This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
File:                     6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json)
Hash identifier:          A7DhvInxR8oxF2W195F8hyt1Lz8IxG69VV4Uzb2PLeo=
Subject key identifier:   21:98:CB:DB:B6:C0:CB:B1:FA:D4:D2:09:DF:CF:96:5E:0C:29:49:EB
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Certificate issuer:       /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial:       2A9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
Manifest number:          2A79
Signing time:             Thu 18 Dec 2025 15:31:37 +0000
Manifest this update:     Thu 18 Dec 2025 15:31:36 +0000
Manifest next update:     Thu 25 Dec 2025 15:31:36 +0000
Files and hashes:         1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: BtepTXEEjGb2KaMyHXVYhGCA3tMsQvywTqMEiRHLWS4=)
                          2: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: xkr6cXGQ/p7K1jYKezf1z+xt8LJrbP87Z5GaO3mC9Iw=)
                          3: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: dA0s4TToOxTxCGWPhL3CMsQZBEq0Isrnu6dBhBWPJ8w=)
                          4: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: nsCF4rGbw9XGs9CgJZKLcahJ7vZuzL6jjWzwGBe2QfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
                          rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10911 (0x2a9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
        Validity
            Not Before: Dec 18 15:31:36 2025 GMT
            Not After : Dec 25 15:31:36 2025 GMT
        Subject: CN=69441e59-5807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:d8:3c:be:06:ae:b5:62:7f:86:1d:8b:fc:
                    68:9c:1f:84:ef:0f:90:23:a1:00:d0:68:cb:99:cb:
                    44:b2:51:55:81:b0:2d:db:64:4a:be:05:59:62:5a:
                    67:d8:30:d4:ae:11:0d:3d:2d:79:08:17:de:f5:db:
                    92:97:9d:d1:d1:92:57:5e:0c:20:ca:cb:28:70:0f:
                    96:5b:e0:d8:55:fc:9e:aa:71:d8:44:6e:82:73:7d:
                    73:ae:d8:08:65:b1:fd:4a:84:43:c8:0d:24:2a:67:
                    e0:08:8e:62:60:91:38:5f:60:b0:48:f2:6e:43:41:
                    26:9a:bc:81:f1:99:c0:cd:41:09:ff:0f:08:85:d7:
                    d1:d2:06:47:02:13:94:4e:5b:ae:3c:34:2a:f3:7a:
                    fc:c1:cf:3a:21:fc:0a:76:be:7b:30:0c:9a:ed:97:
                    14:ba:2d:ef:9d:58:97:3d:2e:83:84:63:60:32:b4:
                    ae:60:1a:59:da:d5:97:48:7c:87:f1:38:ae:b3:72:
                    6a:9d:91:72:c6:4a:9f:80:f4:18:0d:92:58:d1:c8:
                    d8:5f:3f:88:5f:31:44:e2:10:df:bb:3c:a5:d9:39:
                    e1:78:e1:7f:12:d5:57:a7:73:21:2d:85:93:d7:99:
                    c6:6c:53:f4:53:8b:8d:72:65:3e:92:2e:19:97:3d:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:98:CB:DB:B6:C0:CB:B1:FA:D4:D2:09:DF:CF:96:5E:0C:29:49:EB
            X509v3 Authority Key Identifier:
                keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:78:44:17:42:5a:11:64:e3:2a:e3:12:ff:7a:29:45:5c:4a:
         ea:0f:fb:bb:b3:ca:f5:fd:3d:88:5b:7a:6b:db:bf:2d:f7:ef:
         14:ab:31:c2:a3:ce:97:d7:7a:4b:42:ba:d0:bd:35:0c:f9:7b:
         bb:8b:01:e8:35:43:7f:bb:90:f2:cf:ea:bd:de:ae:28:74:b6:
         7b:26:16:ee:27:ab:d1:dc:65:13:b3:cd:c4:40:78:2e:3d:ae:
         1b:11:65:0f:6c:72:d3:98:79:3d:be:0a:db:58:1f:3a:3c:0d:
         f8:a8:a5:08:4b:de:fe:6e:c1:15:f9:07:3e:c6:ff:08:f7:16:
         22:d2:20:7c:8b:da:7a:23:32:f8:e9:dd:b9:f8:7f:57:c9:6c:
         bd:a1:a6:75:9c:ce:3b:bf:36:6f:6e:4d:45:11:4f:ba:59:72:
         67:5e:d2:30:e1:fe:b5:66:1a:b2:1f:72:08:19:16:80:5b:a9:
         80:62:ed:1a:52:9c:47:e9:51:2e:57:e2:27:42:b5:bd:3f:16:
         49:77:d4:a6:fd:ac:07:38:7a:15:5c:35:4a:39:1a:06:ae:ed:
         36:b5:04:54:59:6d:d1:a7:2c:38:e7:5c:d6:6b:11:2a:de:8b:
         f2:a9:80:8d:c9:9f:48:bb:1f:bc:8e:1e:95:6c:57:fe:30:2d:
         50:ff:c8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:03:39 2025 by rpki-client