This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
File:                     6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json)
Hash identifier:          JjWhOGp5rsrqQbiy6TSQVLpNpPIay2BHVQhKOXR5mMQ=
Subject key identifier:   CE:0A:77:D1:96:DA:E2:F7:A1:55:46:F6:73:C4:93:B8:50:66:68:D6
Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
Certificate issuer:       /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
Certificate serial:       03EF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
Manifest number:          03EC
Signing time:             Mon 22 Dec 2025 23:34:51 +0000
Manifest this update:     Mon 22 Dec 2025 23:34:50 +0000
Manifest next update:     Mon 29 Dec 2025 23:34:50 +0000
Files and hashes:         1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: xI2T7m4WEaMzZ5gXxhlbLIdLrru8YgSc7AJVzIwOwV4=)
                          2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: c/Zvm427kENiAideE2yc17TlzEqhW1utfEK6NB9dveM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl
                          rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007 (0x3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0432, serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
        Validity
            Not Before: Dec 22 23:34:50 2025 GMT
            Not After : Dec 29 23:34:50 2025 GMT
        Subject: CN=6949d59b-8ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:ad:c7:65:0b:92:69:ab:0c:be:4d:d0:00:
                    46:10:91:ce:02:69:32:19:46:a8:c1:f7:30:cf:5c:
                    92:e2:3d:24:e2:1a:cd:60:45:ba:cf:8f:49:38:90:
                    b1:1e:b3:20:55:f9:f4:df:02:c5:9b:cd:36:39:27:
                    62:69:fe:40:99:c1:ae:6d:cd:97:12:f8:70:51:b4:
                    91:0a:6d:fd:73:91:3f:d9:da:21:2e:f8:c8:c1:87:
                    e9:74:a2:68:59:a2:96:22:5a:31:4e:c0:80:bb:70:
                    fc:e9:47:62:cc:03:03:b3:70:a6:16:78:ca:a9:f6:
                    17:a1:8d:ba:24:e1:2c:27:0c:0e:f9:b9:8c:9c:27:
                    82:72:13:d4:0d:c0:54:d6:90:6b:18:84:24:a7:6a:
                    ad:c9:d6:f6:5e:63:ff:6f:7a:62:f9:ef:16:72:8e:
                    e4:a6:a6:92:dc:bb:7b:51:30:72:70:9d:8d:97:d6:
                    d0:06:87:e9:96:6d:94:83:98:45:d7:1d:3c:61:46:
                    a3:3c:08:38:96:e1:de:91:c3:e0:0c:a8:f0:9a:2b:
                    cd:72:15:34:5a:88:63:c0:ed:17:92:f5:0b:ae:59:
                    33:3e:1b:08:7e:87:77:d6:d9:f2:e9:7b:61:84:92:
                    cd:84:2b:86:03:7d:1c:19:9c:7d:18:f2:1c:b1:b6:
                    db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0A:77:D1:96:DA:E2:F7:A1:55:46:F6:73:C4:93:B8:50:66:68:D6
            X509v3 Authority Key Identifier:
                keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:22:d3:29:33:25:47:5c:89:0c:35:bf:e9:49:e1:a0:2c:62:
         c8:4c:87:01:b6:39:49:fb:ec:53:56:6f:47:36:d6:84:1b:64:
         79:eb:b6:77:27:95:a3:6f:1d:6d:f5:68:b8:a7:a1:54:d1:83:
         07:d6:e9:65:e8:93:ae:52:61:50:ec:5c:41:85:f1:f2:71:ef:
         cb:66:92:15:ed:37:25:60:63:9f:21:d4:ca:0b:78:93:84:e8:
         f6:00:54:17:a4:46:24:b0:aa:31:2a:5e:a4:bd:89:f9:73:4f:
         a7:69:21:ef:33:84:62:0a:5f:1e:e6:9d:0a:06:9c:80:36:be:
         dc:f6:a5:3b:c6:5c:1b:4d:37:0d:0e:87:85:fb:c2:4d:90:5e:
         82:c6:79:a1:1b:56:86:c2:aa:39:a0:8d:b3:e3:7b:f6:24:8e:
         7f:cb:58:ea:f9:51:d6:df:67:67:61:47:e0:97:24:52:c8:8f:
         d3:fa:c8:84:29:2a:e2:ac:08:63:16:77:6d:4b:1d:05:77:00:
         45:52:36:06:7f:8e:3b:79:a1:ae:53:99:61:c8:c4:67:4d:2d:
         92:eb:dc:0e:43:28:6e:6b:86:f9:20:67:76:54:bc:b5:b4:fa:
         1e:5d:1f:5b:06:8d:3e:e2:b3:9e:06:c1:21:03:e5:c3:5d:b4:
         a8:30:c0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:52:05 2025 by rpki-client