This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
File:                     6osEPoaPdVc7zEVArUlUEC3JIrg.mft (raw, json)
Hash identifier:          ax+3zqCTEYC60rvcC+2hFkW8iQ2v6ER0LYRdrE36Y+k=
Subject key identifier:   A7:6C:18:E5:4E:4F:D4:1B:48:8C:7E:01:D5:26:62:36:CC:CC:18:9D
Authority key identifier: EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8
Certificate issuer:       /CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
Manifest number:          0135
Signing time:             Tue 23 Dec 2025 03:32:36 +0000
Manifest this update:     Tue 23 Dec 2025 03:32:36 +0000
Manifest next update:     Tue 30 Dec 2025 03:32:36 +0000
Files and hashes:         1: 6osEPoaPdVc7zEVArUlUEC3JIrg.crl (hash: NM+ihzHdeXwuWnV7+xi8UDV9dSSrNHjwoEs6/ceeczI=)
                          2: 6EF22D0A07C411EF8A38A486C4F9AE02.roa (hash: 8prECIabYnqUfREr8EBJH6HiMmcVX47yz+EPVyLkbdw=)
                          3: 4F038F1007C511EFB3AD2E14C4F9AE02.roa (hash: uG56xTy1rWS0BULY/7uSQn3T7UadwVmMs3Ye+KVukjA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl
                          rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165772, serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8
        Validity
            Not Before: Dec 23 03:32:36 2025 GMT
            Not After : Dec 30 03:32:36 2025 GMT
        Subject: CN=694a0d54-337f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:82:15:35:58:c2:6c:39:a6:b2:37:48:16:
                    d0:07:f3:5d:6a:31:91:8a:6a:0c:03:8e:43:56:ef:
                    cc:31:83:34:f2:30:d1:7d:d4:96:62:f7:d5:ba:f9:
                    d9:34:47:b4:35:f7:6c:ac:00:c7:19:90:68:cb:4a:
                    3e:71:b7:b3:06:6f:07:20:7f:2e:f6:2a:de:ff:7a:
                    11:98:b1:4e:41:24:3f:79:8f:c8:bc:a4:65:d9:8f:
                    c5:50:b1:19:de:53:23:66:17:c9:89:e1:92:b7:44:
                    49:9c:ce:93:6b:3b:f9:36:75:15:16:33:57:b2:45:
                    ed:0e:83:8f:d7:64:90:03:fe:77:72:17:45:5e:a0:
                    a0:d9:21:79:d4:dc:b9:e6:e1:99:f5:97:c8:07:3f:
                    58:0e:81:0f:bd:c6:b6:1e:e5:d8:e6:94:23:60:9f:
                    0b:6c:3c:ac:ab:31:d3:df:02:d1:4e:9e:fc:52:79:
                    e9:28:d0:40:cb:1a:fa:6e:35:a8:7c:5a:a9:ea:69:
                    77:9e:c1:9b:b0:c8:58:d9:4c:ef:04:43:18:2f:04:
                    47:b2:22:3b:0e:86:22:5b:68:df:f7:c9:41:61:ba:
                    39:64:98:21:a4:83:c5:51:a1:5c:0b:8b:88:65:24:
                    d8:05:0b:3b:ae:67:75:a8:d2:77:ee:32:19:58:29:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6C:18:E5:4E:4F:D4:1B:48:8C:7E:01:D5:26:62:36:CC:CC:18:9D
