This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File:                     ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier:          3EndUzafNi0D/T6r0tkx0Dl6fW6YRKPaHDZsY9bUmKc=
Subject key identifier:   CD:58:C0:B8:BE:DC:42:0E:3F:5D:54:91:F9:AD:BE:E3:86:BF:1D:9F
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer:       /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number:          0173
Signing time:             Wed 17 Dec 2025 03:27:53 +0000
Manifest this update:     Wed 17 Dec 2025 03:27:53 +0000
Manifest next update:     Wed 24 Dec 2025 03:27:53 +0000
Files and hashes:         1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: Oj15xNEtE9mSibbJVra+iwy2thhM32pDXZLKo5elcb4=)
                          2: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: gE5e/awh7V8v8LgWL9FQLpqEcqvec4IO81dUfYKKL1g=)
                          3: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: pIjFgpXQkNuUPeRzo+5CJIylR9ungXVNTfm0zEXHuWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
                          rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 03:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
        Validity
            Not Before: Dec 17 03:27:53 2025 GMT
            Not After : Dec 24 03:27:53 2025 GMT
        Subject: CN=69422339-70b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:23:50:9a:64:29:8c:a2:43:fc:5a:6b:91:
                    12:a2:4c:40:ee:df:42:8f:e6:ab:39:87:29:ee:52:
                    b5:27:83:13:88:8e:23:0e:d0:92:80:03:ee:20:3c:
                    f3:77:02:1f:ac:c8:ae:20:65:a8:a3:30:5d:73:39:
                    4b:f8:53:72:6d:8f:3b:33:99:af:a0:cb:83:eb:d7:
                    d5:76:c6:11:f7:c5:d2:e9:fa:3e:d1:82:bd:17:01:
                    e1:f1:86:72:d9:f2:fb:65:c6:3f:0d:d1:1c:80:2c:
                    09:f8:bf:ec:fe:1a:b5:29:73:b4:af:c9:e4:30:38:
                    d0:9a:6a:d3:0f:25:7d:0d:a6:8c:87:86:19:c4:3a:
                    5f:06:0f:dd:a6:20:ec:57:ec:fc:e7:57:31:9e:e3:
                    c6:da:fd:ae:9e:b3:21:f8:42:87:e8:04:03:a1:69:
                    c5:8f:5b:6b:db:1c:5a:2b:7f:60:32:ca:eb:30:99:
                    9e:4a:6a:0e:84:d8:b6:f3:f1:18:12:10:cf:72:69:
                    94:44:2a:02:2f:0b:c4:fd:a4:b7:5b:cc:a6:18:90:
                    71:a0:d5:c9:d1:1a:71:d1:08:60:f6:e0:cf:38:9e:
                    99:98:b4:35:bb:97:4c:54:87:45:ce:be:89:e1:9d:
                    37:ac:dc:9b:9f:45:aa:9a:06:99:d2:3a:a8:0d:75:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:58:C0:B8:BE:DC:42:0E:3F:5D:54:91:F9:AD:BE:E3:86:BF:1D:9F
            X509v3 Authority Key Identifier:
                keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:27:fb:06:03:95:dc:7e:11:d0:93:f5:af:7d:3f:6d:65:be:
         97:0a:b7:d2:6e:80:d9:6e:9d:32:1d:64:00:05:5c:c3:9e:1d:
         8a:fd:12:1d:b4:0e:89:f9:42:31:7e:6b:26:05:06:6e:c5:06:
         c1:1b:52:3c:2e:7a:cc:de:fe:b0:7b:df:18:89:25:87:de:a1:
         f9:46:43:c0:a6:d4:cf:77:fd:0a:dc:5c:1c:fc:70:b6:05:c2:
         59:a3:63:79:69:79:6c:57:fc:27:d8:02:c8:dd:ff:60:9d:1f:
         09:d8:ad:02:d9:9f:83:e8:c4:2e:0f:76:0a:f4:c0:a8:e6:8e:
         c1:4f:d0:12:f6:a0:7a:72:a1:16:49:3e:9d:27:c6:5e:2e:60:
         b8:36:d3:21:47:af:47:ae:15:f1:ca:31:f6:e7:10:59:67:77:
         0f:ed:7c:ca:18:1e:8b:c7:2d:71:be:9a:df:cb:bb:00:46:eb:
         c2:13:17:3c:e8:99:bf:f5:e0:b0:a7:4b:3e:d2:e9:11:cc:61:
         39:57:71:71:e7:12:37:95:8a:31:55:c4:c9:e2:a8:ef:11:58:
         58:7e:af:11:4e:6d:7c:3e:de:bd:71:3a:c8:b0:62:3a:5f:6f:
         93:2e:87:62:59:28:67:1e:dd:ba:f0:3a:2c:e9:70:d7:79:3e:
         87:e6:46:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz
OERDRTZBODMwHhcNMjUxMjE3MDMyNzUzWhcNMjUxMjI0MDMyNzUzWjAYMRYwFAYD
VQQDDA02OTQyMjMzOS03MGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqFMjUJpkKYyiQ/xaa5ESokxA7t9Cj+arOYcp7lK1J4MTiI4jDtCSgAPuIDzz
dwIfrMiuIGWoozBdczlL+FNybY87M5mvoMuD69fVdsYR98XS6fo+0YK9FwHh8YZy
2fL7ZcY/DdEcgCwJ+L/s/hq1KXO0r8nkMDjQmmrTDyV9DaaMh4YZxDpfBg/dpiDs
V+z851cxnuPG2v2unrMh+EKH6AQDoWnFj1tr2xxaK39gMsrrMJmeSmoOhNi28/EY
EhDPcmmURCoCLwvE/aS3W8ymGJBxoNXJ0Rpx0Qhg9uDPOJ6ZmLQ1u5dMVIdFzr6J
4Z03rNybn0WqmgaZ0jqoDXVa/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1YwLi+
3EIOP11UkfmtvuOGvx2fMB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1
OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U
M1dRT0FrNjVUWTA0M09hb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1J/sGA5XcfhHQk/WvfT9tZb6XCrfSboDZbp0yHWQABVzDnh2K/RId
tA6J+UIxfmsmBQZuxQbBG1I8LnrM3v6we98YiSWH3qH5RkPAptTPd/0K3Fwc/HC2
BcJZo2N5aXlsV/wn2ALI3f9gnR8J2K0C2Z+D6MQuD3YK9MCo5o7BT9AS9qB6cqEW
ST6dJ8ZeLmC4NtMhR69HrhXxyjH25xBZZ3cP7XzKGB6Lxy1xvprfy7sARuvCExc8
6Jm/9eCwp0s+0ukRzGE5V3Fx5xI3lYoxVcTJ4qjvEVhYfq8RTm18Pt69cTrIsGI6
X2+TLodiWShnHt268Dos6XDXeT6H5kbU
-----END CERTIFICATE-----
Generated at Fri Dec 19 03:48:05 2025 by rpki-client