This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
File:                     6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft (raw, json)
Hash identifier:          x4+fhkPRKpjWV4svHwyYu0LuusogUPF/ST9+VbBl3TQ=
Subject key identifier:   B1:FF:2C:B7:51:EA:46:EA:98:F1:32:E7:39:8F:BA:CE:8D:F9:1C:F6
Authority key identifier: EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC
Certificate issuer:       /CN=A91452AC/serialNumber=EA9C8646A2D3FCB373BCA65E289D6448EEA8CDBC
Certificate serial:       07D4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
Manifest number:          07D1
Signing time:             Sat 06 Dec 2025 19:29:08 +0000
Manifest this update:     Sat 06 Dec 2025 19:29:07 +0000
Manifest next update:     Sat 13 Dec 2025 19:29:07 +0000
Files and hashes:         1: 6pyGRqLT_LNzvKZeKJ1kSO6ozbw.crl (hash: sNp2Z9p3lsPf/rXAHC1JIo9EKmDF1Lw4AJO442XydmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC, serialNumber=EA9C8646A2D3FCB373BCA65E289D6448EEA8CDBC
        Validity
            Not Before: Dec  6 19:29:07 2025 GMT
            Not After : Dec 13 19:29:07 2025 GMT
        Subject: CN=69348404-04f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:dd:87:eb:af:1e:e3:25:c5:57:10:52:c9:
                    f6:c6:2d:3f:20:e2:a3:d6:ee:54:c2:cc:51:98:8e:
                    f0:33:84:97:0c:59:3f:40:ec:ec:b1:0b:73:90:e3:
                    dc:63:67:9e:91:7b:dc:0b:5e:78:02:91:e5:d7:df:
                    77:0e:81:6d:f8:92:4f:f0:2d:6a:af:bf:52:23:ca:
                    97:48:e5:b5:13:34:cd:8e:a8:e6:81:88:65:f8:55:
                    49:e2:39:00:84:48:67:2b:e2:a9:d4:d1:cf:ca:15:
                    32:d6:2f:0f:53:1a:ae:8c:5b:97:e3:e8:61:59:07:
                    8a:2b:54:3a:62:2c:78:74:d4:a9:13:1f:23:50:75:
                    6a:49:1a:35:df:3c:1c:01:68:ba:d1:aa:5f:a5:1b:
                    12:5a:33:32:04:b2:54:6a:6a:e2:6b:fb:1d:69:fc:
                    75:b9:5b:f8:91:4c:64:8b:be:a8:3a:46:43:fb:e1:
                    d2:ce:0b:89:43:e6:a5:ba:4c:7f:d9:2a:02:f2:4e:
                    5b:0d:9b:7d:ab:6b:2e:4b:a2:96:6a:3b:97:c2:7e:
                    b1:dc:2d:34:79:4c:3e:8b:93:9b:5b:7a:a7:27:c9:
                    5a:44:48:d4:3d:62:ee:b8:7a:c8:e8:89:8f:df:92:
                    ea:b6:e0:c8:8f:d1:b5:9d:07:fb:01:3c:3c:3c:83:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FF:2C:B7:51:EA:46:EA:98:F1:32:E7:39:8F:BA:CE:8D:F9:1C:F6
            X509v3 Authority Key Identifier:
                keyid:EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:69:37:b6:dd:33:e5:d7:1e:97:cf:f0:5e:61:f9:bc:bc:5a:
         10:96:f6:48:22:01:4d:ed:c5:0d:3d:c3:35:28:17:05:a9:a7:
         0a:a4:1f:c6:21:1d:5f:e1:1a:ed:23:11:50:f4:c4:7d:1f:d2:
         c8:b5:be:48:85:de:ac:a4:ea:36:e0:06:81:6d:96:be:37:8f:
         86:f6:9b:c6:bc:5e:09:19:9e:07:b7:2c:53:f7:99:7e:66:9b:
         6e:26:b0:94:a5:16:af:32:f7:e0:2f:d5:c4:bd:19:93:7c:23:
         c7:5c:c1:48:c0:77:bb:fe:73:65:bf:2d:53:68:f2:16:2e:65:
         eb:00:e0:a6:12:9d:74:dd:e7:80:9f:53:a3:ce:18:6b:30:52:
         f6:ec:db:ad:45:d9:6a:80:26:82:c3:7c:69:2f:97:f6:58:7d:
         4d:c2:52:ae:b7:89:8f:24:55:0d:b9:de:2c:c1:1a:3d:28:6e:
         e7:80:55:a9:15:c3:b8:cb:67:6f:72:d9:b6:70:09:e3:7d:87:
         b5:5c:f0:42:e0:7f:92:48:68:e4:90:c3:d4:d2:7f:5b:37:72:
         bc:08:75:05:a1:d3:09:3f:a5:88:4b:ad:f6:6e:7f:bc:df:57:
         b4:65:05:c6:d7:de:64:39:e4:8d:a6:e5:9c:c1:cf:83:2b:a9:
         d7:49:89:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:03:58 2025 by rpki-client