This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File:                     Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier:          HJHtVdDmmWNEdW32N+8NwAq9yCZe3fvCSf2rMAr2GE4=
Subject key identifier:   F1:E4:34:01:B3:F6:E4:71:90:2A:EA:0D:92:8F:75:32:67:C9:24:53
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer:       /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial:       07E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number:          07D7
Signing time:             Sat 06 Dec 2025 20:17:48 +0000
Manifest this update:     Sat 06 Dec 2025 20:17:48 +0000
Manifest next update:     Sat 13 Dec 2025 20:17:48 +0000
Files and hashes:         1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: w/BUFdrRBDy4iq4gM++JwUABL/gayhH9syrMO3CPbUg=)
                          2: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: EkYpQdNZWCIX2JfAIndqxsEp1szJAw+vQsJTZ2qL1gE=)
                          3: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: wFGCcQD71t0xbsG6j/RT9j5S1Xu9ekdDINtwsZ1h1tw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
                          rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019 (0x7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
        Validity
            Not Before: Dec  6 20:17:48 2025 GMT
            Not After : Dec 13 20:17:48 2025 GMT
        Subject: CN=69348f6c-946b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:23:e8:77:8c:2a:44:bb:c4:a6:e1:d4:30:02:
                    a1:b7:6d:98:e4:27:77:33:74:7f:22:5e:5b:1e:5c:
                    36:32:8e:5c:59:9c:74:e5:3a:0f:fc:df:d4:bf:31:
                    55:ae:a8:04:c2:2c:64:4f:ad:0d:29:e6:ed:89:03:
                    e5:a2:fb:d7:ad:96:e1:07:5c:0d:db:9d:b7:eb:a3:
                    ec:56:2c:83:a1:df:14:8d:a1:ab:da:f5:4e:0d:c6:
                    5e:fc:2e:76:f7:10:c3:f8:24:3e:fe:75:ca:9d:95:
                    9b:a2:4e:fc:b4:65:6b:fd:23:af:e8:11:9a:45:ca:
                    b8:9c:67:0c:31:d7:7f:b8:5b:fa:2a:25:a0:96:8f:
                    4f:d6:19:f1:1c:61:a8:fe:49:96:85:c6:35:b3:f0:
                    e1:72:15:55:1d:c7:bb:86:dc:41:cc:97:a3:62:70:
                    ba:29:1a:a2:18:81:c9:d1:6f:a5:5e:4c:d6:f0:46:
                    b2:05:8d:48:b3:44:84:e6:e6:15:ab:b3:31:7e:e6:
                    0c:d3:34:60:14:46:2e:ae:68:1f:73:84:b3:80:bb:
                    47:c9:ce:56:a5:0e:d6:6e:d6:2c:55:38:22:8d:4c:
                    98:be:45:e5:03:45:2a:0b:86:8a:f1:ff:d0:11:a0:
                    83:3a:de:17:13:93:82:4b:94:85:fd:71:29:9f:ed:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E4:34:01:B3:F6:E4:71:90:2A:EA:0D:92:8F:75:32:67:C9:24:53
            X509v3 Authority Key Identifier:
                keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cb:2c:ea:59:32:e0:30:a1:3d:55:1f:fd:a8:8f:52:84:11:
         e8:cd:97:ee:1f:1a:a0:cf:95:d4:77:1f:f7:a5:16:82:97:22:
         59:61:d6:e1:6f:02:db:9d:d2:bb:80:b3:d5:e2:cf:18:a8:80:
         53:08:9e:7b:7b:13:67:fd:c9:4f:64:7e:6d:c1:a9:60:08:ff:
         94:91:28:e7:66:75:c0:43:ac:03:12:1c:85:5e:fd:4d:b3:04:
         3e:01:63:7b:88:a4:d5:9e:aa:0e:56:32:eb:a3:b9:88:ff:ea:
         57:e9:8c:f6:de:30:c3:00:f5:e8:73:87:6e:fd:69:62:37:90:
         23:67:e1:b9:43:d5:5b:d0:c2:0b:0f:5f:19:09:42:e0:f2:a8:
         63:c6:39:f9:65:90:ba:60:fa:25:3f:d4:a3:76:1b:8a:6c:d6:
         2b:29:6f:df:da:c9:37:52:d4:da:53:dc:4f:7d:28:6a:07:35:
         be:6d:59:d1:09:8d:5a:b3:e6:bf:c3:4d:43:e0:07:4c:17:4d:
         f0:4d:ea:7c:e2:16:d5:e3:3b:01:48:ca:88:84:d9:a8:f2:88:
         6c:4c:d2:57:7a:50:5a:a4:71:5a:83:c8:27:c1:3e:8e:30:31:
         b0:c5:f4:9e:4f:7d:9a:5f:56:cc:e6:ac:fe:94:44:e8:bc:3a:
         76:75:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:14:07 2025 by rpki-client