This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
File:                     6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json)
Hash identifier:          AI8/sAXeVHdm7NkZvBiDLiMkv1BBepFWfLc9Ed2j9NA=
Subject key identifier:   92:FB:03:39:A7:DA:7E:94:68:1F:D3:CA:75:44:34:9E:BC:91:C7:1B
Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E
Certificate issuer:       /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E
Certificate serial:       0D03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
Manifest number:          0CEF
Signing time:             Wed 24 Dec 2025 17:48:24 +0000
Manifest this update:     Wed 24 Dec 2025 17:48:24 +0000
Manifest next update:     Wed 31 Dec 2025 17:48:24 +0000
Files and hashes:         1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: f9/dmi8bwLFWC9DWSu4AeS5/gzZ/XXOHNj1j6H3fgdk=)
                          2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: j94Y9byA6hrJjWvSwlJFmsvrVOzYBezuSr8IKFG6YL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl
                          rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3331 (0xd03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB87C, serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E
        Validity
            Not Before: Dec 24 17:48:24 2025 GMT
            Not After : Dec 31 17:48:24 2025 GMT
        Subject: CN=694c2768-7e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:51:9d:ba:e7:e4:36:24:c8:2e:ca:30:a4:86:
                    1e:c8:b1:07:9c:07:04:fa:c3:f4:5a:5c:1a:96:12:
                    f6:14:88:1c:31:1f:c1:93:74:51:38:44:e0:40:19:
                    c2:b3:10:9e:1b:26:bf:24:fd:de:06:62:03:ea:22:
                    36:0b:63:2f:bc:e7:18:ee:56:23:95:c8:73:35:e2:
                    de:ac:88:b6:d8:b8:c5:77:67:f9:f6:75:81:30:98:
                    0d:ab:69:3c:2e:4a:a7:a6:15:bb:ff:81:16:6c:74:
                    cd:cf:bf:77:a1:f8:ca:7c:0e:64:64:27:5f:5a:e2:
                    6b:7e:22:19:87:e7:7a:3a:41:91:1f:8f:7d:68:f7:
                    fd:d5:9e:17:ed:ae:f6:d2:e4:fd:e6:43:c7:47:06:
                    64:7a:9c:01:97:da:16:0f:78:2f:b1:40:88:35:ad:
                    41:dd:f9:a1:16:29:56:27:5a:45:4c:95:04:67:f5:
                    36:c5:de:d3:47:46:a5:50:84:a2:00:8d:92:00:7b:
                    35:1d:53:4b:0b:b3:a8:4c:07:c1:dc:7e:65:2d:82:
                    cc:a4:59:6e:fd:83:93:1f:f6:22:fa:62:34:aa:f2:
                    ad:d9:5e:b9:c0:05:a1:3a:fe:07:34:89:5d:7d:c8:
                    22:e8:b9:b2:38:04:c0:12:fb:e9:d9:b4:d0:71:50:
                    4a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FB:03:39:A7:DA:7E:94:68:1F:D3:CA:75:44:34:9E:BC:91:C7:1B
            X509v3 Authority Key Identifier:
                keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ab:77:66:e0:ef:a2:13:f1:f7:7d:97:8d:41:eb:24:ed:49:
         3e:05:33:96:58:22:3f:13:f8:83:e8:fb:99:14:4b:b7:44:76:
         29:c6:e0:2c:1d:31:93:a3:4e:d9:80:15:ef:00:e8:19:c9:f7:
         3d:61:18:0c:82:74:31:66:82:09:b7:af:d5:91:bf:b1:4a:30:
         a2:f2:c9:f6:55:71:5b:a6:5f:69:89:c8:3e:9b:9b:74:4a:44:
         a4:66:b2:e2:e0:ff:1d:49:4f:cc:d6:58:cc:6f:e4:12:b9:49:
         e6:9f:41:5f:f0:c4:b1:a9:75:e4:da:0c:22:f2:99:f7:88:74:
         25:75:29:af:74:fa:ad:7d:c6:26:8a:f1:33:b4:a3:4f:b0:18:
         6d:04:26:b9:bc:bb:b9:d8:99:6f:92:09:ff:76:ee:23:17:47:
         8f:62:e0:65:52:ae:7e:ef:ed:39:92:dc:22:8c:6a:68:8c:23:
         87:b1:63:02:7c:9e:b1:98:51:1b:95:e6:d3:3d:5e:70:28:61:
         fc:4e:22:12:c6:e1:43:28:59:38:2c:c7:c6:cf:bb:aa:76:eb:
         06:8c:ca:ae:4f:2c:95:59:aa:c6:92:47:db:63:ad:1e:46:64:
         af:fa:fd:2f:5e:75:fb:6a:5e:ce:36:46:a1:2a:21:9f:81:32:
         bb:e1:fb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:30:37 2025 by rpki-client