This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
File:                     6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json)
Hash identifier:          gg1Ae9HOsWPZmK2irij7mVX+fSDr8NRFfnOfp9mydbY=
Subject key identifier:   15:E4:07:7C:01:F2:36:38:52:AB:3C:97:95:A4:65:95:24:87:F3:C7
Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
Certificate issuer:       /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
Certificate serial:       1B73
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
Manifest number:          1B70
Signing time:             Sat 06 Dec 2025 15:56:22 +0000
Manifest this update:     Sat 06 Dec 2025 15:56:22 +0000
Manifest next update:     Sat 13 Dec 2025 15:56:22 +0000
Files and hashes:         1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: tqe8sHVB2xj6B9zlw9xl4cOj/9zkVhE4O3rSQqo7ebk=)
                          2: D810AAAAB60B11EFB476C022C4F9AE02.roa (hash: ZIpokzPmwozHU6uV0tGHaoR1jCRM+SOLqInPTkiG2tU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7027 (0x1b73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
        Validity
            Not Before: Dec  6 15:56:22 2025 GMT
            Not After : Dec 13 15:56:22 2025 GMT
        Subject: CN=69345226-5be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:15:f5:b3:ec:5b:75:b8:4c:ef:6c:af:51:
                    b2:50:02:c4:09:c2:cd:4d:4f:98:a8:46:c4:82:aa:
                    40:99:1b:67:f5:f2:f6:1d:d7:99:fc:33:e1:0f:a8:
                    4a:54:6c:a8:97:86:45:7e:6b:79:5c:ae:ac:9d:7a:
                    fa:c3:aa:0d:97:a5:61:e0:d8:20:8b:8e:7d:d8:f7:
                    2f:83:1c:1e:23:22:6b:5a:80:75:5a:5a:87:66:3f:
                    4e:10:d4:2b:3c:42:29:a0:4f:76:71:84:e8:0c:2c:
                    01:d2:48:c4:23:0b:9a:f2:38:48:66:f6:98:c6:a0:
                    7f:c4:a1:04:35:e0:80:60:2f:92:8f:a6:68:af:15:
                    ca:2e:86:7a:86:13:45:ca:eb:7f:69:16:f0:bf:ce:
                    0a:ba:34:74:bd:96:68:d3:4a:19:13:d0:22:9f:58:
                    5d:07:43:87:00:99:40:d2:52:dc:a8:09:6b:22:2c:
                    84:d9:9f:97:e9:9f:49:e9:5a:0e:46:7c:3c:05:29:
                    4e:ca:1d:dd:92:d9:2e:3f:89:d5:8e:23:51:c4:99:
                    7e:11:63:38:db:f9:25:5f:45:d5:c3:6a:2c:0f:0f:
                    9e:4a:b0:f2:7c:ed:f1:64:be:4a:03:26:bd:1b:58:
                    fb:98:d2:cb:ad:0c:71:c9:bd:5e:c4:e4:bd:0e:d6:
                    cb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E4:07:7C:01:F2:36:38:52:AB:3C:97:95:A4:65:95:24:87:F3:C7
            X509v3 Authority Key Identifier:
                keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:8e:af:df:f0:78:31:00:cd:ba:cc:b1:96:db:06:ef:e4:66:
         b2:b6:24:64:a1:a5:f9:77:99:35:fe:e9:02:77:4f:b6:20:f5:
         14:18:3e:95:d9:bb:4e:f1:d9:d8:28:9e:f6:ea:73:a8:e2:41:
         a5:cb:b8:5c:44:55:0e:b2:9e:92:2f:86:6c:f9:28:18:15:2b:
         d9:93:3b:a7:37:1c:27:c6:00:dc:dc:58:3a:ee:7a:3b:03:b1:
         e8:a3:6a:b7:a2:93:92:8c:d8:c1:6b:bb:4c:bc:53:cc:db:03:
         47:f6:7b:e6:88:7b:dd:b5:c7:fb:d7:e7:a8:6a:85:86:03:9b:
         4c:ff:c0:b8:f8:5e:ff:db:ee:b8:76:b1:44:c9:d6:17:21:24:
         ae:57:a4:1e:b6:ae:54:94:66:fd:77:7c:ae:36:14:ea:62:5d:
         73:87:d5:b4:b5:15:f8:6e:63:4b:27:e0:8d:a7:7f:9e:66:be:
         a0:f0:06:e8:06:0e:f9:47:4a:40:19:a0:42:1e:17:f2:49:ea:
         64:19:9b:8f:a2:7f:e7:0f:29:20:61:64:9e:b1:c2:d9:e8:03:
         37:08:d5:87:50:75:2c:3e:ef:81:f7:17:df:8a:99:39:06:1d:
         1a:cd:9a:49:d1:6c:dc:62:5d:52:2c:ac:62:19:c6:c5:63:c4:
         47:77:2d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:30 2025 by rpki-client