This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
File:                     6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json)
Hash identifier:          R44jwsex/MzyDdJpMrlEVtgZLvxG1vNhfgj6QLFKyJg=
Subject key identifier:   BC:76:A6:7E:D3:FE:D5:B7:5D:0E:AA:77:C4:62:07:0E:90:B6:19:F4
Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34
Certificate issuer:       /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
Certificate serial:       2A72
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
Manifest number:          2A61
Signing time:             Sat 20 Dec 2025 14:19:57 +0000
Manifest this update:     Sat 20 Dec 2025 14:19:56 +0000
Manifest next update:     Sat 27 Dec 2025 14:19:56 +0000
Files and hashes:         1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: kFl4xw6gHrr3DF8sS6TNQl0ju4MXXHOaCWFKTdaUiMg=)
                          2: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: IS6RP+KmoY800ilz+9/FraPb2PhtRfq61ziRhaqYPqA=)
                          3: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: vmKqro3gn7F1Qg3wm7Klm7w2ti+vviDyxmMgM4ZcJqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10866 (0x2a72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
        Validity
            Not Before: Dec 20 14:19:56 2025 GMT
            Not After : Dec 27 14:19:56 2025 GMT
        Subject: CN=6946b08d-8733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:af:53:28:60:13:d2:20:96:d7:57:e4:32:
                    3a:3e:90:22:21:a0:9e:6b:72:6d:a0:b4:b5:37:9b:
                    29:22:75:4a:59:bd:ab:d0:6b:0f:d7:bc:5a:c9:c1:
                    fb:f6:71:dd:52:ee:96:af:23:6e:c4:b4:3c:8b:85:
                    d6:ed:e3:2c:81:8b:bd:4c:b2:36:47:75:3c:1f:5f:
                    3a:da:23:83:58:00:07:4a:a7:3c:bf:8b:e6:3b:4d:
                    25:d5:5a:ce:c5:11:cb:26:16:af:44:ce:fb:19:e5:
                    d9:ba:d3:79:86:34:5f:d6:bb:cf:09:71:3d:11:3c:
                    93:59:87:93:cc:85:c6:a5:06:95:e3:f3:62:3b:5b:
                    82:da:dc:50:8e:1e:3c:33:80:2c:8d:8c:65:06:5a:
                    b7:d7:c0:3c:32:28:80:99:58:cc:31:5e:5f:e5:69:
                    dd:c6:2b:3a:11:6c:37:f2:a7:3b:f8:83:64:61:ba:
                    27:8c:56:a8:85:cc:fb:c7:7f:0d:d0:5e:b7:82:e0:
                    e6:70:c7:25:57:ca:01:46:32:58:f3:47:3d:28:61:
                    ed:1d:60:82:d4:9b:c2:1f:44:66:4f:63:5f:d2:72:
                    cb:3f:2e:bf:f8:77:d9:1b:d1:87:39:eb:2a:98:d9:
                    2c:c7:9d:05:ae:de:6c:38:ff:74:af:2e:22:5a:7d:
                    e3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:76:A6:7E:D3:FE:D5:B7:5D:0E:AA:77:C4:62:07:0E:90:B6:19:F4
            X509v3 Authority Key Identifier:
                keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7e:00:54:ba:be:c2:21:68:87:a1:f6:1f:e0:95:18:9e:24:
         03:d7:47:3b:ce:e7:27:ff:50:5a:84:5c:f1:c1:b0:5a:92:bb:
         82:40:d5:7d:1d:3f:15:44:b3:54:29:a9:fd:f4:91:1e:1b:d2:
         49:bc:01:34:ed:a2:7d:26:55:fe:d6:54:6f:85:74:58:eb:ba:
         24:3f:14:d4:d3:92:87:27:76:68:17:3c:84:6e:f4:75:84:62:
         26:e6:2a:12:46:89:84:f3:52:8d:ed:46:0f:75:aa:fb:cf:34:
         27:bc:ca:0e:c8:3a:e3:67:a5:43:c9:c5:48:33:10:87:9c:57:
         71:ae:fc:1f:9d:3e:18:d9:d4:24:c6:48:d1:24:91:14:65:04:
         ee:38:16:c7:2b:94:1f:c6:d2:56:68:7f:53:bb:b1:db:46:27:
         1f:f1:9b:70:60:55:a5:e4:78:d7:bc:14:85:41:81:bf:21:4c:
         b8:02:2a:70:0c:6b:fe:bf:5f:0d:37:44:d5:a3:7c:d7:4d:84:
         0c:5d:b6:b1:cc:b0:68:af:65:cb:cc:9e:f4:d5:eb:5a:d3:92:
         d4:8f:cf:17:68:d3:e8:cf:04:9c:5c:dd:a1:46:0f:91:dd:b6:
         0f:1c:23:d3:07:5a:41:9b:2e:22:64:12:1f:12:65:39:63:ab:
         93:f9:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:30:29 2025 by rpki-client