This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File:                     6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier:          bPeQxSy+8UiLBdsvfyygdem1J591d6DlpIO/hiR07E0=
Subject key identifier:   F6:A1:51:25:6F:F2:38:8C:13:D8:0E:2B:65:33:1F:37:7D:7F:44:91
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer:       /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial:       0AF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number:          0AD3
Signing time:             Tue 16 Dec 2025 19:09:27 +0000
Manifest this update:     Tue 16 Dec 2025 19:09:27 +0000
Manifest next update:     Tue 23 Dec 2025 19:09:27 +0000
Files and hashes:         1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: SjH8B9HD5Q24roh7i1tqzbP1w9NJ7QXYJp1z3euQ3Fw=)
                          2: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=)
                          3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: ynLMF5PjpFkvP/pk/9zlgeaTF7AgzyDNzOj/EUi7rZI=)
                          4: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
                          rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 19:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2802 (0xaf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
        Validity
            Not Before: Dec 16 19:09:27 2025 GMT
            Not After : Dec 23 19:09:27 2025 GMT
        Subject: CN=6941ae67-8539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:1f:d5:2c:3d:7b:46:29:40:be:1e:12:6e:
                    b7:4e:3f:bb:3c:86:ac:c4:3d:12:6a:90:b1:e8:a7:
                    69:f8:29:92:18:09:f8:97:d5:f2:09:6e:e2:59:d9:
                    fd:11:2b:32:70:b4:12:77:d7:31:19:61:b8:c3:6d:
                    13:ec:55:db:81:2a:94:35:7a:3a:8f:b5:5a:2e:15:
                    8e:d6:a9:84:00:3a:79:0d:20:09:9f:60:e6:3d:b8:
                    52:45:b2:0d:7d:2a:f4:1b:60:5b:4c:1a:d8:ac:2d:
                    1b:cd:01:64:b4:ad:5f:04:5d:9b:d7:b6:fe:f7:36:
                    d4:31:49:5c:60:9d:2e:08:9d:1b:b2:1d:d2:cf:09:
                    ed:9a:fc:7d:30:b9:d5:d6:e6:fa:39:f1:62:64:5f:
                    50:07:e3:59:cb:39:8f:c4:a4:61:0c:06:fb:68:cd:
                    f2:ba:9a:23:50:4a:c9:3c:49:3a:b3:4a:cd:66:52:
                    af:01:4b:42:4e:7b:cd:56:67:a5:11:01:40:40:7a:
                    25:0a:e1:3f:04:fa:26:6b:69:13:4d:01:8e:ec:bf:
                    eb:ae:95:88:0f:58:b0:2b:c6:83:ef:81:9d:42:1d:
                    a1:c1:e6:59:7c:2a:43:89:f1:b0:32:0a:b6:9b:25:
                    33:2a:b8:ab:1f:b5:f7:a8:db:20:d8:63:af:04:f0:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A1:51:25:6F:F2:38:8C:13:D8:0E:2B:65:33:1F:37:7D:7F:44:91
            X509v3 Authority Key Identifier:
                keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9b:49:99:76:42:c6:b1:63:b7:5b:79:75:55:fe:ee:ca:b4:
         f8:ee:a6:92:90:5b:67:5e:1f:87:5c:5c:42:2c:8c:9f:a0:47:
         fc:8d:80:e3:51:f2:aa:06:84:0b:fa:1e:3f:a3:3f:f0:f3:b1:
         7f:08:a6:0a:6e:9d:63:47:a3:d1:81:a3:ba:13:85:1f:b8:ad:
         33:70:73:3e:86:d5:16:b6:18:bd:13:85:90:5c:db:a3:96:f2:
         c6:c6:7c:4d:e2:eb:1c:a2:cc:ed:64:67:7c:27:bc:5c:ad:d6:
         47:f9:ba:87:9c:44:3a:0a:0f:b8:00:36:d1:0d:df:a0:82:1a:
         6f:9c:e7:d7:85:32:7f:b1:e1:7a:31:e0:c7:d2:c2:f4:52:cd:
         68:d0:a7:b4:97:c8:f1:fd:7b:dd:b1:36:8c:16:91:dd:6d:74:
         2e:4e:3d:61:12:fc:66:5e:db:70:e0:8f:56:c0:63:40:14:be:
         ab:0a:21:b9:f5:1f:c3:a6:cf:0a:6c:75:af:49:4e:bc:e6:a4:
         5c:9f:cb:6d:f8:de:e1:38:f1:42:43:a0:59:83:aa:39:05:13:
         a7:68:51:f3:77:9c:cc:1e:06:ca:29:71:d0:e4:03:af:1d:ce:
         17:6b:23:03:4a:f1:77:f9:59:10:ff:ba:ff:92:cb:d4:10:c1:
         ed:11:05:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 00:31:27 2025 by rpki-client