This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
File:                     se6IcQY6AQgzW9-qPjoT-cnHkN4.mft (raw, json)
Hash identifier:          E8K6DMcMvb134VFpjNXFe0RvCGyIpn2hR0fcnqD/nic=
Subject key identifier:   30:E0:45:78:06:9C:4A:A3:EE:E1:4D:77:6F:33:32:B1:1E:C4:DF:6A
Authority key identifier: B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE
Certificate issuer:       /CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
Manifest number:          0476
Signing time:             Tue 23 Dec 2025 01:20:05 +0000
Manifest this update:     Tue 23 Dec 2025 01:20:04 +0000
Manifest next update:     Tue 30 Dec 2025 01:20:04 +0000
Files and hashes:         1: se6IcQY6AQgzW9-qPjoT-cnHkN4.crl (hash: 2KJdWuaLXrFUJpA8uxfvjMNKh1kBy4jHOg4K78pA3m4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 01:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D, serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
        Validity
            Not Before: Dec 23 01:20:04 2025 GMT
            Not After : Dec 30 01:20:04 2025 GMT
        Subject: CN=6949ee45-71a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:31:91:ef:64:eb:82:d8:a3:ff:da:38:48:
                    6c:2c:30:c6:5d:1c:45:e9:24:f9:66:e9:24:27:0d:
                    9d:ab:dd:e9:a5:ff:2b:3c:ce:50:d0:58:df:69:f4:
                    f8:6a:e3:ca:64:a2:f2:fa:1d:3a:ed:27:38:88:60:
                    df:7b:1b:53:76:98:46:fa:48:68:3c:84:af:b4:d4:
                    b0:d4:d0:d0:c6:81:f8:68:b7:c0:eb:39:62:c6:8d:
                    3f:81:0d:bb:6d:b1:81:20:22:a1:88:86:da:bf:39:
                    19:07:0b:fa:23:e3:37:1b:de:eb:b5:6e:b0:bf:7e:
                    94:f0:3f:6d:e1:6e:41:70:18:61:c6:ba:b8:fc:5b:
                    55:db:7b:a3:f9:18:bf:fc:e8:cc:1e:d5:d8:3b:ba:
                    36:a2:01:d6:87:cd:c6:ca:0c:a6:31:fa:b1:fc:06:
                    15:de:3c:ff:7d:c4:85:12:1f:4c:5a:95:f3:84:5c:
                    30:cb:8d:ef:9b:6f:5a:43:0a:5c:67:38:43:85:c1:
                    06:78:7c:4b:50:f0:d2:3f:dc:80:1f:ba:f1:3e:e2:
                    33:62:74:fe:61:03:31:ab:b8:f8:9f:cf:d1:fd:79:
                    b1:8c:d6:c0:14:76:42:d9:51:ee:9f:64:0d:79:7f:
                    3c:f6:7e:c9:a2:c6:58:b1:26:e6:30:43:ab:a5:16:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E0:45:78:06:9C:4A:A3:EE:E1:4D:77:6F:33:32:B1:1E:C4:DF:6A
            X509v3 Authority Key Identifier:
                keyid:B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4a:6b:53:1d:1c:87:18:b0:77:e3:43:4d:4d:f1:39:98:82:
         f2:60:90:d5:20:b7:60:b6:66:ee:07:6b:81:10:4f:61:05:85:
         3e:f3:d4:f2:9b:61:58:f0:ff:12:0a:9b:97:c2:fa:9f:86:17:
         cd:da:4d:3c:04:c8:e9:b5:2d:16:75:ff:e7:08:f3:c0:da:f6:
         50:09:bc:25:3b:3a:4e:31:1f:5d:27:c7:b8:71:76:be:b0:fb:
         de:0f:c4:2f:13:11:92:f1:d8:64:79:74:aa:be:5c:d4:fc:34:
         10:0e:fd:27:99:35:6a:5f:51:ab:f0:26:a2:57:1f:42:6a:7b:
         f6:49:06:cb:25:a7:63:9e:26:e6:2a:26:81:44:20:50:34:0f:
         31:e9:22:10:95:5d:b0:0e:d5:b3:a9:ed:de:3d:77:27:14:82:
         a5:69:46:ab:fb:ad:8e:78:8b:6c:c4:51:09:23:3f:55:02:a9:
         c8:fa:78:48:fc:40:f5:a4:c8:a9:f1:e8:69:43:5a:fe:4f:24:
         c3:28:dc:5f:f7:ac:c5:6b:99:51:ff:16:53:ef:2a:b4:a6:d2:
         88:c2:c0:bd:78:51:c4:dc:64:0a:ce:e9:f7:56:e0:3c:64:94:
         66:a8:54:13:d0:54:0e:5e:be:46:83:96:ca:91:3c:b8:cb:45:
         61:bf:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:41 2025 by rpki-client