This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
File:                     f_ZWW3k9deFOctx32CgmvUO3_nU.mft (raw, json)
Hash identifier:          ZHu6ca8X7uyLxQvxlPvaeAR8PMIlRvYlF68vsAAExbg=
Subject key identifier:   47:1D:CC:07:E3:61:8C:95:B8:99:7D:94:DC:95:7A:AF:0F:3E:6A:9E
Authority key identifier: 7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75
Certificate issuer:       /CN=A91B13C3/serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
Manifest number:          0209
Signing time:             Sun 21 Dec 2025 01:36:49 +0000
Manifest this update:     Sun 21 Dec 2025 01:36:49 +0000
Manifest next update:     Sun 28 Dec 2025 01:36:49 +0000
Files and hashes:         1: f_ZWW3k9deFOctx32CgmvUO3_nU.crl (hash: l6Y45c196vbcB6m4GKgmOPw267jdQyDhEw+Z0qYzZIQ=)
                          2: 7B45598CC3F111EDAB69B855C4F9AE02.roa (hash: bJ0v83C66Egxm5Wkl4eVEIZVTUzpH+tAcrHqbaRE6ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl
                          rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 01:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13C3, serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
        Validity
            Not Before: Dec 21 01:36:49 2025 GMT
            Not After : Dec 28 01:36:49 2025 GMT
        Subject: CN=69474f31-5f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:5c:46:98:17:00:91:1a:73:49:1a:0e:19:
                    d4:20:93:2a:b8:16:3a:e0:fd:72:50:83:48:16:66:
                    3a:af:5d:3d:28:e8:34:6a:c4:96:93:90:ae:49:09:
                    05:dd:9c:41:06:b7:25:7b:79:f0:a3:1c:6c:dc:96:
                    9b:93:31:34:73:49:96:7f:6d:f4:ae:f5:cf:68:62:
                    f7:42:55:ae:f0:23:10:ce:7a:f2:93:0a:e4:d6:73:
                    23:c1:d1:07:ac:32:53:bb:75:3a:84:8d:a1:f9:74:
                    eb:fc:b8:ab:44:a8:37:15:f1:94:c3:44:6f:93:98:
                    f1:5d:a0:f3:59:51:83:6f:8b:38:d4:e6:6d:61:50:
                    11:85:a8:76:91:8f:57:1c:30:bc:ea:b4:87:5b:95:
                    33:ce:b7:7d:bd:9f:a9:ec:89:e8:58:7d:80:fd:9d:
                    23:5a:51:33:5d:7d:a0:7d:61:9d:aa:02:24:f4:88:
                    40:98:34:27:8c:b5:b0:25:bc:96:01:8b:37:82:57:
                    34:21:6d:ea:e1:8c:01:23:74:d9:c8:6d:d5:47:29:
                    9e:cf:54:78:c8:5f:30:6a:ad:38:0f:5e:66:f6:4b:
                    ba:b6:9f:af:2d:cd:4b:5d:fa:b5:f9:68:06:1a:d8:
                    f6:cc:d2:38:34:fe:0b:8a:71:e9:80:be:b2:27:fb:
                    80:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1D:CC:07:E3:61:8C:95:B8:99:7D:94:DC:95:7A:AF:0F:3E:6A:9E
            X509v3 Authority Key Identifier:
                keyid:7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:05:57:bf:12:0a:99:d1:65:25:b0:9d:13:7a:84:ce:2d:b4:
         80:2f:18:85:5a:c7:f1:23:cc:1a:e9:b2:eb:01:87:f2:62:7c:
         f5:de:b6:86:20:6a:c1:2a:73:eb:2f:1e:31:30:f9:6c:a6:8d:
         1f:69:ab:18:49:05:f6:a9:30:18:65:e1:7e:0b:a3:af:e3:91:
         a8:28:c0:53:19:b2:ca:ab:50:bb:d4:f3:51:6f:fd:64:ae:21:
         60:d3:4a:33:55:96:54:af:dc:08:9b:f3:3b:0f:9d:fd:24:32:
         41:65:63:4b:15:2a:4e:73:e9:f3:c6:b2:00:0e:72:6c:9a:11:
         49:3b:7b:16:75:dc:34:d8:81:26:3f:b4:12:c5:37:20:aa:5b:
         18:fe:fd:ed:4e:54:4f:7b:82:d7:c1:2d:7c:bb:e7:7e:c9:4f:
         cb:86:72:89:ac:31:11:6f:57:74:77:0b:1a:1f:16:8c:b5:6f:
         5c:0e:07:49:30:90:0d:8e:16:4f:33:08:bb:7a:88:10:d0:83:
         8e:65:9d:e1:a2:0b:8a:d9:94:5f:de:e1:91:43:b6:47:fb:87:
         e0:b7:31:9f:48:ed:8f:35:52:d4:8b:7e:2a:af:79:e3:55:19:
         7f:4d:d0:b0:5f:1c:da:50:99:a7:27:51:6a:8f:36:93:05:a3:
         a4:69:64:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:43:37 2025 by rpki-client