This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
File:                     zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json)
Hash identifier:          frU9pgZqP6N3FjV7dXFtWL7uaE+MiwhUk2A1iGtHJ9E=
Subject key identifier:   1E:34:47:8F:23:D7:87:8F:CE:A0:06:F6:B3:05:5D:57:3F:14:A6:05
Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Certificate issuer:       /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
Manifest number:          013A
Signing time:             Tue 25 Nov 2025 02:49:22 +0000
Manifest this update:     Tue 25 Nov 2025 02:49:21 +0000
Manifest next update:     Tue 02 Dec 2025 02:49:21 +0000
Files and hashes:         1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: D8B1rzxL9kUAb6yd6wxO5RnVhW+oYyTtupom7Rla83Q=)
                          2: F6BB410AA34E11F0B508F67EC4F9AE02.roa (hash: 8K1O69m1bstFL8LZIqUFWVOg/nAR4GoraVpfB2EqwyY=)
                          3: 51030EF09B9C11F09447A92BC4F9AE02.roa (hash: S3cyIXZVoOkRNLShFeU9F6eot2kvd0U8U4Swy25JVmk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
                          rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Dec 2025 02:49:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
        Validity
            Not Before: Nov 25 02:49:21 2025 GMT
            Not After : Dec  2 02:49:21 2025 GMT
        Subject: CN=69251931-2a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:c3:28:7c:4c:06:d2:12:b6:34:dd:ea:b4:
                    e4:dd:07:72:02:f2:07:44:3b:1a:83:02:90:e8:95:
                    13:40:cc:7f:2b:fe:7a:ef:31:95:ec:c0:cb:ca:32:
                    49:14:9a:8b:ed:4e:5b:20:f2:9b:d7:4a:d2:eb:13:
                    24:cf:95:c0:42:48:79:32:44:c6:59:60:23:60:59:
                    e2:1d:d0:d9:39:34:db:ff:05:36:f9:65:6d:8d:1f:
                    16:52:1f:71:50:f3:7c:16:3b:2b:0b:ce:51:80:89:
                    42:58:a9:e7:ac:96:d3:e5:9f:ee:59:85:08:85:dc:
                    d0:91:02:15:c0:b9:ac:e1:a5:37:bf:eb:38:e4:ce:
                    ac:56:1b:40:7a:c6:fc:be:62:45:1c:72:5e:78:a0:
                    dd:b6:91:13:e0:7a:6c:20:73:55:ef:fa:ae:80:fd:
                    fb:d7:3b:75:87:48:51:85:f4:30:32:e3:33:27:1f:
                    79:2f:48:cf:47:2f:0f:7c:ca:4e:50:c1:28:e0:36:
                    3b:b7:29:fb:e0:a9:55:c8:91:42:85:65:7b:d5:58:
                    0a:9e:0d:41:b2:81:51:f5:1f:0f:86:90:6a:aa:f9:
                    53:cc:52:4c:96:08:9b:c7:36:1c:71:b3:e6:7f:20:
                    b0:95:ae:3d:67:4c:c9:00:65:95:bf:75:ba:53:b4:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:34:47:8F:23:D7:87:8F:CE:A0:06:F6:B3:05:5D:57:3F:14:A6:05
            X509v3 Authority Key Identifier:
                keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:82:69:f0:3e:c0:79:94:63:7e:70:b1:0d:29:1f:f0:d3:ef:
         7e:eb:9f:13:fd:0e:ac:8d:77:bd:18:f1:87:08:63:ff:02:f1:
         4d:d6:9c:31:12:62:3f:1e:1b:b8:0b:f6:19:be:b6:b0:0b:d5:
         b8:ca:45:c2:5d:5f:6e:02:fd:fe:f2:bb:1b:0b:e7:09:8d:5b:
         0e:fd:5e:44:69:ff:57:d2:14:b3:a1:bc:cb:d1:3f:31:0e:a5:
         1d:c7:f5:d3:eb:49:d9:42:3e:88:e5:48:5a:0a:a5:67:f6:e6:
         48:6a:f0:06:fe:28:2a:29:f7:b2:d8:76:0b:c8:15:52:d9:6f:
         13:0f:31:18:48:bf:b2:53:1f:47:6a:84:d1:7a:43:c0:ba:0e:
         e5:fb:32:c7:8b:19:c5:fd:58:75:05:a0:d3:ee:f7:78:19:76:
         75:4c:6a:9b:0b:84:d7:e5:79:57:39:a6:4b:29:e1:27:2e:42:
         22:b4:a6:20:06:71:a3:db:73:10:0e:46:00:b1:53:2e:a6:0f:
         c3:4a:7e:3b:9d:e4:fc:0a:25:6d:8f:d8:cf:11:f8:9f:e5:f6:
         24:b4:ab:d2:eb:41:25:34:f8:d6:c4:4c:d8:5d:e7:1f:a4:33:
         f5:a8:01:22:62:ae:bf:51:3c:5d:99:14:1a:a8:25:88:3b:0b:
         3e:e6:5a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 16:01:00 2025 by rpki-client