This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
File:                     wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft (raw, json)
Hash identifier:          tWSMBLI2muRsMGyYzQdIAMFtcsIKZoD/NLZ8vsiQukU=
Subject key identifier:   22:53:13:2A:E3:AF:5E:07:23:6D:E9:E4:D7:4D:DF:E6:12:1B:13:97
Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD
Certificate issuer:       /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
Manifest number:          6B
Signing time:             Sat 13 Dec 2025 06:44:21 +0000
Manifest this update:     Sat 13 Dec 2025 06:44:21 +0000
Manifest next update:     Sat 20 Dec 2025 06:44:21 +0000
Files and hashes:         1: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl (hash: 1p1cNxbkg9TamaaVKAxgzR2P3YbPJn5Rr+IGTCeqiFQ=)
                          2: C317D9BA341A11F0B6835730C4F9AE02.roa (hash: slKnmbx+8GFjxzbTLlGteNrzM3mXfRGAHKxnN7Hj2s4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl
                          rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 06:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
        Validity
            Not Before: Dec 13 06:44:21 2025 GMT
            Not After : Dec 20 06:44:21 2025 GMT
        Subject: CN=693d0b45-ce90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:42:5e:a5:e0:7c:f9:41:ce:74:8b:8f:86:
                    83:9c:65:cb:79:21:c6:8f:8a:4b:7a:66:91:3f:a6:
                    90:57:e1:2a:0b:24:cd:c4:92:71:ae:9d:4a:c7:38:
                    07:16:76:d9:37:f9:36:f1:ea:96:2b:c1:83:d2:1d:
                    32:a4:71:70:73:f5:bd:d2:c4:0c:94:9e:f4:bf:2c:
                    81:2a:6a:67:60:07:1a:7d:4c:8b:e1:d1:3f:d7:93:
                    f1:97:b2:37:d5:a2:ff:98:05:31:2b:1d:85:0a:79:
                    56:44:09:ff:5b:10:82:78:da:38:a2:7d:b6:c9:01:
                    1c:29:bc:83:96:dc:73:07:1e:0e:19:10:f1:8f:3e:
                    52:02:09:d2:0d:0a:76:4c:d4:85:a5:e9:f8:b6:15:
                    d8:be:59:76:02:49:ca:f8:29:2f:4a:5b:e8:f6:53:
                    96:f3:5e:5b:f5:40:22:13:ae:c9:95:bd:85:0d:9f:
                    d5:94:17:d7:27:89:ee:8f:31:0f:f8:d9:36:8a:e1:
                    4e:65:b1:c0:77:6e:48:ed:0a:1f:0b:0a:93:79:72:
                    e1:e4:87:43:cd:94:72:4c:53:ee:21:47:33:ad:5b:
                    c5:b1:55:c7:a0:8e:8a:12:de:aa:71:6e:88:98:41:
                    b0:af:b8:24:65:d3:66:83:4f:1a:65:7b:1b:76:cb:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:53:13:2A:E3:AF:5E:07:23:6D:E9:E4:D7:4D:DF:E6:12:1B:13:97
            X509v3 Authority Key Identifier:
                keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:50:74:2d:58:7a:a5:53:dd:c7:34:74:22:e7:91:77:3d:22:
         20:f0:f3:eb:b2:e6:4b:df:e8:34:d6:dc:30:24:3d:f9:46:21:
         0b:ec:1b:d8:2b:77:89:86:cc:da:f3:d2:1c:6b:d9:d5:a9:bb:
         d9:c8:d6:d5:0f:2a:17:d4:65:e1:6e:53:3a:d9:5d:88:67:57:
         0a:e2:b4:68:14:0b:26:09:6f:2e:74:66:14:e2:ec:9e:3e:fc:
         42:5f:f0:de:ec:7d:8c:be:8d:fc:0c:d1:65:67:cd:52:8d:ba:
         54:eb:0b:41:5e:18:cd:60:47:0f:ee:4b:61:ed:0f:52:10:7d:
         f4:e7:b7:16:08:ca:96:f9:39:1c:38:78:e0:e5:b1:a8:7c:4f:
         04:0c:d6:83:a2:57:4a:10:65:aa:dc:c1:00:96:16:4e:8f:34:
         70:2c:d9:7e:75:fd:fb:86:cd:51:d2:49:07:65:be:15:36:e8:
         b5:73:8b:11:10:c5:6a:07:d0:9b:50:12:be:b6:ff:cd:51:14:
         bd:9d:af:14:67:62:34:19:c1:eb:24:1b:d9:75:2e:54:d6:f6:
         70:5c:b5:e6:39:0b:ca:85:7d:ef:0a:b8:0d:d8:49:ad:07:97:
         c2:84:3e:e7:9b:64:a1:d8:17:78:6d:93:f6:c8:3b:18:a1:42:
         83:e5:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 19:20:47 2025 by rpki-client