This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
File:                     9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json)
Hash identifier:          1FxaqovQkMJhb+4+sRereoT/HKj7xhWqisgRX2sc/hQ=
Subject key identifier:   21:CF:F5:C7:70:6F:F6:DB:92:8D:4B:22:52:BA:A5:28:F4:37:86:98
Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
Certificate issuer:       /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
Manifest number:          6F
Signing time:             Tue 23 Dec 2025 05:46:40 +0000
Manifest this update:     Tue 23 Dec 2025 05:46:39 +0000
Manifest next update:     Tue 30 Dec 2025 05:46:39 +0000
Files and hashes:         1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: Q/M4AjExJz0ss1m5lfKs0wZ24DeDaTeALZ7MI3YBuT0=)
                          2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl
                          rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
        Validity
            Not Before: Dec 23 05:46:39 2025 GMT
            Not After : Dec 30 05:46:39 2025 GMT
        Subject: CN=694a2cc0-cef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:23:33:64:1b:78:a0:13:20:67:fb:76:e2:
                    9b:b9:0e:9c:bf:fc:2d:e6:de:57:c6:d4:41:ed:eb:
                    60:7f:0c:20:3c:e4:63:f3:c6:fb:9d:17:02:3b:3e:
                    f8:42:a8:7d:18:37:ff:30:e4:c2:28:b3:5d:67:26:
                    7b:6f:93:09:88:5b:af:f5:f7:89:50:ec:f0:a4:04:
                    ff:c9:28:3d:d9:4d:6e:46:48:a9:95:da:84:58:92:
                    05:e3:d5:d7:db:81:4c:9c:2d:e4:91:7b:26:bb:32:
                    93:b7:81:5d:ce:df:02:3c:55:26:85:c2:6f:52:2e:
                    3c:24:d1:9e:29:25:ad:2a:65:e9:46:e4:ff:d5:65:
                    18:24:80:2e:63:ce:f3:96:96:68:25:2f:5e:8f:5a:
                    88:1f:e1:82:58:b6:3d:6e:12:5e:d8:40:df:e2:08:
                    06:d4:6d:90:d5:6c:78:69:e3:21:3c:79:bb:fb:4a:
                    11:ba:76:0a:2a:cb:f4:fd:b7:75:28:70:e0:ec:f5:
                    4d:61:67:0b:fe:63:c1:22:54:ba:4a:dc:9e:80:62:
                    ab:9e:1e:18:a1:af:84:60:39:3f:c3:0f:34:50:51:
                    64:f6:db:0b:b4:55:6f:a6:9c:dd:f6:54:d0:98:39:
                    e2:df:22:da:4b:b1:6e:cb:27:d3:82:a5:65:02:b3:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CF:F5:C7:70:6F:F6:DB:92:8D:4B:22:52:BA:A5:28:F4:37:86:98
            X509v3 Authority Key Identifier:
                keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b3:c5:e4:5c:6b:75:38:91:d1:04:f7:1a:a4:68:c1:d7:3c:
         1b:f9:6d:09:b1:0d:ca:ee:09:71:48:46:7f:d8:16:81:cf:8e:
         67:d0:93:06:9a:f9:5b:1a:18:b1:58:b0:c0:56:6a:55:ee:86:
         8b:32:4a:ea:20:69:3a:27:a5:0c:2f:6e:0c:bc:27:90:27:39:
         27:d0:0a:dd:60:bf:95:77:a9:50:33:a6:55:34:a1:bd:ba:27:
         57:72:e8:64:4f:37:bf:5b:79:f1:37:20:71:5a:c6:97:a9:e6:
         c1:32:dc:b9:61:5d:5c:e0:0c:0e:c9:17:b4:47:d6:14:52:7e:
         7e:06:97:cc:06:79:92:c3:fc:29:4f:93:99:7b:79:d3:d3:42:
         92:f9:ac:8b:3a:3e:e8:c1:58:93:bd:9a:6d:27:19:05:a4:ea:
         aa:95:3a:18:a0:88:c0:63:95:86:76:c2:69:3f:b0:1e:9f:c9:
         96:49:89:b7:d5:f3:28:9a:28:0d:a7:10:d9:71:d7:19:91:2d:
         a4:b7:9b:ee:53:88:ac:37:ee:4b:b9:62:24:21:ee:c6:69:e9:
         8d:92:a5:61:e5:4d:56:41:0c:57:bc:e7:e6:8b:5c:27:d8:c2:
         ee:79:7c:44:2e:15:0b:8e:4e:8f:2b:22:7c:9b:be:8d:4e:7d:
         52:66:29:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:31 2025 by rpki-client