This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
File:                     N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json)
Hash identifier:          YkWiQFrzMgtkZoY6pAto7V+2htZrwe4jYnKLvtSs5BM=
Subject key identifier:   46:69:86:5E:29:5A:63:7C:83:0E:CB:BC:E9:4E:50:BC:8E:5B:C5:FC
Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
Certificate issuer:       /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Certificate serial:       15E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
Manifest number:          15E1
Signing time:             Wed 24 Dec 2025 16:31:44 +0000
Manifest this update:     Wed 24 Dec 2025 16:31:43 +0000
Manifest next update:     Wed 31 Dec 2025 16:31:43 +0000
Files and hashes:         1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: 9nVryQZpluRev5QD52M//SZ6QCJE01AEjSI1K4zoA8E=)
                          2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: VjPDMCTDAl0F+kUlLL83qcuxLts9GNlg09c0jF2guQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
                          rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 15:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5609 (0x15e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
        Validity
            Not Before: Dec 24 16:31:43 2025 GMT
            Not After : Dec 31 16:31:43 2025 GMT
        Subject: CN=694c1570-e3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:51:21:9a:94:62:aa:7a:44:21:2e:ac:47:
                    bf:ea:09:d6:71:af:7f:68:3b:9f:6d:8a:d6:10:05:
                    79:84:9c:87:66:3b:9b:c6:2a:5b:5c:a4:1b:c3:3a:
                    12:15:e4:95:99:f2:a0:b9:b2:f0:ac:de:7f:e3:af:
                    ed:81:72:0e:2b:6a:82:70:3f:6e:c6:bf:64:cd:8c:
                    95:f3:50:8e:89:fe:91:63:67:4b:b3:d7:69:1e:13:
                    35:c0:ec:a8:49:0b:83:0f:b9:81:20:f9:8d:d9:51:
                    94:8f:17:bf:5c:7a:72:19:18:4b:72:bb:ab:35:fa:
                    11:f8:f5:1a:7f:8c:ba:51:e7:6f:fc:ce:00:68:1b:
                    06:cd:e6:b0:56:f9:3c:c6:dd:43:08:07:8c:3b:c6:
                    e8:44:cd:c6:e4:31:ea:a8:85:a3:da:aa:ac:d3:97:
                    af:ce:be:94:37:84:2c:ef:71:ae:ee:74:ca:b4:e6:
                    8f:bd:ae:4e:83:eb:98:c3:a9:bc:9c:eb:8a:22:94:
                    d4:c6:df:c4:b8:58:44:7b:29:51:12:45:26:1b:50:
                    47:c7:98:f4:de:ba:2a:80:1e:ef:71:5b:da:a2:d8:
                    2c:03:a0:1e:1a:e0:da:c1:e8:e0:e0:94:43:d0:97:
                    98:13:22:2c:1a:82:52:1e:b6:36:eb:d5:c7:49:97:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:69:86:5E:29:5A:63:7C:83:0E:CB:BC:E9:4E:50:BC:8E:5B:C5:FC
            X509v3 Authority Key Identifier:
                keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8e:b7:3e:97:3e:f6:ea:8d:8e:04:b9:f5:fb:0c:31:dc:47:
         9f:a9:93:96:23:81:fa:8c:b5:da:21:04:f9:83:62:15:9f:36:
         96:29:ab:c8:c5:2c:a6:74:f0:5f:63:47:2a:f8:d1:40:14:ca:
         6f:2d:10:22:68:16:0e:04:99:ec:1e:d7:46:3b:7d:c9:e5:1d:
         6c:76:21:ef:a3:ea:cf:75:ef:5f:56:9c:ab:93:19:72:c5:b0:
         64:89:2d:a2:42:e9:0d:d8:77:b5:c2:66:a4:71:26:fe:ad:f4:
         a5:f3:bd:22:a1:e8:59:82:95:d9:bf:d1:6f:90:46:5c:3c:3e:
         ed:47:32:7e:2e:84:ca:a9:fb:49:4a:88:10:a2:31:9a:cf:fe:
         a1:a5:d0:1f:a6:ff:7f:bd:e9:de:80:22:f3:19:a0:ea:f3:63:
         d7:5d:54:9a:cd:bc:e0:4b:db:87:51:b6:a9:77:50:4e:60:a0:
         94:8c:b2:e7:6f:65:12:b8:f8:d3:18:e6:5d:64:8f:34:28:fc:
         8e:8d:9f:d0:f1:d8:c8:ef:09:62:35:60:c4:e3:a7:29:72:19:
         55:ba:ac:16:2d:4d:e8:15:99:80:9f:c7:45:cb:b5:a8:ac:de:
         ae:62:6a:43:ae:d1:06:1e:18:e3:a9:37:01:56:a5:91:28:50:
         f0:02:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:28 2025 by rpki-client