This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
File:                     q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft (raw, json)
Hash identifier:          MzMNt/7yifKHSoU8pvGl5MxQTWgJkDZx7gfill3TFEM=
Subject key identifier:   26:14:01:93:EE:CF:72:A9:50:80:73:6D:34:AF:B5:22:62:10:5D:C3
Authority key identifier: AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91
Certificate issuer:       /CN=A914845D/serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
Certificate serial:       069E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
Manifest number:          0699
Signing time:             Sat 20 Dec 2025 21:42:57 +0000
Manifest this update:     Sat 20 Dec 2025 21:42:57 +0000
Manifest next update:     Sat 27 Dec 2025 21:42:57 +0000
Files and hashes:         1: q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl (hash: xGi9CsJFKTy4g1P/NEgmKivc178v1D1krIsPqgZu68c=)
                          2: 96A61404AAA911EBA223275EC4F9AE02.roa (hash: E9czvgeh6YRFhRYFfzW1p9Rsfnmm6YmfPInujvKlVu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl
                          rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694 (0x69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914845D, serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
        Validity
            Not Before: Dec 20 21:42:57 2025 GMT
            Not After : Dec 27 21:42:57 2025 GMT
        Subject: CN=69471861-cf05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d3:93:9f:45:65:6e:ea:ff:a3:5a:33:68:f8:
                    07:a4:0b:83:52:48:47:05:80:c8:7f:c7:8b:a0:cb:
                    49:c9:3d:e0:e6:ed:45:bc:3f:7b:39:f7:6b:66:c7:
                    71:5b:50:d6:c7:29:10:d2:49:f3:49:2d:db:3b:b9:
                    4d:6e:e6:79:2d:51:79:9b:47:ff:fc:7d:eb:4a:dc:
                    98:37:94:80:de:3e:09:0e:26:d5:4e:22:bd:e3:29:
                    0e:50:14:ce:d3:de:18:df:4d:19:db:04:42:bb:39:
                    56:b0:92:0b:3a:ca:21:c2:1a:21:c4:02:c9:dd:25:
                    9e:2c:4b:a4:9e:0e:9f:66:88:83:4d:2b:f7:45:9e:
                    ae:9f:bb:8a:dc:97:ca:3a:57:56:94:33:54:e9:7a:
                    b1:55:de:a0:89:fc:e8:81:c2:93:d0:23:de:c5:6a:
                    07:8e:46:89:30:0f:84:20:4c:ed:f7:b4:c8:cb:8a:
                    0d:ce:95:2f:88:9a:37:8f:7b:06:c5:73:93:7e:fb:
                    de:ab:4b:97:43:e1:dd:57:fc:4f:5b:00:e9:92:76:
                    c5:95:61:29:64:ca:3a:9d:75:3b:4f:c7:72:ca:dc:
                    7c:8d:d6:d1:f1:67:9a:e1:23:0a:ff:68:cb:65:68:
                    d1:5c:8b:f5:f2:97:54:f8:13:8e:7f:96:9b:36:fe:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:14:01:93:EE:CF:72:A9:50:80:73:6D:34:AF:B5:22:62:10:5D:C3
            X509v3 Authority Key Identifier:
                keyid:AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:f2:18:e1:a2:31:33:df:cb:44:37:99:b3:5e:b6:dd:59:
         ed:f7:d0:fd:b1:91:e6:a6:d8:03:38:74:19:6c:b5:c7:6c:fa:
         f0:03:5f:d8:43:c4:e9:63:a7:ec:92:70:39:8f:1b:94:5c:d5:
         33:8b:a8:c7:e0:0a:9e:d6:7e:36:bb:41:2b:73:68:cb:f9:7f:
         1b:de:df:27:f9:60:db:ef:40:16:e3:12:6a:ea:1f:a4:4b:ea:
         f7:90:b0:23:0b:23:ac:2e:76:3d:5f:42:38:31:d6:e5:45:19:
         0e:18:0d:2b:97:a3:f6:08:97:65:bf:97:fa:3f:08:31:47:f6:
         c6:07:ed:e8:5c:85:53:ad:50:cd:1c:89:49:b0:b2:87:83:86:
         ee:83:2c:17:de:67:79:fa:1b:8c:24:5b:36:c7:3b:ca:98:6c:
         5b:00:1b:73:74:16:c7:1d:99:ee:ad:ea:9a:e5:d6:d5:b8:ca:
         11:4a:b6:43:15:b5:1a:8a:62:56:4e:02:74:a1:cd:65:20:0c:
         81:a3:69:88:74:00:5d:38:fa:30:ae:5e:d0:e5:7f:1c:8d:83:
         07:0c:ed:37:cb:02:63:1e:d9:26:7e:8a:52:1c:84:fb:2e:01:
         f9:c1:cd:9e:bc:24:43:0d:2b:94:10:c5:02:29:ee:1d:cd:b1:
         39:f9:0f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:33:00 2025 by rpki-client