This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
File:                     S6E9VJoFZMMeqLIxX84wI7tiiKc.mft (raw, json)
Hash identifier:          tKO6gRxwX+ZrBhgG7co04NDDSayxVA6xcO/xp612mFE=
Subject key identifier:   27:D1:ED:EC:2C:BD:4E:0E:CA:8A:34:4E:F2:93:0F:AB:A0:EE:08:D0
Authority key identifier: 4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7
Certificate issuer:       /CN=A9120208/serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
Manifest number:          6E
Signing time:             Tue 23 Dec 2025 05:50:04 +0000
Manifest this update:     Tue 23 Dec 2025 05:50:03 +0000
Manifest next update:     Tue 30 Dec 2025 05:50:03 +0000
Files and hashes:         1: S6E9VJoFZMMeqLIxX84wI7tiiKc.crl (hash: YNcLutTE2X7Q+ePwfJ6okTL9kraEaA2GeWvtPIgtqWU=)
                          2: FB24C32041DC11F091D21255C4F9AE02.roa (hash: YkPIdT5pU6s6PBK/cXBQwdkKPPO1WquYP5q3kmQJuaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl
                          rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120208, serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7
        Validity
            Not Before: Dec 23 05:50:03 2025 GMT
            Not After : Dec 30 05:50:03 2025 GMT
        Subject: CN=694a2d8c-0ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:c6:c5:27:a1:fa:d7:f8:69:df:ef:6f:84:
                    05:5a:ba:cb:c5:5e:77:65:fe:2b:0d:28:24:e2:45:
                    9f:4c:26:5d:1c:9d:b7:f5:0b:8d:70:0f:06:be:1b:
                    9e:09:c3:e3:c8:a3:5d:58:c8:8d:1e:ac:a2:4d:ba:
                    fa:d4:87:cc:18:cc:d7:21:66:2f:9d:4e:94:dc:66:
                    53:95:4a:42:06:6b:35:a8:83:c6:30:f2:44:d8:88:
                    9b:43:38:21:b3:59:e2:94:1a:86:fa:24:76:bb:43:
                    e8:13:b0:b4:c4:44:26:f0:cf:e2:75:27:9e:5d:d1:
                    45:e0:dc:fa:5b:f8:78:dd:4c:45:8e:df:65:d5:4b:
                    9f:2c:fd:9d:72:81:f5:e0:43:7f:eb:0a:48:04:3d:
                    2b:d4:08:59:cd:09:e8:f1:9f:1e:ff:70:c5:1c:67:
                    e4:d0:0f:15:fa:d7:48:6f:7a:e2:b2:e5:f0:6e:be:
                    2c:61:35:47:17:7e:de:b5:53:e3:83:1f:1b:99:d6:
                    47:65:a1:35:8e:1e:d1:42:c7:f4:1d:36:c6:8a:42:
                    7a:0d:52:38:cf:cd:8a:55:99:ee:48:8a:23:38:7e:
                    16:06:02:28:9a:6d:28:a5:0e:2a:81:e0:8c:8b:8a:
                    6d:95:3f:dc:82:7d:db:d1:ad:f8:c8:2a:b3:3c:df:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:ED:EC:2C:BD:4E:0E:CA:8A:34:4E:F2:93:0F:AB:A0:EE:08:D0
            X509v3 Authority Key Identifier:
                keyid:4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:69:96:0d:ee:df:22:ea:8c:f4:9e:21:3a:9d:ec:52:23:bd:
         1b:77:d4:ab:52:6e:6e:fd:24:c2:6b:06:fb:ca:d2:a6:29:d6:
         74:35:ee:ac:71:43:d7:d0:c8:8b:c5:6c:2c:91:2f:7c:87:24:
         aa:4d:59:f5:20:5c:b7:06:da:73:3c:64:0a:28:eb:82:f9:8e:
         33:8f:74:6f:e5:76:a6:a6:72:ef:9f:62:0e:ca:17:89:64:e3:
         36:10:b8:d2:9c:f8:4a:82:1f:9b:9c:1f:9b:88:84:c4:a7:b3:
         c6:4a:ba:64:01:e6:2b:95:81:71:5e:61:94:89:8a:0b:3f:60:
         c3:be:57:f6:08:1f:85:0b:58:b4:c0:ec:f7:da:41:9a:e4:7d:
         8a:f8:9c:28:c3:8b:4c:60:30:95:76:94:89:af:44:ff:5e:83:
         22:cd:25:99:a9:35:e0:7a:8b:e8:a4:20:26:db:99:d0:8e:fa:
         7b:8b:72:44:e0:29:61:1b:c0:51:df:e9:81:30:23:fb:12:e7:
         8b:57:3b:4d:c7:75:8a:c3:de:b7:28:fa:97:cd:c9:4b:9d:c8:
         f7:63:50:9f:37:50:8e:b2:64:9c:3a:11:24:81:8b:c0:1d:64:
         8e:f0:03:92:7d:99:fa:1d:dc:39:74:c0:58:16:f0:6d:b0:2a:
         e4:d0:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:44 2025 by rpki-client