This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
File:                     k6TJbWKYFprgVdTqJmgrEHL7lQI.mft (raw, json)
Hash identifier:          ZBeyc6/ZBWTg4LotITVDjKIxAUHiVZ4ltjxafTxr/BI=
Subject key identifier:   87:0F:63:C6:8A:9D:53:35:D9:8A:E7:E1:B4:93:BB:3B:73:8C:5F:89
Authority key identifier: 93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02
Certificate issuer:       /CN=A913F13A/serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502
Certificate serial:       0C91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
Manifest number:          0C88
Signing time:             Fri 12 Dec 2025 18:10:56 +0000
Manifest this update:     Fri 12 Dec 2025 18:10:55 +0000
Manifest next update:     Fri 19 Dec 2025 18:10:55 +0000
Files and hashes:         1: k6TJbWKYFprgVdTqJmgrEHL7lQI.crl (hash: LIBOBA/k7j007MxPlSL+/UbvK63ngNU0HnJ6jIlvp+o=)
                          2: EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa (hash: VFDvNQ3DTdQ4HGioihxyxHaqz473S/vMVmDMPnquVSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl
                          rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 18:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3217 (0xc91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F13A, serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502
        Validity
            Not Before: Dec 12 18:10:55 2025 GMT
            Not After : Dec 19 18:10:55 2025 GMT
        Subject: CN=693c5aaf-6db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:14:20:39:e3:26:91:e1:0b:61:4a:b2:69:15:
                    af:19:60:b1:35:99:57:b8:74:08:15:e1:a6:f4:58:
                    a0:14:85:75:bf:99:e7:f5:98:7f:e7:15:f1:82:bd:
                    3b:b3:ef:35:e0:dd:29:e9:33:90:4d:16:51:8d:58:
                    2c:ab:33:e9:d0:d4:47:07:76:34:a9:94:4d:f5:0c:
                    eb:46:9a:ba:a3:81:c7:1b:ae:3b:e1:86:eb:db:23:
                    dd:59:90:f8:bd:b5:79:76:2f:6f:42:66:39:65:9f:
                    43:3b:5f:7d:69:85:c5:2b:dd:ee:8a:40:c8:d2:09:
                    76:ae:fe:81:c8:81:e4:20:31:76:35:c6:10:0e:36:
                    c4:24:4d:49:33:93:d3:28:73:12:b6:e2:0f:0e:2a:
                    4c:e0:a6:36:79:c0:51:21:d8:75:ea:de:12:34:80:
                    a5:58:33:15:eb:8b:81:3e:8f:e5:c8:16:c7:52:d0:
                    b0:b0:fe:97:f1:72:1a:29:d3:df:20:ee:ff:1e:e1:
                    e8:ae:2b:25:75:2c:ba:03:6d:4f:fe:09:99:d9:ae:
                    94:f3:af:a8:4d:e4:2a:60:af:24:6f:e5:05:ef:e8:
                    84:60:de:a6:58:26:14:e3:c9:ba:56:52:e9:9f:aa:
                    2d:b3:51:a7:a7:de:4f:27:56:99:bf:53:76:a3:90:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0F:63:C6:8A:9D:53:35:D9:8A:E7:E1:B4:93:BB:3B:73:8C:5F:89
            X509v3 Authority Key Identifier:
                keyid:93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:57:52:06:f4:f5:3a:3b:bf:09:07:8a:c0:37:96:29:cc:
         51:8b:40:8b:36:8e:cb:b1:a2:15:8f:dd:b3:4f:3c:d8:4e:36:
         23:24:8f:6e:71:0d:02:74:18:6e:eb:61:0f:cf:fd:f5:85:85:
         f9:7a:5e:b1:db:df:e5:78:1f:a6:cd:06:40:aa:40:3a:89:bf:
         0e:4f:e2:e9:68:61:95:bb:62:78:3e:18:14:d2:4b:b3:a5:b4:
         c1:b6:37:4b:a3:fe:39:83:3d:9d:6b:0f:da:c6:eb:81:73:6f:
         60:82:0b:e5:b3:74:c8:f1:47:4e:a8:ca:b1:b4:e6:92:f5:86:
         73:a0:86:88:73:67:52:75:ae:be:fa:95:d4:bd:f8:75:51:3c:
         ca:5e:95:4f:af:d4:02:07:ff:a7:18:86:9e:5d:8c:a4:35:43:
         c1:42:96:a3:3c:fb:4d:5b:66:63:c2:66:ff:03:4c:00:99:e0:
         05:57:61:55:9d:bb:2e:a9:dc:c2:9a:90:62:e0:1a:d2:4f:0e:
         cc:7c:b7:5b:69:6f:3a:61:42:d5:11:8c:8e:e2:a4:0a:8e:a2:
         33:38:2e:db:3f:20:de:2d:e0:85:09:c6:3e:e5:61:53:6f:9e:
         53:f0:b6:87:6d:a7:c0:55:d5:db:e0:bf:95:ab:13:f3:33:cd:
         58:cb:eb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:06:36 2025 by rpki-client