            X509v3 Authority Key Identifier:
                keyid:EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ac:64:ff:1c:f1:7c:22:8a:08:56:69:e5:ad:bb:00:aa:90:
         ff:b9:8a:6f:f0:c8:37:5f:1c:82:6d:bd:10:cc:31:16:22:4d:
         e5:9c:c0:8b:cc:14:2e:69:6b:08:54:bd:ed:85:9e:3c:66:00:
         bc:45:47:7f:1e:ca:1a:a6:b5:2b:6d:fd:8f:62:8e:f9:27:d3:
         a4:4a:86:31:95:03:fe:13:f1:37:be:63:68:e1:46:45:04:13:
         07:39:2f:3a:0a:f5:b5:33:33:01:c1:19:eb:5e:99:89:0f:cd:
         ba:b7:33:fa:74:74:f0:6d:94:3a:7b:cf:46:03:5b:5f:de:d0:
         ff:bd:68:bd:6e:ea:49:22:44:6b:95:99:cf:b7:6e:a0:27:d3:
         58:03:41:96:cf:e4:b2:93:4f:23:fa:c8:1d:d7:fd:39:49:c1:
         3a:0b:90:91:7a:7c:b2:81:ef:fb:6b:67:b9:ac:d1:c0:eb:83:
         40:b7:b3:fb:08:73:0e:df:91:45:b2:d2:2a:b6:d6:81:a9:67:
         13:a0:0c:55:6d:3f:44:e3:e8:ce:01:10:54:86:95:46:b4:40:
         ae:1a:91:dd:17:e8:86:26:53:bb:d5:f8:cf:0b:e5:52:c4:4a:
         5e:15:af:f1:f4:12:57:b3:c1:8c:08:8b:1b:66:ad:f9:f7:d4:
         38:4f:64:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU3NzIxMTAvBgNVBAUTKEVBOEIwNDNFODY4Rjc1NTczQkNDNDU0MEFENDk1NDEw
MkRDOTIyQjgwHhcNMjUxMjIzMDMzMjM2WhcNMjUxMjMwMDMzMjM2WjAYMRYwFAYD
VQQDDA02OTRhMGQ1NC0zMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArYqCFTVYwmw5prI3SBbQB/NdajGRimoMA45DVu/MMYM08jDRfdSWYvfVuvnZ
NEe0NfdsrADHGZBoy0o+cbezBm8HIH8u9ire/3oRmLFOQSQ/eY/IvKRl2Y/FULEZ
3lMjZhfJieGSt0RJnM6Tazv5NnUVFjNXskXtDoOP12SQA/53chdFXqCg2SF51Ny5
5uGZ9ZfIBz9YDoEPvca2HuXY5pQjYJ8LbDysqzHT3wLRTp78UnnpKNBAyxr6bjWo
fFqp6ml3nsGbsMhY2UzvBEMYLwRHsiI7DoYiW2jf98lBYbo5ZJghpIPFUaFcC4uI
ZSTYBQs7rmd1qNJ37jIZWCmuzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdsGOVO
T9QbSIx+AdUmYjbMzBidMB8GA1UdIwQYMBaAFOqLBD6Gj3VXO8xFQK1JVBAtySK4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTc3Mi8wNEJEMUE2QzA3
QzQxMUVGODUyRENDN0RDNEY5QUUwMi82b3NFUG9hUGRWYzd6RVZBclVsVUVDM0pJ
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZvc0VQb2FQZFZjN3pFVkFyVWxVRUMzSklyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTc3Mi8wNEJEMUE2QzA3QzQxMUVGODUyRENDN0RDNEY5QUUwMi82b3NFUG9hUGRW
Yzd6RVZBclVsVUVDM0pJcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByrGT/HPF8IooIVmnlrbsAqpD/uYpv8Mg3XxyCbb0QzDEWIk3lnMCL
zBQuaWsIVL3thZ48ZgC8RUd/HsoaprUrbf2PYo75J9OkSoYxlQP+E/E3vmNo4UZF
BBMHOS86CvW1MzMBwRnrXpmJD826tzP6dHTwbZQ6e89GA1tf3tD/vWi9bupJIkRr
lZnPt26gJ9NYA0GWz+Syk08j+sgd1/05ScE6C5CRenyyge/7a2e5rNHA64NAt7P7
CHMO35FFstIqttaBqWcToAxVbT9E4+jOARBUhpVGtECuGpHdF+iGJlO71fjPC+VS
xEpeFa/x9BJXs8GMCIsbZq3599Q4T2QL
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:09 2025 by rpki-client