This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
File:                     6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json)
Hash identifier:          guHYD8tawu0RJeohXjQaeNG2P+dJ7KVVRqooH1Fy1eA=
Subject key identifier:   B9:2F:C4:AA:63:5A:A0:84:E9:47:96:D8:A1:50:DD:83:FF:B0:46:8A
Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
Certificate issuer:       /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
Manifest number:          E3
Signing time:             Sun 21 Dec 2025 04:37:49 +0000
Manifest this update:     Sun 21 Dec 2025 04:37:48 +0000
Manifest next update:     Sun 28 Dec 2025 04:37:48 +0000
Files and hashes:         1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: 4COcNnhjCT9ve9thCJZoK+A5MpxAb4idj8vqDe0x6Fs=)
                          2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: Y3P581iwNBtM7GAEmYXEwohRufrsNXEYBtPTu9fYw2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
        Validity
            Not Before: Dec 21 04:37:48 2025 GMT
            Not After : Dec 28 04:37:48 2025 GMT
        Subject: CN=6947799d-ebb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:eb:d8:bd:34:70:94:33:e5:07:04:23:f3:6a:
                    42:d8:f8:b9:ea:6d:2e:67:d2:4d:8b:3f:6d:1e:be:
                    f2:bd:19:6e:2f:8d:3b:73:14:e2:c3:d8:88:79:e2:
                    e0:34:49:bc:ce:ed:5a:1d:0a:2a:0e:a2:19:b8:c7:
                    80:6b:33:f3:0b:fd:4a:e0:6c:b0:55:24:63:54:8a:
                    b8:67:9b:35:13:f3:b2:00:39:2c:4d:55:55:6b:54:
                    79:bf:7b:ea:51:b8:55:db:93:16:c1:55:3f:5b:87:
                    38:5c:c1:9e:f8:17:cc:7d:4a:ce:14:35:40:b1:88:
                    69:12:d1:f0:c3:c5:81:34:8c:96:be:5a:b4:9f:0b:
                    6e:f8:94:87:51:71:89:c2:bd:af:f9:bd:8a:ca:68:
                    6b:13:5a:9e:6c:4f:ba:dd:08:93:6c:6d:e6:b6:b2:
                    9e:a3:12:79:8f:67:1d:bc:5f:74:63:3e:df:bd:e7:
                    00:73:b1:27:0e:07:cf:c9:3e:32:f5:64:f8:bd:0b:
                    d2:64:7f:cf:ad:75:45:14:53:61:78:5a:71:0d:18:
                    bc:08:5d:f6:a3:da:8b:0d:68:4f:57:df:1b:2d:7b:
                    0f:ae:b6:1d:f5:98:35:41:79:bb:68:22:d7:45:e5:
                    7a:9f:71:e8:c3:45:90:f4:12:ed:45:03:b5:43:73:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2F:C4:AA:63:5A:A0:84:E9:47:96:D8:A1:50:DD:83:FF:B0:46:8A
            X509v3 Authority Key Identifier:
                keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b9:7f:59:ee:41:f9:ce:4b:ce:e4:b4:9a:c9:0d:ee:a3:fb:
         32:5d:73:da:11:d0:03:fb:2a:d3:21:52:a6:a2:21:32:92:af:
         24:c9:23:72:2b:07:69:af:32:80:41:1a:ca:b0:84:cb:b3:ff:
         3c:f1:cf:c1:e9:01:29:93:cf:24:50:dc:e4:d2:55:ff:41:2b:
         e6:ce:66:55:22:4a:56:19:da:e3:56:79:85:14:55:ed:55:88:
         50:9c:f0:fe:8b:37:91:19:28:13:7d:d2:53:c5:70:27:fc:93:
         b1:e9:21:85:20:3f:8f:2a:13:a5:20:09:f9:0f:5a:bd:63:82:
         ce:f0:27:60:d7:5e:bf:a0:6f:a5:05:f5:bb:d6:2a:08:77:00:
         b3:62:86:5b:99:85:a6:a3:3d:36:98:27:3a:d6:ff:19:90:f7:
         fe:79:06:19:82:be:71:fe:8a:83:db:53:46:1c:56:33:a9:db:
         04:9e:48:d5:b1:cf:92:39:56:44:4a:00:02:26:b6:c1:50:5f:
         ac:83:32:d1:0e:a7:9f:9a:3f:bd:3b:16:ad:74:52:b6:f3:d7:
         88:75:bd:e5:cf:9c:89:1b:d5:d9:b0:32:c5:63:60:21:c1:83:
         b4:b1:89:99:a8:06:12:c5:04:27:f6:1a:16:cd:4a:72:08:b3:
         23:c4:b4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 16:12:32 2025 by rpki-client