This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
File:                     6YYS7upK5w0ftbZSS5adR0Lc6BA.mft (raw, json)
Hash identifier:          sFtKNk1wORKKHwO4lzytqtDiSXfYwDjC3fH+q3w0mDw=
Subject key identifier:   26:E6:A2:86:7F:69:F1:A8:87:41:B2:78:BC:F5:38:E8:E3:D2:00:37
Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
Certificate issuer:       /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
Manifest number:          01C6
Signing time:             Tue 23 Dec 2025 02:01:28 +0000
Manifest this update:     Tue 23 Dec 2025 02:01:28 +0000
Manifest next update:     Tue 30 Dec 2025 02:01:28 +0000
Files and hashes:         1: 6YYS7upK5w0ftbZSS5adR0Lc6BA.crl (hash: aa3kY6TD3e6rxKWYbZl3JMYyy6StL1/nK+LttKCx8p8=)
                          2: E58351049F2011EE8D92FF5EC4F9AE02.roa (hash: pE9Ctw9QKRS8QgMh/STn9x6A8pM1YmpBJFnciqO1iE4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl
                          rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DB99, serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
        Validity
            Not Before: Dec 23 02:01:28 2025 GMT
            Not After : Dec 30 02:01:28 2025 GMT
        Subject: CN=6949f7f8-9f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:41:e0:f8:31:6a:71:1e:b2:a6:fa:95:e9:
                    fd:10:46:a9:9f:47:30:db:43:44:17:d6:75:07:5e:
                    ad:60:ed:4f:96:35:8b:12:84:b9:97:66:db:47:7f:
                    b2:e5:40:c7:64:f7:80:4b:36:ab:7b:97:87:c6:86:
                    11:a7:85:14:86:e6:d6:54:36:64:9b:81:35:36:09:
                    13:39:da:83:ef:36:63:ef:f7:fa:2d:f1:95:33:ac:
                    5c:38:3f:fc:e4:a5:47:d6:4a:38:db:c9:ab:e7:85:
                    e6:c5:98:fe:68:7e:a3:a2:a8:55:bb:b1:15:b3:8c:
                    7f:89:84:9b:65:34:8d:22:5d:a4:29:ec:3a:c1:39:
                    bd:97:85:28:ce:9d:23:ba:c3:b4:bc:c2:5c:35:1c:
                    9d:d9:de:40:fd:1c:58:89:8c:3d:c7:0a:26:72:f8:
                    77:9c:0e:0c:6f:e7:4c:51:08:d1:79:a6:80:08:ec:
                    7c:be:91:2d:72:6a:7c:98:c6:21:e5:84:e2:57:34:
                    ee:67:a7:a2:50:c1:50:64:a9:f7:93:54:9a:ee:0e:
                    09:ff:fe:56:25:3a:55:86:6b:77:7a:ff:f8:10:13:
                    05:f3:7a:30:0d:ed:44:5e:f6:17:69:5a:18:6d:9f:
                    1a:a4:bf:cd:a8:2f:d5:bc:4b:b9:ad:31:7e:80:3e:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E6:A2:86:7F:69:F1:A8:87:41:B2:78:BC:F5:38:E8:E3:D2:00:37
            X509v3 Authority Key Identifier:
                keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3a:15:3f:3f:7e:a1:2d:9c:58:3e:b8:2a:61:01:7e:4a:8f:
         b4:03:9a:2a:97:b1:62:64:47:77:83:98:8b:5b:5c:05:2f:23:
         2d:73:c7:de:1a:8b:bd:80:59:04:d9:58:91:31:bf:ef:59:5e:
         19:e8:b2:9b:13:cd:60:ca:26:40:f4:0b:de:9f:e0:8d:1e:4a:
         b3:4e:a4:97:48:5b:8b:fa:db:20:02:eb:91:c1:2f:71:56:ad:
         ad:31:53:23:5a:13:8a:98:b4:46:d0:6b:84:84:98:a8:aa:ff:
         78:f1:6f:d1:b9:01:52:b0:72:2e:e3:b4:97:0f:99:f8:18:56:
         be:9c:14:f7:9a:5f:be:72:41:b6:7e:2a:c1:c4:8e:90:d1:88:
         87:43:5d:1d:3c:b8:ee:ad:28:62:95:56:5d:db:45:44:67:9b:
         c0:00:22:80:30:d6:e8:04:ff:37:56:0a:ad:f2:d2:58:49:30:
         07:c6:eb:72:9a:b3:41:ca:34:63:47:e7:87:a1:7e:52:99:6c:
         e5:ea:4b:d6:32:d1:f0:17:d0:7e:29:cd:13:b7:c2:91:3b:28:
         41:81:dd:f0:12:46:69:b8:3c:df:fb:49:07:fa:8e:1e:a8:e0:
         33:f1:d2:0b:58:42:53:7e:e1:03:a8:08:6c:ac:24:ae:c2:c4:
         c6:2b:7a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:22:29 2025 by rpki-client