This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
File:                     vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft (raw, json)
Hash identifier:          gt7bQRqccRwMSOTDRILcV0jLQhu2JBPOjnMxsd2TL88=
Subject key identifier:   A8:70:E9:0C:92:4F:CC:BA:47:0B:1B:07:9D:37:62:C8:FE:4D:92:26
Authority key identifier: BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37
Certificate issuer:       /CN=A91943F0/serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
Manifest number:          EC
Signing time:             Tue 23 Dec 2025 04:19:51 +0000
Manifest this update:     Tue 23 Dec 2025 04:19:50 +0000
Manifest next update:     Tue 30 Dec 2025 04:19:50 +0000
Files and hashes:         1: vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl (hash: w+y5xnG2mkXz2eQy84AC6NNMoOyRst4zgWgLxqiCadg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl
                          rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91943F0, serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37
        Validity
            Not Before: Dec 23 04:19:50 2025 GMT
            Not After : Dec 30 04:19:50 2025 GMT
        Subject: CN=694a1866-dd7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bf:39:64:38:e8:04:d5:77:0b:81:83:eb:da:
                    c8:6e:7d:d8:11:cc:07:b0:65:97:59:2d:71:94:6e:
                    5a:c6:72:fc:28:9a:3f:ac:30:fc:dd:34:04:40:d4:
                    95:2a:eb:c2:40:58:b2:66:1e:ba:6e:e5:e1:60:d6:
                    48:f4:76:e0:73:85:60:e1:18:2e:ce:f8:e9:8f:27:
                    fb:bf:a7:1e:ac:df:b0:7c:5e:de:60:ac:f2:2d:2f:
                    52:e8:55:ce:8d:ff:c3:8b:89:eb:a0:31:e7:3d:95:
                    c6:82:2e:e0:00:98:ef:1e:a7:c9:8c:5c:5d:d0:78:
                    dd:92:ed:fb:8d:34:70:e5:6a:87:5c:d8:de:65:08:
                    95:d9:b0:1a:c1:21:8b:89:b8:44:05:ba:9e:3d:0f:
                    7a:83:f4:de:9c:a4:0e:cc:59:3c:ed:26:30:c9:db:
                    e1:5e:ef:5b:d2:83:af:d5:6b:ca:06:71:16:da:41:
                    46:21:14:a9:e6:60:f5:e8:32:1e:83:11:37:66:a5:
                    26:59:a9:f4:ad:ea:14:9f:c5:d8:f7:57:fb:c7:ef:
                    6a:d8:2f:35:01:fe:59:2c:2d:8e:d4:c7:6a:81:2d:
                    83:57:a4:e4:77:85:ec:ac:09:6f:95:29:b4:c4:21:
                    b2:14:06:22:71:d0:0b:30:db:05:21:44:20:0a:41:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:70:E9:0C:92:4F:CC:BA:47:0B:1B:07:9D:37:62:C8:FE:4D:92:26
            X509v3 Authority Key Identifier:
                keyid:BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:91:34:bc:fe:f7:22:db:cd:14:0d:b6:cf:39:21:00:04:cb:
         fd:a2:b0:2e:70:ab:58:d2:f7:5f:94:a4:40:b9:a5:60:92:bc:
         0b:b3:ea:29:a1:26:48:28:62:54:d7:a6:43:25:80:88:77:3b:
         83:a0:a5:e7:c9:d0:e2:54:69:00:fd:3c:09:4e:8a:7d:c9:dd:
         ee:57:12:5d:88:ad:93:0b:16:2e:0a:5c:8d:f3:dc:f3:c9:67:
         b4:a2:ee:5b:a1:a6:a8:f8:dc:78:39:d2:46:15:35:f9:67:a3:
         e2:74:85:4e:bd:41:b1:ba:de:be:50:14:18:98:0f:59:85:e0:
         9a:26:20:fd:b0:26:c5:24:55:1e:5f:7b:b3:80:30:8b:f1:98:
         61:27:5d:c4:45:49:85:61:b6:4a:7a:3b:2c:13:ea:24:c1:97:
         39:a9:32:c5:f0:62:f6:f0:6b:8d:37:da:90:40:11:4d:e4:14:
         26:cd:40:16:3e:30:e6:ab:51:d4:a1:cb:44:cf:71:cc:d6:f8:
         15:10:13:4b:6f:bb:39:41:67:d7:3a:d8:94:10:a9:44:55:a0:
         e3:40:07:6b:2d:4b:88:b0:dd:47:1a:4b:64:a0:12:7b:15:91:
         ae:13:a4:bd:51:29:2a:56:5a:e6:8b:63:a2:68:29:1c:ff:5d:
         34:cf:66:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQzRjAxMTAvBgNVBAUTKEJEOTI2MjZCNDAwQkIxNERFNDFBNTA1MzlEOTYwRkM1
REQ2MURDMzcwHhcNMjUxMjIzMDQxOTUwWhcNMjUxMjMwMDQxOTUwWjAYMRYwFAYD
VQQDDA02OTRhMTg2Ni1kZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1b85ZDjoBNV3C4GD69rIbn3YEcwHsGWXWS1xlG5axnL8KJo/rDD83TQEQNSV
KuvCQFiyZh66buXhYNZI9Hbgc4Vg4Rguzvjpjyf7v6cerN+wfF7eYKzyLS9S6FXO
jf/Di4nroDHnPZXGgi7gAJjvHqfJjFxd0Hjdku37jTRw5WqHXNjeZQiV2bAawSGL
ibhEBbqePQ96g/TenKQOzFk87SYwydvhXu9b0oOv1WvKBnEW2kFGIRSp5mD16DIe
gxE3ZqUmWan0reoUn8XY91f7x+9q2C81Af5ZLC2O1MdqgS2DV6Tkd4XsrAlvlSm0
xCGyFAYicdALMNsFIUQgCkHe3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhw6QyS
T8y6RwsbB503Ysj+TZImMB8GA1UdIwQYMBaAFL2SYmtAC7FN5BpQU52WD8XdYdw3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDNGMC9DQTZCOTRDQzc0
RjgxMUVGQjM0Mjc5ODRDNEY5QUUwMi92WkppYTBBTHNVM2tHbEJUblpZUHhkMWgz
RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZaSmlhMEFMc1Uza0dsQlRuWllQeGQxaDNEYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDNGMC9DQTZCOTRDQzc0RjgxMUVGQjM0Mjc5ODRDNEY5QUUwMi92WkppYTBBTHNV
M2tHbEJUblpZUHhkMWgzRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2kTS8/vci280UDbbPOSEABMv9orAucKtY0vdflKRAuaVgkrwLs+op
oSZIKGJU16ZDJYCIdzuDoKXnydDiVGkA/TwJTop9yd3uVxJdiK2TCxYuClyN89zz
yWe0ou5boaao+Nx4OdJGFTX5Z6PidIVOvUGxut6+UBQYmA9ZheCaJiD9sCbFJFUe
X3uzgDCL8ZhhJ13ERUmFYbZKejssE+okwZc5qTLF8GL28GuNN9qQQBFN5BQmzUAW
PjDmq1HUoctEz3HM1vgVEBNLb7s5QWfXOtiUEKlEVaDjQAdrLUuIsN1HGktkoBJ7
FZGuE6S9USkqVlrmi2OiaCkc/100z2Z7
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:32:19 2025 by rpki-client