This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
File:                     8eUBY6xQamLM-1qK9WURw48VBBQ.mft (raw, json)
Hash identifier:          bkAHOtSdNcyL1mLFcerhbEu1KFeV2kyWOaFXgHQrFD8=
Subject key identifier:   5B:C1:41:53:66:A8:99:44:A9:D6:F9:B4:47:E9:74:EF:33:29:E0:EA
Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
Certificate issuer:       /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
Manifest number:          6E
Signing time:             Tue 23 Dec 2025 05:49:20 +0000
Manifest this update:     Tue 23 Dec 2025 05:49:19 +0000
Manifest next update:     Tue 30 Dec 2025 05:49:19 +0000
Files and hashes:         1: 8eUBY6xQamLM-1qK9WURw48VBBQ.crl (hash: rNMadZhvr1ReoHGK0lkLd7NGTmC1Jn5uJExeFfuobzw=)
                          2: 2EA48F06569A11F0A878F309C4F9AE02.roa (hash: ltjHOrlAjkCkglGzdBBO2Uhk0ROczxbCjOMO75HWhtA=)
                          3: CE88C72C569911F08E21CF87C4F9AE02.roa (hash: P3ICOOzdYod03YP+DW4znK40K0YlnGffnVKfr18TLD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
        Validity
            Not Before: Dec 23 05:49:19 2025 GMT
            Not After : Dec 30 05:49:19 2025 GMT
        Subject: CN=694a2d60-8710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:ba:0a:e2:b3:73:fc:ec:3c:6f:27:6d:a6:
                    3e:9e:29:49:23:02:64:1d:8e:e7:2f:cf:0a:cb:1f:
                    06:24:22:f4:94:42:b5:03:e5:99:08:48:2f:9e:62:
                    4b:0d:cd:b2:a8:cb:8c:c1:70:85:cf:31:08:de:45:
                    9b:34:50:a9:b0:dc:12:4b:5e:c0:fb:68:af:33:e2:
                    b2:a5:8c:5d:e6:c7:cb:26:ee:64:53:0f:7f:09:e1:
                    2f:db:bb:4a:83:79:b6:23:5b:4e:f7:75:6d:0d:db:
                    c9:ff:ad:38:13:05:ac:36:c2:c9:9d:e3:31:d4:7c:
                    4a:b1:25:b6:7f:ba:ea:ed:2b:bd:7b:06:5d:5a:f0:
                    d0:08:13:24:e9:c7:58:eb:d7:a2:77:7f:fc:79:22:
                    12:35:2b:7d:84:57:ca:d1:15:3b:87:2d:9a:81:16:
                    8c:c3:3e:d9:0d:f7:5d:8b:49:8a:2f:1d:8f:f4:30:
                    ac:45:52:4a:ad:12:bf:75:3b:65:8d:82:29:e0:35:
                    ba:02:be:eb:c8:17:d9:2e:47:85:df:da:93:56:47:
                    74:c8:3f:e7:e9:c7:32:be:21:1c:be:bc:98:55:cd:
                    83:fc:57:fe:cc:a4:7c:fd:d1:e6:18:46:a2:6f:c1:
                    0c:72:8a:2e:b3:c3:d1:79:80:94:99:cd:e8:34:11:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C1:41:53:66:A8:99:44:A9:D6:F9:B4:47:E9:74:EF:33:29:E0:EA
            X509v3 Authority Key Identifier:
                keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d4:50:0b:21:53:5d:91:4c:e9:83:e0:41:3f:69:82:61:76:
         6f:6d:9b:a3:b8:44:eb:d9:1f:2b:74:a7:ca:10:b0:7f:24:a6:
         5e:09:c0:90:7d:87:4c:01:38:64:a7:8a:bb:04:c1:e9:e0:4a:
         98:62:0a:7d:2d:48:48:fb:08:17:cb:77:af:1b:22:4b:69:fa:
         f8:b4:02:45:45:ea:0e:33:5c:33:e4:bc:e6:f6:fd:1f:c0:ad:
         de:e6:68:01:45:0c:34:82:ca:a6:07:ce:ad:9a:0b:26:2e:4f:
         6d:80:5a:ac:c7:9e:cd:9b:00:d4:bc:c7:5b:e3:16:9e:f3:59:
         ce:08:6d:a3:2b:e5:bc:bb:20:1c:7d:44:1e:8d:53:a8:c3:ed:
         ef:b8:a8:6b:a0:02:3e:e3:26:fa:af:56:52:1c:e8:ae:b2:af:
         cd:f5:ce:e8:09:e0:d2:90:dc:2e:c4:d0:b0:0b:9a:34:66:aa:
         64:3f:9a:da:76:54:43:7c:ba:13:90:35:40:c0:80:f6:fb:98:
         ce:ac:22:31:58:83:8c:11:ac:3b:51:a2:09:db:c0:7b:7b:c2:
         03:ad:02:fc:cb:c6:6b:6a:d6:7a:fc:3a:eb:63:6c:f3:a8:ae:
         91:b1:0f:72:8d:b1:73:0b:a9:74:80:14:03:67:d3:58:c0:0f:
         07:0a:8f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:22:42 2025 by rpki-client