This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
File:                     06m0znk41yolUFSgwIW_eI6wabA.mft (raw, json)
Hash identifier:          CpJD2fVL+cbg1oycUXJJDSLg0FwxRLf77lKsWjY/Mec=
Subject key identifier:   E9:0D:34:BA:6C:9C:F9:72:B1:18:2D:31:1B:46:9B:CF:D4:E8:78:B9
Authority key identifier: D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0
Certificate issuer:       /CN=A914331D/serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
Certificate serial:       0957
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
Manifest number:          094F
Signing time:             Mon 22 Dec 2025 19:32:57 +0000
Manifest this update:     Mon 22 Dec 2025 19:32:57 +0000
Manifest next update:     Mon 29 Dec 2025 19:32:57 +0000
Files and hashes:         1: 06m0znk41yolUFSgwIW_eI6wabA.crl (hash: S5YS/7d/6f4ATOwfCFDsFjrMIaUZURpVoTxQcFfDolI=)
                          2: 425602A0AD2111EA9510AC0DC4F9AE02.roa (hash: eiGSH0P7OA/wuySnx+L4WnNP4YI49fVfK6qem5HgBnk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl
                          rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391 (0x957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914331D, serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
        Validity
            Not Before: Dec 22 19:32:57 2025 GMT
            Not After : Dec 29 19:32:57 2025 GMT
        Subject: CN=69499ce9-7fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:67:fc:e4:12:79:a1:e4:22:e1:77:78:12:
                    12:02:42:b6:eb:65:ef:29:06:f1:5e:f7:2b:b8:ad:
                    27:13:18:09:b0:10:3d:1d:be:3f:6c:d8:49:34:24:
                    87:85:d9:0d:ac:34:52:69:32:43:ed:7a:31:9e:cf:
                    42:0f:23:52:ba:91:b8:61:11:8a:43:80:8f:05:d6:
                    d4:23:0c:8e:45:13:b6:af:cc:25:91:1b:5b:db:46:
                    9c:14:84:b6:f2:a2:02:a6:af:92:7f:89:57:7b:1f:
                    e5:f8:42:79:ce:83:3c:8f:03:9a:50:df:5a:aa:b9:
                    2e:94:68:c3:cc:0f:95:65:0b:37:5f:3f:7a:04:e3:
                    24:c0:9c:42:c4:00:9c:40:0d:1f:43:e0:1f:c3:6e:
                    70:3a:1e:c0:14:32:c0:05:13:65:6c:c0:da:d7:69:
                    c4:1d:25:24:27:c1:07:02:8d:d2:d9:73:b0:a7:87:
                    b1:e1:67:17:5a:23:d9:ce:94:3c:bd:6e:1f:1d:b3:
                    07:96:e2:c8:75:50:2c:82:10:bb:f0:7e:a3:8e:ef:
                    fc:11:2d:e3:44:34:84:92:e0:03:b2:14:02:43:f6:
                    2e:9e:b4:71:c1:4a:d3:62:06:5c:b5:ae:42:7d:ad:
                    ab:44:3e:51:23:1b:28:76:6f:1e:a6:c1:10:f3:60:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0D:34:BA:6C:9C:F9:72:B1:18:2D:31:1B:46:9B:CF:D4:E8:78:B9
            X509v3 Authority Key Identifier:
                keyid:D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:a5:1b:c6:7e:ce:c4:8f:72:94:f9:81:eb:a4:e2:29:fa:
         54:d8:0f:f1:ef:af:27:b3:d6:59:70:01:c1:c8:2e:76:5a:dc:
         c2:27:2f:d2:03:f7:13:cb:f6:ca:a7:7b:b6:60:fd:d2:e7:86:
         b2:b7:37:60:25:c4:46:22:a7:a4:27:7b:db:69:47:e5:85:fb:
         b7:c3:5d:fd:e4:df:a5:a9:48:a8:a3:89:55:b6:6e:57:99:06:
         49:af:2c:52:23:cc:3c:a5:ad:8e:6d:95:75:7a:bd:c2:16:c0:
         8c:6c:07:41:19:99:c6:a0:dd:bb:02:55:37:56:df:f5:5e:5d:
         df:e6:93:e4:0e:a3:0b:2a:1e:12:cd:d7:e7:d7:25:ef:1b:b4:
         18:15:60:c9:69:7f:a3:ff:62:7b:c9:e1:68:08:3b:a6:69:9a:
         95:32:99:01:1e:11:b3:3a:d6:12:f1:df:2a:a5:f4:46:29:29:
         bd:32:e2:45:13:9c:88:47:68:fa:eb:e6:2f:d6:03:09:c6:42:
         ad:4f:b7:67:4a:9b:39:2c:4b:ff:cb:9c:f7:ce:6d:74:ad:98:
         1a:19:70:5b:e1:ea:3e:47:ca:f3:9e:28:06:74:83:75:bf:88:
         89:70:52:48:70:4c:59:fb:f4:82:97:85:08:6a:d9:34:9e:ed:
         13:fa:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:08 2025 by rpki-client