This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
File:                     6qSDu71coOErPsD25wxbqq40VSs.mft (raw, json)
Hash identifier:          O/BpLKIYliaXtoOF1t2Qy7quzBl7gHeQI1kmOgHM01E=
Subject key identifier:   30:19:0F:D3:79:D8:B7:68:C7:7C:11:20:AC:52:3C:78:6E:63:40:5E
Authority key identifier: EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
Certificate issuer:       /CN=A914BAA2/serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
Manifest number:          A1
Signing time:             Tue 23 Dec 2025 05:25:05 +0000
Manifest this update:     Tue 23 Dec 2025 05:25:05 +0000
Manifest next update:     Tue 30 Dec 2025 05:25:05 +0000
Files and hashes:         1: 6qSDu71coOErPsD25wxbqq40VSs.crl (hash: FuhYs4hz73f+hm3mPNC8OMm1dGmCY0FIvWH+FTdeTXw=)
                          2: 535D1F52069511F090414823C4F9AE02.roa (hash: Z1otMQWN0CbTaPhw5EvbwRe+YB3GZZkedSXo8XkS78Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl
                          rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BAA2, serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
        Validity
            Not Before: Dec 23 05:25:05 2025 GMT
            Not After : Dec 30 05:25:05 2025 GMT
        Subject: CN=694a27b1-ad8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:0e:b2:46:ab:3c:c8:d9:ec:9a:44:46:0f:
                    2a:61:1d:d5:2a:df:a9:60:3a:e2:67:cb:77:8b:75:
                    2e:81:9d:27:67:39:a8:2c:98:ba:b1:e5:38:ad:58:
                    5d:24:b2:ef:22:fb:0c:26:68:a7:a9:46:64:dd:74:
                    7e:21:09:9c:c8:de:2e:e4:d2:ae:76:f0:8e:a7:ca:
                    dd:95:fb:94:fc:64:d4:ff:04:02:87:09:d4:1c:dc:
                    89:24:ef:20:df:24:d8:a4:d1:5c:7f:ed:3a:98:c7:
                    f1:7b:76:7f:db:ee:81:03:26:5d:e1:7e:00:73:bc:
                    27:e5:5b:00:df:e8:74:bf:f1:dc:d5:0a:54:17:e4:
                    fc:4d:b4:72:64:d0:d9:00:01:d8:fc:2a:d1:67:a8:
                    2b:e6:3b:bb:17:c1:9f:7c:0c:25:ff:8e:78:ea:ab:
                    03:eb:48:c6:70:0e:31:7e:03:47:81:50:5e:8f:1d:
                    1a:12:ef:f1:b8:e4:72:0f:a9:9f:c2:8f:77:04:03:
                    6d:f8:5b:04:61:99:63:a4:6a:f3:db:4f:82:d4:90:
                    7a:d3:11:15:38:44:d9:7e:3a:79:58:83:aa:f1:1a:
                    23:cd:e8:f7:72:f2:50:9b:14:d5:c6:ee:2a:11:78:
                    a1:8f:08:cf:bc:1d:59:16:a4:0b:b7:e0:8f:b7:fb:
                    59:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:19:0F:D3:79:D8:B7:68:C7:7C:11:20:AC:52:3C:78:6E:63:40:5E
            X509v3 Authority Key Identifier:
                keyid:EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:41:54:93:bd:ef:9a:17:e6:10:4c:76:ec:b9:7f:e9:11:94:
         63:79:0f:28:ea:5c:be:b9:df:cf:bf:1c:36:d1:28:be:ed:c4:
         91:b3:67:fc:6a:ac:54:ea:de:98:b4:be:73:d9:28:5d:1b:4f:
         d4:d4:c4:b3:a2:48:83:94:c0:50:8b:22:50:c9:59:8b:8d:86:
         a3:77:9d:d6:d1:bc:22:2d:ae:be:0a:e5:66:6f:e0:99:59:5e:
         ec:e3:59:64:47:bd:73:85:85:45:fc:4a:24:eb:48:1a:6a:75:
         29:97:d9:e0:52:e9:58:00:de:2b:4c:0f:11:85:e5:9f:be:16:
         43:af:42:34:2d:67:8a:21:2c:f1:02:80:7c:9a:8d:07:3e:34:
         f3:f2:57:28:ff:ca:1e:ab:88:02:68:71:15:1c:ee:56:e4:5a:
         0b:be:5d:e0:a8:a8:5b:da:cc:8e:1f:a7:ce:e2:4a:a8:bc:dd:
         02:3b:62:ec:14:ec:1c:72:ef:6e:5c:25:b5:28:e6:ad:b9:4e:
         64:2f:e3:ed:51:9e:5f:ce:2a:b1:70:c1:a3:d1:2b:75:6d:a3:
         34:58:22:b4:5a:f0:78:71:fc:58:84:ff:66:60:5e:a2:1b:05:
         b4:dc:2e:b9:c6:56:21:63:4c:47:44:37:c7:43:40:26:af:5e:
         b6:a8:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:47 2025 by rpki-client