This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
File:                     RC6qL6yoXGzvgcRKZaY36GftNTQ.mft (raw, json)
Hash identifier:          ze36DuhxOnaLmGT2fnHoMHvP+RmyD5aGYY0y1zOXv+g=
Subject key identifier:   4C:96:E0:71:C6:4A:80:C8:51:D1:97:DC:26:A8:98:5B:A8:2C:43:88
Authority key identifier: 44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34
Certificate issuer:       /CN=A9145E01/serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
Manifest number:          03
Signing time:             Wed 03 Dec 2025 06:18:23 +0000
Manifest this update:     Wed 03 Dec 2025 06:18:22 +0000
Manifest next update:     Wed 10 Dec 2025 06:18:22 +0000
Files and hashes:         1: RC6qL6yoXGzvgcRKZaY36GftNTQ.crl (hash: LzaJOX61dfviSm04XbIaUDFDZNoZWxTfd2yMfOGV+Lc=)
                          2: 042373B2CF5A11F08A42EF16C4F9AE02.roa (hash: EggkpcVOgI9lqzWLNGUO4SNdA0AExjaPLsB6eR+b1dk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E01, serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534
        Validity
            Not Before: Dec  3 06:18:22 2025 GMT
            Not After : Dec 10 06:18:22 2025 GMT
        Subject: CN=692fd62e-3384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:e6:33:9d:77:3a:92:e2:99:09:55:f1:09:
                    5c:72:17:92:4e:dc:b9:6e:b9:09:1f:68:45:8f:67:
                    17:e3:bd:55:f0:a6:84:81:95:e4:7f:eb:16:b1:b1:
                    e8:7c:e3:69:e0:ea:fd:93:d0:fa:16:68:62:a9:7f:
                    7f:1f:d9:22:e2:d1:ef:d6:68:04:22:a1:4a:bd:ad:
                    41:b2:b1:3a:67:16:ec:08:90:15:1c:30:9f:95:7c:
                    1e:2a:2a:e7:69:74:d6:3e:3e:3a:31:8f:65:b4:ff:
                    4b:48:62:6a:3c:19:7a:ce:1a:03:ce:ca:d7:0a:e7:
                    27:c1:c4:20:db:61:ed:4a:26:e1:17:74:d3:1b:f0:
                    a1:8a:c7:2d:43:a5:02:c0:a2:f9:c8:b8:62:aa:71:
                    ca:28:2c:af:b6:7f:9d:85:d5:3c:8b:88:f6:a5:d7:
                    17:04:bf:4f:d6:d7:8d:ea:16:59:40:a0:66:a7:09:
                    14:a3:99:f3:c9:24:90:d5:21:fe:78:24:be:37:b8:
                    56:5d:a7:5a:a0:73:d5:87:8f:95:f4:96:eb:5b:c3:
                    00:44:38:99:01:d8:5f:fd:69:be:17:6b:11:d8:81:
                    e0:cf:01:36:3c:ab:1f:b2:75:42:38:90:6e:9d:27:
                    66:2c:e9:68:fa:78:0e:92:6e:a3:a9:fa:4c:a9:c0:
                    e8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:96:E0:71:C6:4A:80:C8:51:D1:97:DC:26:A8:98:5B:A8:2C:43:88
            X509v3 Authority Key Identifier:
                keyid:44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:53:c7:82:13:e9:a0:99:c2:f8:cf:97:4e:1b:28:75:80:bd:
         66:f2:85:76:d0:46:80:39:88:2a:87:eb:e7:96:38:46:13:b2:
         f3:ef:a5:e1:eb:02:b2:57:03:f4:ef:0b:84:70:bd:98:01:2c:
         c4:c4:e1:c0:67:78:78:e4:ca:b3:9c:ee:6c:51:e8:25:1a:db:
         bc:d7:ab:f0:3b:53:d1:aa:04:9f:78:0d:d3:06:41:02:fb:23:
         07:66:6a:b7:f1:cf:bc:05:d7:a5:55:5f:aa:4c:4e:6d:06:27:
         d3:d3:c4:a7:59:df:6b:42:0f:99:3a:7e:4b:59:20:22:a0:99:
         1d:bb:76:5e:57:9a:8f:87:ea:98:23:a6:43:e0:3f:f3:a3:83:
         78:93:03:04:b2:6e:e9:63:a7:8c:40:7a:49:12:2c:f3:a2:bf:
         4e:39:85:56:60:d1:0d:d5:e1:5b:fa:18:b3:b7:03:67:b6:51:
         ab:e5:e0:b2:2b:d0:8b:90:64:8a:2f:2c:f1:50:e5:5d:74:5e:
         dc:e1:9b:2e:8f:a3:eb:a8:bf:25:3c:c9:4e:e7:84:de:13:7d:
         28:66:7c:88:0e:d7:f7:16:ae:a4:4e:e2:18:65:2c:8f:42:f0:
         ed:dd:42:37:e9:c3:f1:79:48:3c:38:99:98:0f:8d:75:70:d9:
         c2:5a:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:10 2025 by rpki-client