This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File:                     6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier:          LXESfYYLGffGQ932TbCovPm3Brk6ScESkFnulcI0tmU=
Subject key identifier:   AC:06:F2:08:5A:40:78:10:12:42:8F:67:95:14:3E:DE:BB:E2:5C:03
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer:       /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial:       0D63
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number:          0D58
Signing time:             Wed 10 Dec 2025 17:20:54 +0000
Manifest this update:     Wed 10 Dec 2025 17:20:54 +0000
Manifest next update:     Wed 17 Dec 2025 17:20:54 +0000
Files and hashes:         1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: prBibkWpjIGTOBteXID75PtHFqMklqEWdefyW6T6sZs=)
                          2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 17:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3427 (0xd63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
        Validity
            Not Before: Dec 10 17:20:54 2025 GMT
            Not After : Dec 17 17:20:54 2025 GMT
        Subject: CN=6939abf6-5599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c0:43:e4:38:a3:02:5e:15:71:ab:9a:08:e8:
                    9a:8d:c8:cd:4c:3a:8c:5d:20:16:26:e4:c3:1c:b9:
                    fd:d1:c4:89:11:a3:8c:50:fe:ec:07:c3:c1:36:eb:
                    c9:0a:31:27:15:41:6b:b8:aa:12:d4:cd:67:8d:22:
                    3b:2d:59:d6:14:94:e7:a8:4c:66:59:06:79:e9:61:
                    99:a0:88:20:9c:c0:d8:d4:94:ad:a9:59:5d:7f:4a:
                    e7:6e:13:a0:b3:17:b2:25:0c:cc:42:92:92:8a:0b:
                    62:1b:5a:18:99:1d:bc:f5:a6:b3:f5:b5:8c:9e:9e:
                    0f:ae:b4:c5:a1:a5:1f:89:e5:8c:46:70:7f:df:78:
                    6f:13:49:c4:57:c5:3d:c7:85:6a:d5:4e:49:9f:44:
                    8f:2b:27:8d:04:a6:ae:d8:78:0a:75:c6:9f:0d:aa:
                    5f:e2:fc:58:25:0a:e7:cf:55:a5:81:fa:aa:9e:6a:
                    e0:cb:dd:ca:cf:cf:f2:14:93:a8:7d:f5:f1:19:6f:
                    b2:63:64:7d:a2:5d:10:4e:7f:74:43:0c:de:c5:88:
                    22:e7:e9:25:22:fa:e1:a3:87:d5:c7:31:08:1a:59:
                    36:ce:6f:eb:d1:98:a5:25:e1:fa:bc:d7:7f:ed:80:
                    5c:47:fa:d2:e6:84:f3:05:b4:c1:c4:12:28:cb:a4:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:06:F2:08:5A:40:78:10:12:42:8F:67:95:14:3E:DE:BB:E2:5C:03
            X509v3 Authority Key Identifier:
                keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f1:ab:3c:ed:f4:c4:70:cb:bf:a9:5e:c3:e4:59:98:bb:b5:
         da:16:64:54:18:43:b8:f1:c0:af:29:2b:78:31:d7:d1:60:6d:
         f4:1b:e4:2c:17:dd:19:7e:55:14:b1:2a:ad:82:0c:2b:9d:e7:
         88:fd:2c:84:1a:59:3f:a8:37:a4:24:45:a2:3a:95:61:1d:ca:
         fc:7f:98:45:75:c0:a1:4d:a3:d0:1e:4a:7d:e7:72:0e:2a:15:
         8e:f3:cb:cf:af:fa:d5:90:9c:4f:07:79:0b:a1:5f:1d:e7:7d:
         5c:ba:92:bb:be:64:5c:43:cf:bb:c0:09:68:00:e7:d2:11:4a:
         21:9e:1e:f7:40:e7:10:06:ed:3c:ac:a7:3f:42:9b:c0:d6:3f:
         72:6f:a9:d7:22:a9:90:9f:c7:59:d9:08:90:9a:f5:61:ca:48:
         48:25:7c:32:92:a0:d8:3c:22:76:8c:93:dd:a5:6d:91:41:18:
         e8:45:d4:41:9c:f3:2b:da:a1:5b:55:40:a1:d8:f0:01:f4:34:
         dd:c6:de:42:3a:af:a2:ed:2e:d5:02:04:c5:f6:b1:fe:0a:ef:
         62:47:9b:d2:8f:ac:53:05:09:4d:46:04:fa:71:ed:59:f4:bd:
         28:ba:b7:e9:19:66:a8:04:43:35:26:a8:42:a0:6c:ff:26:3e:
         38:06:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 10:14:16 2025 by rpki-client