This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
File:                     k8C6F5rKocB50zxmk_RGcBBPzZg.mft (raw, json)
Hash identifier:          6qroGmEhNeylvfHwWyV0jQjWe+0gnOf5L7MMzf6NY58=
Subject key identifier:   06:B1:A5:4E:BF:77:E6:78:45:AC:15:10:2F:C5:07:14:93:8E:17:AD
Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98
Certificate issuer:       /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
Manifest number:          024B
Signing time:             Wed 17 Dec 2025 01:12:19 +0000
Manifest this update:     Wed 17 Dec 2025 01:12:19 +0000
Manifest next update:     Wed 24 Dec 2025 01:12:19 +0000
Files and hashes:         1: k8C6F5rKocB50zxmk_RGcBBPzZg.crl (hash: uySoAMaVYap+7gyIs4kV59yvX3Yqf8kuirMPD8YI55o=)
                          2: 6F57F77659AF11EDB5683587C4F9AE02.roa (hash: mvL+Nx41RdHY+v59BWP5LMWkyChMsslC0cZzMH9xusc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl
                          rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 01:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111788, serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
        Validity
            Not Before: Dec 17 01:12:19 2025 GMT
            Not After : Dec 24 01:12:19 2025 GMT
        Subject: CN=69420373-b5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bf:df:88:32:67:52:86:6a:91:49:53:9f:1b:
                    f9:6f:0c:ff:99:35:c7:26:1b:ba:57:6e:51:ca:50:
                    63:b7:39:41:7e:4b:40:fa:4d:70:37:b1:a9:91:d2:
                    5a:e9:e9:05:bf:bb:17:20:73:89:c9:58:d1:1d:75:
                    0d:4b:e8:bd:a1:00:85:e8:14:d0:2f:93:94:26:94:
                    d8:89:71:81:02:dd:0c:77:9a:fe:3f:be:eb:19:83:
                    aa:e1:66:a0:55:a5:44:c0:93:68:6c:86:55:8f:ab:
                    76:32:2d:b8:99:c1:3b:e5:0a:94:8e:64:22:b3:e5:
                    46:ab:cc:76:a1:4b:18:9b:1c:51:b7:4c:3c:5e:49:
                    58:ec:b0:41:da:21:d3:92:63:ea:3a:bf:b6:22:09:
                    14:e0:d4:d5:80:0b:48:f6:2c:97:1f:c2:7e:9a:da:
                    a6:18:3a:fd:0e:80:db:dd:a5:1f:0e:51:19:69:85:
                    d2:a1:ef:cb:e4:9e:3a:51:1c:3f:8b:2f:b0:45:4d:
                    13:51:59:1b:c4:d4:5b:8f:b4:62:df:7e:ef:31:be:
                    e4:a2:ed:f9:e1:24:de:87:18:f3:8f:92:00:c9:92:
                    ba:55:0c:00:93:33:45:d5:18:c2:0e:7f:9a:d4:c3:
                    fb:87:c4:ac:88:6b:99:d2:3d:6f:d9:3c:27:7f:18:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B1:A5:4E:BF:77:E6:78:45:AC:15:10:2F:C5:07:14:93:8E:17:AD
            X509v3 Authority Key Identifier:
                keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:32:ca:78:63:9f:bb:0a:8e:8f:2f:ab:9f:32:19:58:59:9f:
         2a:13:40:cc:45:52:99:c8:bd:73:94:3b:3d:98:2d:2f:23:42:
         52:c2:95:94:50:49:ab:87:a1:26:39:1e:c3:f4:39:47:0f:0a:
         78:cb:bd:ab:3c:7d:f3:78:91:c1:07:b0:97:44:89:fb:95:b0:
         98:77:19:a0:63:06:2d:be:51:9a:76:ca:e9:15:b3:c0:94:f1:
         f4:48:21:10:7e:82:ee:76:f2:43:81:d6:43:54:4b:35:b4:c5:
         06:cf:0e:f9:63:66:3b:b6:c3:5c:98:54:97:da:da:ce:3e:e8:
         a1:30:a9:7c:9f:84:f1:54:12:6b:ba:59:4e:2f:1b:03:21:b5:
         d7:f9:e4:56:bc:f4:fc:00:96:8c:f5:a1:cb:ba:24:aa:8a:9c:
         78:cc:97:61:fa:50:fb:1e:97:3a:61:9f:dd:29:f6:68:68:af:
         d8:94:65:22:54:b1:a7:84:19:14:58:61:7b:97:ea:9e:b1:60:
         1d:39:19:87:e2:5d:d9:ab:fa:5e:ec:b3:b5:3a:ac:3a:c1:bc:
         6e:ba:2b:05:f0:ad:90:31:39:09:14:61:41:71:d6:19:1c:73:
         5c:47:68:ce:fc:60:5c:2e:c3:d0:ef:0a:e6:44:a9:b2:cf:47:
         95:0a:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 10:44:25 2025 by rpki-client