This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft
File:                     l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft (raw, json)
Hash identifier:          HqoCxKN+NSfwt/WaNX2wWs88MvmQfnF3jnPGJ72e3WI=
Subject key identifier:   13:43:67:24:92:C3:64:B7:99:E0:6D:CB:85:74:96:E5:9C:18:F5:94
Authority key identifier: 97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6
Certificate issuer:       /CN=A9175762/serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6
Certificate serial:       0643
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft
Manifest number:          063D
Signing time:             Fri 12 Dec 2025 21:54:19 +0000
Manifest this update:     Fri 12 Dec 2025 21:54:19 +0000
Manifest next update:     Fri 19 Dec 2025 21:54:19 +0000
Files and hashes:         1: l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl (hash: pQh+fhPm3BQr0AYEDLXF4qCV/Vzv0UE/ohxo/I+39pU=)
                          2: 9DD99914B85311EBA5D4171FC4F9AE02.roa (hash: sA3Y6loeO+Du++cXdVYeey7TebrDsgcCCcYdqCjW+ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 21:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175762, serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6
        Validity
            Not Before: Dec 12 21:54:19 2025 GMT
            Not After : Dec 19 21:54:19 2025 GMT
        Subject: CN=693c8f0b-a224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f3:de:ee:8b:7b:d1:e8:2b:0d:cd:48:ce:19:
                    bf:52:2f:c3:07:fa:49:38:b3:98:cc:fd:1e:93:90:
                    57:a5:dd:5a:86:b3:71:c0:a6:9e:ae:6f:85:02:22:
                    36:a9:ff:08:f0:18:f1:b2:7c:ca:8c:9f:fa:b1:f4:
                    e3:00:9d:f7:cc:6b:58:ca:b9:f7:fe:71:3d:13:a9:
                    f4:11:8d:9c:cb:5c:99:2e:74:91:26:b4:ff:53:48:
                    66:6c:c0:5a:c5:c6:2e:23:93:41:14:5b:e0:72:45:
                    e8:ac:20:a3:77:50:d6:25:e8:8a:2b:67:20:30:d1:
                    51:9d:07:cb:67:63:3a:95:62:e4:02:e3:f3:11:3b:
                    dd:01:1b:42:0e:d2:56:ed:23:ef:bc:c9:31:5b:b6:
                    cd:73:56:a4:63:49:6f:95:bf:7e:8a:5c:77:a8:f6:
                    cb:c2:79:0e:ca:e0:e3:bb:e4:12:fa:ff:0e:47:b3:
                    ae:be:1c:de:4e:bd:36:48:cf:96:e8:3f:c5:f9:15:
                    25:c2:97:1c:ed:83:42:35:84:e9:82:57:39:71:f3:
                    fb:70:43:3f:41:51:03:67:ff:10:ef:a4:f0:4d:fb:
                    71:20:1e:f1:71:3c:9f:fc:0a:c9:0a:c3:98:1e:a5:
                    d2:f3:fb:bc:08:60:dd:cc:b6:55:98:2e:bd:c9:06:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:43:67:24:92:C3:64:B7:99:E0:6D:CB:85:74:96:E5:9C:18:F5:94
            X509v3 Authority Key Identifier:
                keyid:97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:05:33:61:c9:fe:1d:92:02:08:0b:0a:7c:9f:b5:2d:d9:fa:
         73:cc:00:aa:84:ee:02:ee:54:85:74:69:66:02:bd:6b:eb:7a:
         ed:b8:06:93:bc:ac:86:9a:fe:28:b8:37:95:c8:87:75:50:88:
         08:af:17:85:00:9a:49:95:f1:ba:1b:3d:e6:f4:fd:5e:43:da:
         67:54:c4:9d:c8:f5:7f:4b:cb:01:37:ce:f4:e3:c2:24:9f:c8:
         a8:fc:d3:58:95:69:d5:7e:b5:19:0d:f2:c0:5c:61:61:e3:1f:
         ce:35:a2:c7:ca:a2:fd:a5:eb:f2:b6:f3:f8:cf:14:1b:04:d3:
         b5:17:99:f3:78:9a:f9:94:39:d5:48:85:01:65:37:7b:b2:f5:
         9f:0b:b7:8a:d8:ae:c6:a4:17:c6:d5:d7:47:60:e5:83:be:82:
         82:34:cd:e9:69:22:97:d8:bc:15:85:c4:83:1a:b7:74:62:74:
         e6:b1:7c:eb:32:cb:c9:3f:cf:29:df:14:c1:8a:05:b5:db:ad:
         a4:8d:a8:9f:eb:21:d3:36:84:6d:23:a6:fa:ca:ae:34:e8:67:
         7d:b9:50:24:8b:62:d4:47:42:23:75:b1:92:05:af:5e:30:2a:
         41:d3:3a:11:58:0f:50:bc:44:26:45:1d:c9:45:35:47:9e:de:
         86:cf:1a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 21:36:55 2025 by rpki-client