This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft
File:                     AG_6MenQAhaRnYn4s-fb7ffvlrM.mft (raw, json)
Hash identifier:          E9j+6/juzql7vW4Gb36sbk0GhtczMZhadSnoTfK5RB4=
Subject key identifier:   04:75:3C:FB:10:6F:77:87:5B:D0:4B:B8:4B:C3:ED:40:26:F9:19:70
Authority key identifier: 00:6F:FA:31:E9:D0:02:16:91:9D:89:F8:B3:E7:DB:ED:F7:EF:96:B3
Certificate issuer:       /CN=A9196DC9/serialNumber=006FFA31E9D00216919D89F8B3E7DBEDF7EF96B3
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft
Manifest number:          25
Signing time:             Tue 23 Dec 2025 06:34:58 +0000
Manifest this update:     Tue 23 Dec 2025 06:34:57 +0000
Manifest next update:     Tue 30 Dec 2025 06:34:57 +0000
Files and hashes:         1: AG_6MenQAhaRnYn4s-fb7ffvlrM.crl (hash: cPU5u91hFzNZzwi4vypxcaMggBprpx3cLsd3dU2uCmc=)
                          2: 473BC6AAAE5C11F089298455C4F9AE02.roa (hash: Z7jRt9rPjXcH8cd90zTUtzFnJzr2+fuFhP1bhCXrDpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.crl
                          rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DC9, serialNumber=006FFA31E9D00216919D89F8B3E7DBEDF7EF96B3
        Validity
            Not Before: Dec 23 06:34:57 2025 GMT
            Not After : Dec 30 06:34:57 2025 GMT
        Subject: CN=694a3812-14eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0d:5d:5f:62:4e:be:74:5b:f4:37:4a:8a:a9:
                    45:45:21:0e:5b:df:9f:28:2a:7e:09:d8:89:97:63:
                    94:97:05:08:83:d7:9c:33:f7:76:cb:76:8c:55:fc:
                    e6:9c:60:96:44:9b:6a:1a:8a:ab:66:b7:ca:49:31:
                    67:65:51:68:89:e8:51:be:1c:d7:d6:ff:98:21:d3:
                    44:a5:3d:ec:67:ba:65:e0:d2:47:00:a7:2a:71:7e:
                    4d:51:07:93:ef:37:15:6e:88:a9:79:75:ea:05:10:
                    a5:e6:e0:49:56:93:f1:d6:77:cf:9a:52:88:b3:5e:
                    c9:c5:ab:7f:19:34:5f:68:42:16:0f:0f:e2:9b:c8:
                    01:21:15:e5:ef:f1:4d:6c:a3:d2:56:d5:b1:06:3a:
                    b8:da:ec:59:b9:7e:34:9e:12:71:ec:e3:a6:fe:93:
                    f7:f1:d3:83:b7:e6:74:21:c1:ce:a1:95:30:30:3c:
                    34:af:44:8e:c8:bb:41:63:ca:d4:f5:f4:c1:1d:b5:
                    69:62:0f:db:fb:b1:5e:b7:17:11:8a:16:85:e9:cc:
                    c3:f4:f0:4e:93:9c:a8:a6:65:9a:84:51:73:58:17:
                    de:41:1b:26:5e:15:d3:f7:b9:38:1b:56:3f:f9:4b:
                    b5:f0:ab:41:90:3f:e6:cf:2c:c6:d3:b6:42:df:50:
                    0f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:75:3C:FB:10:6F:77:87:5B:D0:4B:B8:4B:C3:ED:40:26:F9:19:70
            X509v3 Authority Key Identifier:
                keyid:00:6F:FA:31:E9:D0:02:16:91:9D:89:F8:B3:E7:DB:ED:F7:EF:96:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:74:aa:13:0c:dc:5f:7b:a5:03:4d:66:be:f7:4e:96:d3:ce:
         a5:a2:dc:16:b7:dc:1c:37:75:3d:fa:96:49:fd:41:ad:dd:7c:
         88:13:15:02:e9:ef:f1:f2:58:e1:54:26:d2:23:20:1b:ca:6a:
         d1:dc:c3:ad:23:0c:59:9a:d3:75:2e:22:b6:e9:74:55:bd:8a:
         19:03:b5:41:c5:87:dd:e6:ed:df:a3:31:a6:11:83:88:d0:a8:
         b0:4f:64:d6:93:06:b3:2c:5b:f8:fe:4b:a4:22:85:12:85:b8:
         c7:55:4a:8b:38:23:8e:95:cd:c0:b6:9a:fb:8f:b3:4f:89:d0:
         12:2f:d2:96:dd:57:66:97:32:e7:98:b4:f2:29:d7:f3:d7:ae:
         8c:df:3b:3b:4e:d5:ea:b1:ab:05:53:73:4d:e0:ab:9b:03:7f:
         fb:7d:e0:13:ee:02:a9:cf:b7:ee:1c:1c:50:46:dd:9a:85:78:
         6d:5f:a0:28:10:3f:57:ad:e3:af:f0:7f:49:7d:a7:b4:33:51:
         49:db:e2:1c:77:fe:83:14:50:c0:fd:ec:ec:9a:07:e8:0a:ec:
         65:e2:52:07:67:45:8c:3e:84:74:e4:0b:24:a2:d5:16:f1:a7:
         19:14:99:a2:b8:06:3d:33:d5:75:54:31:c0:17:54:51:98:0e:
         24:8c:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:06 2025 by rpki-client