This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
File:                     -L4s6ssxJNZg8w-KJzgGZIr0PIc.mft (raw, json)
Hash identifier:          Qmwajs4soEFtHg9U6TmK+3+1/Wfaqa7HKd3N4i0LwqE=
Subject key identifier:   43:DE:BA:FB:86:31:CE:CE:D5:DF:76:78:1A:E7:D9:61:DE:E6:A3:29
Authority key identifier: F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87
Certificate issuer:       /CN=A91AFAAC/serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
Manifest number:          6F
Signing time:             Tue 23 Dec 2025 05:47:29 +0000
Manifest this update:     Tue 23 Dec 2025 05:47:29 +0000
Manifest next update:     Tue 30 Dec 2025 05:47:29 +0000
Files and hashes:         1: -L4s6ssxJNZg8w-KJzgGZIr0PIc.crl (hash: cOKyTkgkoiRAanzkwRbB613EyE7/nKEVzCM80miT+8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl
                          rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFAAC, serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87
        Validity
            Not Before: Dec 23 05:47:29 2025 GMT
            Not After : Dec 30 05:47:29 2025 GMT
        Subject: CN=694a2cf1-200f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:6a:56:ef:ca:cf:c9:0e:d0:28:f2:3a:0e:
                    8f:60:54:0a:b7:0f:e7:f3:3c:90:40:a5:82:04:c7:
                    84:78:65:9d:34:6b:b7:0b:8d:e9:7a:30:d3:2d:3a:
                    98:3a:2a:e0:ee:06:3e:ff:35:34:be:83:c1:e9:86:
                    2b:81:2e:e5:ab:82:4d:42:80:41:fa:74:fc:b6:f0:
                    c9:c2:13:60:bd:7d:f6:9d:ef:df:4d:a1:98:19:b7:
                    ef:ac:5e:66:24:a2:97:64:1b:f4:37:03:5e:2d:dc:
                    57:0a:35:ba:5c:79:57:bf:e1:8f:be:d6:7a:50:b4:
                    f2:02:ca:21:df:f7:54:9e:dd:5f:c8:86:7a:7e:ee:
                    a1:b1:10:82:eb:42:12:4e:64:57:6b:13:b9:22:b4:
                    44:92:fe:a0:47:00:a1:5d:92:3d:fa:ed:11:cc:d4:
                    d5:b4:43:e9:9b:a9:72:2a:f3:e7:9e:2a:45:e9:93:
                    69:58:8b:de:62:cc:19:f4:2b:0d:1e:45:3d:c5:e4:
                    a6:cf:82:29:0c:f9:2a:38:3c:a8:db:33:ee:cd:90:
                    3a:5a:84:1b:5c:35:bd:df:14:45:c3:eb:55:4b:a4:
                    cf:24:4c:7a:40:a2:8c:4b:60:57:66:c1:49:f4:53:
                    60:12:36:07:b4:51:c5:87:17:f1:a2:99:a0:3c:cd:
                    c5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DE:BA:FB:86:31:CE:CE:D5:DF:76:78:1A:E7:D9:61:DE:E6:A3:29
            X509v3 Authority Key Identifier:
                keyid:F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c6:fb:85:44:67:45:5c:14:23:d1:1c:1b:32:34:dd:dd:38:
         59:c3:72:e4:e1:2f:91:33:bc:eb:9f:30:9d:59:ba:2b:12:66:
         64:e2:02:f3:29:68:8a:9a:84:55:d4:74:14:0c:10:22:da:72:
         01:38:ab:36:d5:49:d4:10:aa:39:13:ba:bb:15:84:20:1d:55:
         cc:bf:f2:ee:56:61:73:3c:ef:0a:a8:f4:ec:bd:7e:68:55:c2:
         94:8e:76:c0:80:ea:69:1d:15:51:ea:41:04:c9:3e:51:03:96:
         d9:8c:7a:e4:f7:a4:74:42:a3:22:33:0b:31:98:1f:cb:1f:30:
         9d:a8:b9:05:26:b5:e4:c5:31:4d:81:4c:db:2c:b0:22:02:4a:
         17:c2:d2:e8:66:f9:6d:3e:d3:aa:bc:b3:d5:cb:56:04:e0:05:
         f7:c8:43:2f:c7:fe:e2:45:c1:da:94:f6:98:b6:e8:66:da:78:
         8c:25:99:93:65:ba:54:55:40:22:3f:4a:f8:03:8b:76:7e:f2:
         f9:80:04:68:4e:9b:43:2b:a9:7d:ac:fe:5e:22:2f:53:98:f2:
         37:0f:ac:f6:85:a6:2c:e4:e2:d8:47:ce:24:25:53:71:77:75:
         da:13:03:45:a8:fa:ea:c2:b2:52:5b:21:b1:21:bb:8c:d9:a3:
         b3:a3:b0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:31:29 2025 by rpki-client