX7Kz8XDU3MDHRHMz+vA0kvdHqRS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
                          rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434 (0x982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
        Validity
            Not Before: Dec 22 19:27:40 2025 GMT
            Not After : Dec 29 19:27:40 2025 GMT
        Subject: CN=69499bac-e1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4b:f0:e7:87:3a:0c:c3:e0:95:7c:d5:a1:0e:
                    19:40:81:18:ea:9b:9b:f1:35:a7:0e:5b:aa:64:25:
                    49:18:09:f9:fb:e4:18:d3:15:53:4c:9e:1c:5f:7c:
                    18:8c:ce:f8:81:87:5f:96:99:30:4b:fa:64:19:1d:
                    d8:bf:56:03:d1:ba:c8:a0:39:84:79:2f:66:4c:9f:
                    3f:fb:06:5f:1b:e0:40:ea:6b:40:55:0d:71:0c:83:
                    c0:63:10:e4:f7:69:0b:8b:3a:59:67:c4:35:a8:3f:
                    0b:81:72:07:21:67:8e:ea:69:78:f7:93:37:ea:fb:
                    9c:4d:61:7e:02:45:ec:85:ae:37:07:3d:7f:d5:46:
                    b9:9e:e6:93:07:32:dc:1b:12:0b:b0:c9:8b:f1:d7:
                    06:bc:ca:b3:2c:9e:62:3b:91:bc:97:d9:d4:62:55:
                    da:d3:aa:9f:b8:da:ca:c2:1e:cd:89:7a:e3:29:94:
                    53:8d:8e:26:a4:b5:1e:50:f3:38:8b:c4:15:8c:e0:
                    93:a7:f3:a6:18:99:c7:1c:1c:c8:f5:81:a2:4f:4b:
                    29:09:ae:ed:65:00:09:98:d9:4f:46:84:a5:cc:7d:
                    be:54:65:9a:6d:ff:48:84:ff:81:1d:78:9e:0d:ce:
                    51:8f:ea:e1:28:a4:d4:6c:43:ab:5c:90:8f:b9:ea:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:99:9C:6F:89:F8:DD:D0:C1:59:EE:DA:B1:34:F5:87:04:2C:71:A3
            X509v3 Authority Key Identifier:
                keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:95:bc:43:bf:e5:66:5d:48:28:7d:8e:64:98:20:e5:a6:0a:
         e8:88:ea:94:af:d8:8c:87:eb:cd:a9:0b:3e:e9:7b:eb:39:8e:
         d1:37:52:6f:86:d4:b6:e0:91:1a:8e:3f:a0:d9:ed:21:e1:5f:
         2b:56:b1:35:3f:0e:18:5a:01:0e:6e:f1:75:41:8a:a4:f8:92:
         74:59:2b:fc:f0:9e:03:01:25:7d:2e:78:7b:23:77:ea:1c:3e:
         74:5e:29:4b:32:94:7a:90:a2:cf:0e:6f:58:11:f7:dd:eb:b8:
         fb:5a:91:64:66:60:e6:80:fd:62:bd:bd:88:e3:0f:42:83:26:
         84:4c:9b:7f:20:54:17:9e:36:f4:d6:9a:dd:2c:e5:82:29:ee:
         db:fe:51:76:37:20:92:03:00:26:0b:d5:cc:9e:0c:da:f8:fc:
         fe:26:9f:85:57:82:17:ee:fc:c4:f0:3e:c9:a3:31:39:7f:ff:
         71:60:04:0d:dc:84:07:09:f5:23:a6:68:5c:35:7a:97:e2:dd:
         57:5c:47:5f:5d:38:ee:b2:fd:d4:96:01:6b:46:13:82:57:e9:
         30:ab:74:5a:7a:53:a1:b1:b0:36:60:c9:6c:5b:d3:8d:11:1f:
         b5:f9:bc:af:33:fb:af:9f:5f:9c:10:bf:74:75:cd:8d:08:73:
         df:e7:ba:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:28 2025 by rpki-client