This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
File:                     k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft (raw, json)
Hash identifier:          i5dat85GbcWrfDu9YeU7qSW9W2NJLY4jBADCKOnkNss=
Subject key identifier:   43:87:9D:84:97:57:7C:44:7D:B2:68:17:6D:51:15:D8:95:70:6C:86
Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31
Certificate issuer:       /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
Certificate serial:       07A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
Manifest number:          120F
Signing time:             Mon 22 Dec 2025 19:03:14 +0000
Manifest this update:     Mon 22 Dec 2025 19:03:13 +0000
Manifest next update:     Mon 29 Dec 2025 19:03:13 +0000
Files and hashes:         1: k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl (hash: Irj7Vv9SP1Lkq4wkAGmTYTqBTKciV54sWBlH3mFC1+M=)
                          2: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (hash: vIPNbcJqWxUBjpuSb4YOfnKRdWitZHJvmk+kQLzHWh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1959 (0x7a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
        Validity
            Not Before: Dec 22 19:03:13 2025 GMT
            Not After : Dec 29 19:03:13 2025 GMT
        Subject: CN=694995f2-7397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:ba:a8:d6:ed:0a:ae:8b:80:fe:4a:5b:72:
                    e0:24:bd:0a:4b:53:55:50:f4:61:86:77:95:61:92:
                    90:e1:0b:e4:43:1b:45:e0:53:b3:60:e1:58:18:1b:
                    3c:f8:ec:76:b2:52:fe:7c:2a:9b:fa:e3:4d:85:04:
                    e7:43:6d:b4:76:36:e7:b4:f6:cf:b1:cc:65:ea:86:
                    4d:01:b7:c5:e9:d7:d2:5b:61:42:b2:4a:d2:a1:db:
                    42:fd:48:45:7e:c4:90:37:82:21:59:08:d6:91:a0:
                    bc:a4:0a:57:d6:75:b9:8c:a3:f7:3b:bd:f1:f4:bf:
                    9b:72:37:31:e5:0c:a6:61:78:9c:89:4a:cc:83:bc:
                    1a:9a:ea:ca:3d:76:86:59:b3:7e:e8:4b:5b:09:1c:
                    c5:bd:3b:ad:65:c6:13:33:20:54:b1:cf:42:d3:d1:
                    dd:7b:76:74:37:28:98:ec:ef:29:fa:9b:ea:45:d6:
                    e6:c4:40:da:64:5e:f9:1f:23:9a:de:27:85:90:82:
                    d9:97:55:5c:99:96:f6:ca:91:5a:c2:d4:e5:8d:58:
                    ee:61:2d:59:3e:99:11:a2:d8:ad:2d:d4:a8:5d:3a:
                    18:68:1d:a0:e9:ec:58:81:14:f0:a1:37:fb:dc:15:
                    c5:d8:d1:00:3e:90:8f:bf:91:82:6b:64:89:d1:d5:
                    f7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:87:9D:84:97:57:7C:44:7D:B2:68:17:6D:51:15:D8:95:70:6C:86
            X509v3 Authority Key Identifier:
                keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:77:94:29:60:75:c9:74:af:82:11:87:f7:0d:fb:f4:37:89:
         3a:88:b6:53:44:79:c8:8a:a1:40:28:ab:53:bf:5d:60:15:4f:
         c7:58:3f:c9:00:4b:6e:4c:2b:66:64:3f:08:9a:59:4b:00:75:
         85:45:17:11:37:9e:61:26:7d:ed:82:f9:85:0c:cf:77:9e:93:
         30:86:e1:8c:86:d1:46:20:2f:ef:8c:db:9a:55:b2:db:b9:4f:
         a4:a7:cb:fe:5c:c4:70:94:e8:48:2a:44:6a:8c:1f:17:af:18:
         6b:7d:fb:47:f7:d8:d3:ff:fe:7f:7b:4c:77:cc:5c:e4:a5:a1:
         51:fc:25:08:30:1f:31:05:d6:56:65:55:c7:dd:e4:b3:ba:36:
         38:97:99:4f:6f:8b:1e:7b:d3:b6:9a:f9:d4:70:8c:2a:25:c9:
         d2:c5:a1:a3:17:72:81:d0:56:0d:4f:a7:41:fc:37:55:7e:ba:
         d0:e7:16:76:35:33:49:eb:1d:df:e8:f9:a9:df:ea:dd:0a:81:
         88:44:7b:15:f2:12:c1:2a:5f:d8:d8:28:70:9b:79:a1:c8:12:
         cd:76:6e:67:73:07:49:9b:55:85:87:20:74:9b:51:df:a9:2b:
         64:db:4d:23:2a:05:6b:61:60:89:ab:5e:75:cf:19:be:3f:05:
         8c:d5:09:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAwQjIxMTAvBgNVBAUTKDkzQTdEODM1RTEzODU4QkI1OTk1MUMzOTlBNUY5RUFC
MEUyRUI5MzEwHhcNMjUxMjIyMTkwMzEzWhcNMjUxMjI5MTkwMzEzWjAYMRYwFAYD
VQQDDA02OTQ5OTVmMi03Mzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1uu6qNbtCq6LgP5KW3LgJL0KS1NVUPRhhneVYZKQ4QvkQxtF4FOzYOFYGBs8
+Ox2slL+fCqb+uNNhQTnQ220djbntPbPscxl6oZNAbfF6dfSW2FCskrSodtC/UhF
fsSQN4IhWQjWkaC8pApX1nW5jKP3O73x9L+bcjcx5QymYXiciUrMg7wamurKPXaG
WbN+6EtbCRzFvTutZcYTMyBUsc9C09Hde3Z0NyiY7O8p+pvqRdbmxEDaZF75HyOa
3ieFkILZl1VcmZb2ypFawtTljVjuYS1ZPpkRotitLdSoXToYaB2g6exYgRTwoTf7
3BXF2NEAPpCPv5GCa2SJ0dX3DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOHnYSX
V3xEfbJoF21RFdiVcGyGMB8GA1UdIwQYMBaAFJOn2DXhOFi7WZUcOZpfnqsOLrkx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz
RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdMdFpsUnc1bWwtZXF3NHV1
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s2ZllOZUU0V0x0WmxSdzVtbC1lcXc0dXVURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdM
dFpsUnc1bWwtZXF3NHV1VEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdd5QpYHXJdK+CEYf3Dfv0N4k6iLZTRHnIiqFAKKtTv11gFU/HWD/J
AEtuTCtmZD8ImllLAHWFRRcRN55hJn3tgvmFDM93npMwhuGMhtFGIC/vjNuaVbLb
uU+kp8v+XMRwlOhIKkRqjB8XrxhrfftH99jT//5/e0x3zFzkpaFR/CUIMB8xBdZW
ZVXH3eSzujY4l5lPb4see9O2mvnUcIwqJcnSxaGjF3KB0FYNT6dB/DdVfrrQ5xZ2
NTNJ6x3f6Pmp3+rdCoGIRHsV8hLBKl/Y2Chwm3mhyBLNdm5ncwdJm1WFhyB0m1Hf
qStk200jKgVrYWCJq151zxm+PwWM1Qla
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:48 2025 by rpki-client