This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
File:                     6mA98ryp7Vu3vSDB9LxR15fApj8.mft (raw, json)
Hash identifier:          CAfIJ9UTVsCZeWFqVyRb9PuoezyL1OEqCO33M1YwMTA=
Subject key identifier:   FC:D0:86:3E:39:19:2E:03:F3:5A:A1:98:10:48:9A:DC:C9:FF:FB:71
Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
Certificate issuer:       /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
Manifest number:          5F
Signing time:             Tue 23 Dec 2025 05:57:54 +0000
Manifest this update:     Tue 23 Dec 2025 05:57:54 +0000
Manifest next update:     Tue 30 Dec 2025 05:57:54 +0000
Files and hashes:         1: 6mA98ryp7Vu3vSDB9LxR15fApj8.crl (hash: MJTk6G38dLoN8/RNjnbVZp7IY6rAe+N7PenENEFsCPE=)
                          2: C2A46ED64FFD11F085A32C7CC4F9AE02.roa (hash: kAJy+kbDfHSxGirPMu77eyrxHf+CDgBjh/BH4GL9KVs=)
                          3: 554EE88487D911F08B837C49C4F9AE02.roa (hash: mrqENyuiKG5xVgDdo7UrrcMh5yOfyP2Su4rVIqkeeYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
                          rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
        Validity
            Not Before: Dec 23 05:57:54 2025 GMT
            Not After : Dec 30 05:57:54 2025 GMT
        Subject: CN=694a2f62-887e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:81:8a:c8:c7:ff:96:d4:5b:3b:9b:96:03:
                    fe:4a:2b:a8:e4:8d:df:e1:9c:f8:9c:7a:10:3c:17:
                    d2:74:9e:19:20:51:00:eb:3c:ca:5a:ac:a7:7a:b3:
                    4e:62:ed:a8:11:3e:b6:70:24:76:f7:6e:3c:1c:06:
                    21:a3:52:c3:a5:c3:73:79:63:fa:a4:7a:65:61:c9:
                    dc:25:a7:c5:46:f5:ae:f1:ab:3f:15:9c:6a:08:d8:
                    f9:a8:78:e2:61:0a:b7:04:46:0e:f1:ff:70:cd:ca:
                    3a:5c:7e:31:a6:df:ec:97:c3:d2:be:23:5c:2f:e8:
                    f5:8e:0f:90:1e:25:30:52:00:ab:44:0f:86:7f:86:
                    09:d9:e8:f7:57:ca:df:a6:12:90:80:95:64:11:e6:
                    84:ed:1b:33:0a:45:1b:2c:19:27:c8:89:d4:fa:d7:
                    7f:97:09:56:a0:f0:ab:5d:f6:78:43:f3:75:e3:8e:
                    66:c8:f0:6b:d8:60:2b:d0:12:f9:14:f3:a5:0b:2c:
                    43:6e:f2:31:d1:06:23:97:36:99:6e:12:d8:f8:4c:
                    67:77:d6:01:9f:07:bc:a4:1f:35:03:a8:c3:c0:f4:
                    02:99:19:4f:26:f1:af:31:9a:7d:c9:9e:80:be:7c:
                    06:f5:d5:01:cf:6f:96:b0:d7:3a:d5:88:f8:08:a6:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D0:86:3E:39:19:2E:03:F3:5A:A1:98:10:48:9A:DC:C9:FF:FB:71
            X509v3 Authority Key Identifier:
                keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:03:bd:f9:58:f8:8d:d4:36:94:ad:fc:64:b7:b1:00:a9:d9:
         26:ac:4b:18:c7:13:eb:0b:04:fe:8c:04:f3:a3:86:cb:68:57:
         b4:71:3e:fe:56:af:a4:fa:e2:76:81:3c:48:81:ef:1b:11:4b:
         ca:2d:7f:47:3a:7d:a7:40:a8:12:49:33:43:10:82:8f:a6:52:
         30:fe:89:0d:d7:1b:71:c5:73:ea:61:d8:64:5b:a5:32:db:57:
         08:f7:5a:ec:8b:bc:98:2d:0d:4a:65:9d:16:eb:f6:94:b7:3c:
         16:11:ec:3d:12:39:11:f5:d6:ac:8f:42:51:1d:81:b9:6b:1e:
         e0:77:04:66:f1:44:47:54:62:10:8b:6b:19:6c:56:38:82:8b:
         88:a3:0d:ef:e7:e3:10:1f:e9:c4:cb:68:3c:ca:7a:08:eb:27:
         1b:9f:6f:74:8a:cb:ed:c5:3c:ef:ed:de:a6:f6:55:7f:32:a5:
         ad:da:45:ca:fb:6a:a8:15:96:10:b8:bb:8c:c8:f1:82:89:7a:
         9f:7b:29:e2:81:6a:c4:49:fb:3d:73:07:ac:13:a0:ce:e4:da:
         3b:9f:0d:2c:34:f2:10:e3:4e:0f:80:d3:ce:24:c6:be:b0:51:
         74:ae:af:9f:d6:b2:50:dd:0b:40:e2:66:18:1e:ff:42:fb:a8:
         69:05:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:20:35 2025 by rpki-client