This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
File:                     6tgeRb5BR2cpw1YqNG-29i_IH70.mft (raw, json)
Hash identifier:          IWDbKqh3SIbSImGneXzESWgD6QGkH4MvAgQR0JhuspA=
Subject key identifier:   98:82:B5:AB:C0:1D:C7:7C:F4:88:DF:BD:F6:A6:6B:77:E4:BB:AF:90
Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD
Certificate issuer:       /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
Certificate serial:       0DB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
Manifest number:          0DAC
Signing time:             Wed 24 Dec 2025 17:35:40 +0000
Manifest this update:     Wed 24 Dec 2025 17:35:40 +0000
Manifest next update:     Wed 31 Dec 2025 17:35:40 +0000
Files and hashes:         1: 6tgeRb5BR2cpw1YqNG-29i_IH70.crl (hash: Jf4ebszTFwiJ+HL6Wwd2u0TAollE1YGPYXCHpgRKfn4=)
                          2: 0FA62A50214011EA90EFFE63C4F9AE02.roa (hash: ea5pQ154Qvp0SJ7Us+DBRZX79LxrjMjlZoLuAw0uaMY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl
                          rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3510 (0xdb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119624, serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
        Validity
            Not Before: Dec 24 17:35:40 2025 GMT
            Not After : Dec 31 17:35:40 2025 GMT
        Subject: CN=694c246c-df45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:f9:4e:e7:94:ee:3d:b4:d1:35:fb:89:f7:
                    7a:25:cd:09:34:52:46:ac:01:46:a4:d5:5c:1e:9d:
                    76:f4:28:4e:af:1e:24:ce:fa:7a:b2:5f:51:78:54:
                    13:87:5b:ea:83:4d:02:5d:d0:14:0a:98:21:ff:92:
                    3f:54:15:d2:8c:78:38:84:72:25:c9:a2:65:ae:6f:
                    5f:61:92:bc:bf:f2:07:75:d3:49:a8:c6:f2:77:28:
                    6b:85:52:c1:f9:96:ae:8e:28:ef:53:45:f6:3a:f9:
                    04:30:3f:8c:e0:8e:e2:28:7f:db:da:da:d6:40:ea:
                    6b:d3:43:42:17:9e:11:01:db:ea:c8:ea:b1:e0:35:
                    89:2c:bc:fd:45:1a:f9:06:4e:22:b7:14:36:ce:14:
                    fb:18:62:d9:0b:58:a6:84:01:ef:2b:b6:45:44:47:
                    5f:75:75:ae:d9:a4:e1:ef:8c:0d:a9:4c:2e:54:b4:
                    87:7a:c0:9e:95:b1:e3:66:25:4d:fb:9f:c5:e3:2d:
                    3f:5e:f0:5e:67:59:4b:d1:64:c9:33:ac:9f:3c:fc:
                    79:8b:00:13:74:d6:47:79:41:91:5a:80:86:a7:8f:
                    40:09:9f:1b:6e:6d:d7:d4:57:df:4e:07:2a:e9:ca:
                    5b:a6:fd:5b:e1:ac:28:a4:c0:cf:3b:ac:3f:85:5c:
                    20:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:82:B5:AB:C0:1D:C7:7C:F4:88:DF:BD:F6:A6:6B:77:E4:BB:AF:90
            X509v3 Authority Key Identifier:
                keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5e:c5:f5:d7:5e:44:52:36:17:48:c8:79:3d:bd:c8:c9:00:
         d0:ec:3b:f0:f5:2c:4d:86:d0:15:8f:98:ce:33:ee:4b:2c:9e:
         ac:28:8c:24:b6:bd:17:f5:33:af:9a:12:a4:fc:a5:dc:a8:28:
         73:b5:e9:4b:9e:5d:fb:1e:99:6f:2a:58:f4:bd:d4:74:d4:eb:
         e5:52:06:1f:8d:59:4c:15:fc:3a:01:a5:94:37:ae:5a:9c:7a:
         4e:c9:95:64:d7:42:d2:9a:98:b3:13:5e:3f:06:62:0f:01:fd:
         fb:a7:ff:4e:7e:bb:32:42:11:9b:c4:f9:a9:29:cc:cd:73:6f:
         4b:0f:b9:ea:e4:5d:24:86:ee:13:77:52:dd:81:ee:eb:26:95:
         fd:77:60:90:c2:cf:0e:cb:a3:44:84:c8:d1:2d:2f:3d:68:02:
         d9:b1:06:d5:66:18:4f:d8:40:16:e3:71:46:37:5c:20:d5:2e:
         54:98:25:6b:18:55:43:0d:5b:c5:f9:1c:6f:5f:a9:e6:6b:87:
         eb:9e:13:99:0e:a4:c0:fb:eb:39:8f:de:d4:d0:53:80:71:89:
         f5:8c:63:4b:28:21:31:64:00:91:b0:eb:43:d7:23:b9:90:bb:
         86:61:c2:51:d8:45:a7:9c:8f:7a:5d:67:0a:3e:cb:05:a4:da:
         d0:b6:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:23:57 2025 by rpki-client