This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
File:                     6mETfAkAkG5HSNHgfMVV5qfM4QA.mft (raw, json)
Hash identifier:          SRth1GwNEWn4wx7p3wo76liOWXPjvD4+wqSfgp4TMcA=
Subject key identifier:   06:79:E8:EC:8D:FB:EB:98:A2:48:21:35:03:9B:C0:AD:FF:59:F4:DC
Authority key identifier: EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00
Certificate issuer:       /CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
Manifest number:          07A2
Signing time:             Tue 16 Dec 2025 22:16:34 +0000
Manifest this update:     Tue 16 Dec 2025 22:16:33 +0000
Manifest next update:     Tue 23 Dec 2025 22:16:33 +0000
Files and hashes:         1: 6mETfAkAkG5HSNHgfMVV5qfM4QA.crl (hash: Nrp0uQJFIz4NhG2aawCeL2+CIQsg8tUgx7GNmHcCpoY=)
                          2: 1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa (hash: dZTRls4280/E4YN4c7nuR8VH/U9lXLY5JNfcW3Mega8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl
                          rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 22:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91175BA, serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
        Validity
            Not Before: Dec 16 22:16:33 2025 GMT
            Not After : Dec 23 22:16:33 2025 GMT
        Subject: CN=6941da41-e930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:f4:ae:a9:e4:83:e8:6b:2a:d2:88:9f:ea:
                    c4:f9:3e:2d:c9:b1:bb:e2:c7:92:25:92:d4:d6:fc:
                    df:81:42:b8:13:5e:be:85:89:35:ad:e9:35:5e:1e:
                    05:89:23:bb:8e:e3:df:88:38:79:67:48:7d:b4:73:
                    2c:d8:0b:b2:2f:a2:76:4a:60:27:f2:02:2c:8e:ae:
                    7e:6c:37:dd:c7:a6:62:50:9c:65:d3:69:41:33:bc:
                    d9:bb:41:13:7f:cb:38:8f:62:d3:07:79:4e:6f:c1:
                    15:ae:0c:ee:fe:19:4b:d8:27:58:2c:36:a4:84:06:
                    72:e5:f8:f1:b1:c5:a5:4c:d9:1d:b2:d5:df:1d:32:
                    1f:eb:e2:4b:49:c9:ac:80:42:75:3e:ec:c7:28:87:
                    7d:fe:11:aa:74:cd:7d:29:8f:96:fe:c9:85:af:aa:
                    53:9c:12:8c:f8:af:9a:87:a3:29:d1:a4:e2:5e:85:
                    7f:24:93:2f:d5:ca:16:8a:06:b8:e4:e1:d3:8c:cb:
                    73:a6:45:37:69:25:75:a3:e6:5e:f2:e9:f7:29:e9:
                    e3:dc:80:f7:0b:25:8b:64:52:5a:99:99:a6:e5:ff:
                    0e:89:c9:f7:5d:ab:f0:7e:70:16:86:f8:be:9b:73:
                    4c:3e:64:21:d1:1a:a3:3c:d0:fe:39:e2:f9:33:60:
                    5f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:79:E8:EC:8D:FB:EB:98:A2:48:21:35:03:9B:C0:AD:FF:59:F4:DC
            X509v3 Authority Key Identifier:
                keyid:EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:a0:aa:db:21:34:a4:79:d6:ca:98:2b:91:07:db:e3:7b:
         f3:3f:89:44:4f:93:ea:cc:61:01:57:d2:16:49:fd:c6:90:b6:
         c4:df:89:cd:66:a4:70:b1:4b:6e:4a:88:81:41:38:1a:89:13:
         91:f2:26:43:1c:df:f0:55:ef:b6:9a:5c:74:1b:b8:e1:0f:fa:
         72:9a:62:84:d6:a8:cb:72:75:89:74:e0:00:b4:1d:d7:30:dc:
         8c:53:60:c4:e9:ea:b5:a9:33:83:a9:e8:77:bd:5e:c6:bb:ce:
         8c:46:1a:42:bd:b1:98:82:99:53:df:6c:5a:6e:82:9f:b5:ce:
         4d:34:47:0a:d8:5e:03:c7:cf:5a:7c:0e:e1:10:75:6f:a1:f3:
         20:3a:65:2a:5a:20:ae:ef:0a:a6:9e:18:38:29:94:48:67:df:
         f0:4d:0b:90:5a:59:67:65:71:06:a6:3f:5e:6a:71:25:58:88:
         66:71:16:a8:01:ee:73:7d:2c:fd:f9:56:84:8d:84:2d:bf:0d:
         9d:e3:b1:cf:b8:41:ec:4e:8d:14:e5:89:96:d2:10:0f:01:49:
         70:aa:97:3e:ac:1a:af:8d:6f:cc:9e:4e:a6:28:44:02:0d:36:
         27:0a:20:b6:4c:2f:c0:c3:ee:1f:13:71:e1:ee:87:14:e9:c9:
         9c:dd:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:22:39 2025 by rpki-client