This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.mft
File:                     6TkkmCUq9F9rGQVhfANrAzlUqeQ.mft (raw, json)
Hash identifier:          mtFEaJKgMUX+YjtvESZYomOplX/r7BtB7560MswxKDY=
Subject key identifier:   1E:C3:92:DF:1B:65:D0:D4:59:1D:64:6C:1E:A3:77:32:D0:D4:E4:8B
Authority key identifier: E9:39:24:98:25:2A:F4:5F:6B:19:05:61:7C:03:6B:03:39:54:A9:E4
Certificate issuer:       /CN=A916CD9F/serialNumber=E9392498252AF45F6B1905617C036B033954A9E4
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6TkkmCUq9F9rGQVhfANrAzlUqeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.mft
Manifest number:          2E
Signing time:             Tue 23 Dec 2025 06:29:22 +0000
Manifest this update:     Tue 23 Dec 2025 06:29:21 +0000
Manifest next update:     Tue 30 Dec 2025 06:29:21 +0000
Files and hashes:         1: 6TkkmCUq9F9rGQVhfANrAzlUqeQ.crl (hash: F7RQHbi/FoTDzN/6jfLbmd00o22jzfDJXJkID9G+Tc0=)
                          2: F7652FA49EA211F0B30F584FC4F9AE02.roa (hash: 8Yk3epwSEcExakweH0s8VVBiEpLZ7vDCqHolSt+/SI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.crl
                          rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6TkkmCUq9F9rGQVhfANrAzlUqeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CD9F, serialNumber=E9392498252AF45F6B1905617C036B033954A9E4
        Validity
            Not Before: Dec 23 06:29:21 2025 GMT
            Not After : Dec 30 06:29:21 2025 GMT
        Subject: CN=694a36c2-52e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:50:1d:7d:80:2a:ac:26:68:22:0c:c9:29:
                    cf:0f:f6:4c:89:50:08:96:35:3a:e4:f6:b1:27:d0:
                    de:ce:a9:84:f1:5c:77:ab:36:97:60:c9:fd:91:47:
                    53:ed:31:23:4b:4e:a2:86:d9:c9:6d:6b:57:89:11:
                    28:9e:1f:50:c8:46:d4:fd:17:f7:38:69:77:1a:be:
                    24:05:8b:f6:32:a8:4f:f5:8a:91:0d:a0:0b:8d:ee:
                    d9:32:fb:fb:8d:f0:98:4e:5d:4c:87:ca:6d:ce:6b:
                    18:ba:fc:b0:3c:6e:bc:e4:36:65:37:de:3b:b2:32:
                    a1:1a:92:2c:57:8b:fc:a0:26:02:bc:4f:2a:a5:9f:
                    eb:67:a9:dd:75:26:9a:08:0b:37:24:7f:c7:0c:df:
                    77:24:61:ba:54:f6:13:16:99:f4:c7:12:10:94:ce:
                    39:13:26:6a:8d:e7:de:be:16:3b:50:f1:87:c9:45:
                    f3:a1:c8:be:7a:38:08:99:bc:fa:43:a8:1a:be:57:
                    23:88:06:22:0d:2b:40:6c:68:dd:83:2f:c4:6a:65:
                    b6:ec:13:0c:4f:8f:60:df:bf:62:07:4c:7e:d1:96:
                    12:dd:3a:1d:2a:16:b9:72:77:8b:1a:a4:97:be:ee:
                    08:7e:c4:9c:0d:8d:c4:f3:2c:5c:00:f0:62:2f:d6:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C3:92:DF:1B:65:D0:D4:59:1D:64:6C:1E:A3:77:32:D0:D4:E4:8B
            X509v3 Authority Key Identifier:
