This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
File:                     ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json)
Hash identifier:          AIw/Zv2AbVEJYfEfB08r1sAmiN7ua9lGDizDKaFQHaU=
Subject key identifier:   6D:4B:21:76:50:3A:40:ED:76:DA:28:4F:33:D9:94:B4:FB:FB:66:B8
Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
Certificate issuer:       /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Certificate serial:       2362
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
Manifest number:          2353
Signing time:             Mon 22 Dec 2025 15:39:44 +0000
Manifest this update:     Mon 22 Dec 2025 15:39:44 +0000
Manifest next update:     Mon 29 Dec 2025 15:39:44 +0000
Files and hashes:         1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: 2tn3QJkJwTfH0CLYkpnM+8YaeHIsNrGXSpFF9RPXIP0=)
                          2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: vo1HlqtkvMEu1H7DZtcfsGueTH/R7C2uLZyN4PRCuqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
                          rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 15:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9058 (0x2362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
        Validity
            Not Before: Dec 22 15:39:44 2025 GMT
            Not After : Dec 29 15:39:44 2025 GMT
        Subject: CN=69496640-89db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:59:a7:86:55:99:4a:c6:8f:27:d3:29:e5:
                    d3:09:e3:eb:1c:50:61:8b:a3:35:fd:b2:86:24:e9:
                    f3:30:02:ab:8a:4a:70:1c:b4:c4:8d:80:ad:b8:54:
                    9e:52:7b:07:1e:2e:bd:6c:b5:f4:b9:53:e5:42:a2:
                    ad:bc:97:e1:5a:be:a6:ff:2f:a9:3b:e4:a5:6a:af:
                    2b:2a:42:31:38:25:5c:d7:a7:a5:37:a7:e2:25:9f:
                    64:41:0b:94:9d:52:4c:1f:5e:c7:37:1b:d9:79:29:
                    29:dc:ea:5e:84:8c:26:11:35:19:d0:5e:98:a1:d1:
                    e8:da:7f:45:03:a3:10:ea:5f:e1:ed:8d:37:10:58:
                    2b:5a:f0:28:5c:24:7b:1c:9e:f5:91:7a:a1:82:bd:
                    34:a4:02:37:97:9b:3b:a7:a2:44:2c:e6:e0:a6:f4:
                    dc:98:3a:31:ec:0c:d5:89:77:5a:43:21:25:77:f7:
                    cb:01:56:a9:9e:25:10:57:23:0d:c9:d5:4d:c4:da:
                    39:2a:aa:94:57:04:33:f1:5b:f7:89:c7:7a:cd:df:
                    0d:cc:92:61:c4:e3:ea:67:ad:3f:4e:44:51:f2:5b:
                    f0:2b:9b:89:c6:23:21:eb:32:67:9d:21:07:93:6b:
                    64:a9:07:25:66:cd:40:59:0a:cc:82:21:e8:eb:2f:
                    6f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4B:21:76:50:3A:40:ED:76:DA:28:4F:33:D9:94:B4:FB:FB:66:B8
            X509v3 Authority Key Identifier:
                keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c7:0b:13:75:33:99:37:aa:5b:99:98:d8:a5:67:13:f1:00:
         4a:58:83:6a:a1:38:f4:c4:71:0a:15:c0:e3:fd:56:e5:34:0e:
         04:5f:dd:4b:be:f2:e4:41:5e:23:8a:a4:bc:8e:31:f1:d5:25:
         66:46:43:64:86:9c:8b:fb:af:09:ba:9c:a8:e0:8f:1b:74:98:
         6c:d3:67:60:e5:96:52:e1:3b:59:26:95:34:8d:4f:a6:8e:a1:
         13:a3:3c:52:fa:17:17:f3:49:80:ce:34:d3:5f:9e:d0:39:11:
         5c:e6:a6:f7:a9:5a:d9:27:4d:ec:bc:e8:64:ba:a2:54:2e:f6:
         01:fb:38:9b:7b:f1:fa:5b:a0:cc:55:31:ac:d6:40:cd:51:89:
         a4:e0:2c:ef:be:07:42:f1:41:a1:6f:d0:9b:05:0f:f1:7a:3a:
         19:9d:a4:1e:4e:88:30:3b:34:31:65:6e:19:38:4b:3a:ce:68:
         7e:f3:8f:0d:fb:0c:05:10:54:7a:8b:e7:da:7e:76:29:17:21:
         da:ac:52:de:fa:21:97:49:53:3a:70:05:96:b1:91:a4:13:e4:
         70:af:4c:28:9e:47:04:38:58:a8:2f:3b:57:ed:0e:ea:d1:dd:
         4a:e3:cc:ae:f4:ba:61:a6:40:d3:f7:c9:d9:84:a6:a0:48:dd:
         af:d4:b3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:31 2025 by rpki-client