                keyid:E9:39:24:98:25:2A:F4:5F:6B:19:05:61:7C:03:6B:03:39:54:A9:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6TkkmCUq9F9rGQVhfANrAzlUqeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CD9F/BFE70E129EA211F08397B24EC4F9AE02/6TkkmCUq9F9rGQVhfANrAzlUqeQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a6:68:15:bd:3b:26:1d:b5:e4:b7:b7:77:06:08:e7:f4:5c:
         9b:ad:6e:01:2f:65:07:6a:53:09:89:aa:83:80:b7:59:b1:c3:
         1b:b1:0e:fa:6c:26:cb:c0:e2:d9:ae:f6:f8:e9:ce:74:dd:9c:
         30:70:b8:c9:2f:0e:db:7d:d5:22:9d:aa:f2:ad:32:85:d6:ca:
         47:1e:1a:2b:18:68:54:6c:6a:65:5e:7f:2b:74:38:24:a2:93:
         06:2f:b5:24:67:0e:1d:a2:63:2d:54:c0:5e:34:2c:f1:12:c8:
         27:5a:b8:f2:76:17:1f:5e:8f:5b:cd:60:75:e9:d5:2f:df:79:
         12:6d:7b:6c:95:d6:dd:4d:55:e2:4d:09:1e:52:b9:4c:63:9a:
         4f:45:ab:17:95:f9:e0:3f:b9:75:4d:fd:63:aa:4a:39:af:30:
         64:de:60:61:37:c9:bd:8b:b4:a5:cb:bf:1a:50:9e:92:57:e0:
         91:a1:3d:d4:50:a6:43:8c:a6:d7:3b:e6:6e:18:36:c6:08:cc:
         3e:63:65:45:17:1a:69:b2:fc:a8:98:c7:80:be:2b:03:13:23:
         45:40:71:d9:e4:ce:00:e3:e3:c2:a5:28:b3:c4:bd:c8:5e:ec:
         2c:d0:f1:9e:0b:2f:f3:77:33:2e:13:0a:1b:67:98:0b:37:c4:
         b5:c6:13:9b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
Q0Q5RjExMC8GA1UEBRMoRTkzOTI0OTgyNTJBRjQ1RjZCMTkwNTYxN0MwMzZCMDMz
OTU0QTlFNDAeFw0yNTEyMjMwNjI5MjFaFw0yNTEyMzAwNjI5MjFaMBgxFjAUBgNV
BAMMDTY5NGEzNmMyLTUyZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxT1AdfYAqrCZoIgzJKc8P9kyJUAiWNTrk9rEn0N7OqYTxXHerNpdgyf2RR1Pt
MSNLTqKG2clta1eJESieH1DIRtT9F/c4aXcaviQFi/YyqE/1ipENoAuN7tky+/uN
8JhOXUyHym3Oaxi6/LA8brzkNmU33juyMqEakixXi/ygJgK8Tyqln+tnqd11JpoI
Czckf8cM33ckYbpU9hMWmfTHEhCUzjkTJmqN596+FjtQ8YfJRfOhyL56OAiZvPpD
qBq+VyOIBiINK0BsaN2DL8RqZbbsEwxPj2Dfv2IHTH7RlhLdOh0qFrlyd4sapJe+
7gh+xJwNjcTzLFwA8GIv1iXHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHsOS3xtl
0NRZHWRsHqN3MtDU5IswHwYDVR0jBBgwFoAU6TkkmCUq9F9rGQVhfANrAzlUqeQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDRDlGL0JGRTcwRTEyOUVB
MjExRjA4Mzk3QjI0RUM0RjlBRTAyLzZUa2ttQ1VxOUY5ckdRVmhmQU5yQXpsVXFl
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNlRra21DVXE5RjlyR1FWaGZBTnJBemxVcWVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD
RDlGL0JGRTcwRTEyOUVBMjExRjA4Mzk3QjI0RUM0RjlBRTAyLzZUa2ttQ1VxOUY5
ckdRVmhmQU5yQXpsVXFlUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJKmaBW9OyYdteS3t3cGCOf0XJutbgEvZQdqUwmJqoOAt1mxwxuxDvps
JsvA4tmu9vjpznTdnDBwuMkvDtt91SKdqvKtMoXWykceGisYaFRsamVefyt0OCSi
kwYvtSRnDh2iYy1UwF40LPESyCdauPJ2Fx9ej1vNYHXp1S/feRJte2yV1t1NVeJN
CR5SuUxjmk9FqxeV+eA/uXVN/WOqSjmvMGTeYGE3yb2LtKXLvxpQnpJX4JGhPdRQ
pkOMptc75m4YNsYIzD5jZUUXGmmy/KiYx4C+KwMTI0VAcdnkzgDj48KlKLPEvche
7CzQ8Z4LL/N3My4TChtnmAs3xLXGE5s=
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:35 2025 by rpki-client