This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
File:                     6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json)
Hash identifier:          eA18+rslLuknd+Hj7TWj1Ju++1+ZbEOBXMAmc0fb2jM=
Subject key identifier:   25:FF:3A:06:77:4E:B0:93:15:9B:2E:FC:D1:72:71:5D:10:7C:6E:1C
Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
Certificate issuer:       /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
Manifest number:          0115
Signing time:             Tue 23 Dec 2025 03:52:03 +0000
Manifest this update:     Tue 23 Dec 2025 03:52:03 +0000
Manifest next update:     Tue 30 Dec 2025 03:52:03 +0000
Files and hashes:         1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: rczMpkc5/AE37kq3T2oDNbz2d7fS86XV4cUTYgx+T+U=)
                          2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: uz9vSc9mw92nL6Ktvm9xgb3SiGv4W99WeVuYNZ1qMcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl
                          rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
        Validity
            Not Before: Dec 23 03:52:03 2025 GMT
            Not After : Dec 30 03:52:03 2025 GMT
        Subject: CN=694a11e3-a341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:d2:f5:11:97:51:fd:71:20:09:6b:c6:16:
                    32:ff:c2:21:88:94:9c:2b:af:77:4f:d5:f5:82:9b:
                    df:48:0a:82:0b:df:31:f5:97:48:1f:38:c3:86:7b:
                    b1:f2:db:32:48:be:d9:0c:76:7d:72:52:f6:d2:6c:
                    f1:d3:03:5d:1f:7f:13:3c:bc:4a:18:af:d3:06:93:
                    e8:ca:81:40:43:7b:81:dc:1d:68:0e:28:eb:cc:03:
                    dc:5b:13:d9:b5:85:6b:07:22:0b:4b:43:65:23:8c:
                    97:a9:62:9a:90:55:83:b5:99:03:46:1f:a3:87:96:
                    1c:1c:47:31:6f:74:3b:23:46:20:d4:3b:c0:86:fa:
                    7b:83:4e:e9:1a:67:d0:92:89:f7:6e:7b:1a:c6:b7:
                    a4:b1:c9:bb:2d:69:11:4b:2b:79:99:08:71:0d:e2:
                    7c:58:1a:24:e7:6e:66:d6:99:74:63:5f:09:c9:bf:
                    fc:7e:69:0b:b6:1e:35:ea:1f:d5:22:26:3e:d1:9f:
                    6a:bf:69:71:85:bf:39:d0:c9:75:84:55:fe:ea:19:
                    91:52:2a:d7:d5:b3:fb:7f:85:6e:52:c8:28:4a:86:
                    d4:9a:74:b9:45:78:68:dd:25:47:d3:89:b5:37:34:
                    9b:8e:19:99:37:5d:85:80:53:64:b1:a1:0f:85:bd:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FF:3A:06:77:4E:B0:93:15:9B:2E:FC:D1:72:71:5D:10:7C:6E:1C
            X509v3 Authority Key Identifier:
                keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b3:4f:9b:9e:e8:64:c2:49:b0:36:17:57:f0:c5:0d:a2:78:
         6f:83:a5:08:c7:57:e4:f1:ed:57:d7:98:77:17:da:0f:19:64:
         2a:f3:6f:7a:8b:06:20:33:22:c2:8d:7a:11:d4:d1:b4:2e:38:
         f5:a0:4d:17:ea:cc:84:8f:90:d8:79:8b:e7:09:77:b4:21:21:
         ab:ee:74:32:c4:e7:78:8e:11:ff:8d:cb:e9:ad:cf:14:ab:bd:
         08:08:e4:1b:5a:79:2e:42:50:25:b4:6e:74:8c:9e:8e:56:bb:
         9d:00:99:0a:ee:b0:dc:62:5a:0d:4b:ae:9a:56:65:d3:a9:76:
         3a:d8:82:98:66:22:98:df:73:6b:97:7b:47:a5:7c:2e:ff:88:
         84:88:da:11:f8:76:1c:fc:2d:a2:04:8a:7d:28:76:8b:3e:0a:
         1a:7b:31:85:2c:4f:e2:3a:97:58:e5:85:f6:85:97:55:fc:92:
         5a:14:4c:26:98:3a:3e:76:2d:c5:f9:1d:99:c6:16:92:fb:60:
         f4:73:5a:66:ed:fb:4c:22:32:7c:83:ed:4f:f7:49:65:bc:3b:
         9f:96:a6:13:a6:35:98:e5:4a:45:2f:fd:68:d0:f4:0e:bc:a7:
         7e:19:95:c9:a3:26:e3:ff:6b:6d:25:83:0c:8a:0f:cd:01:cd:
         3d:91:e0:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZGRDYxMTAvBgNVBAUTKEU4NjgyMUU5RjIzRDQyRjM2MkU0MkFFMkFGQjVCRDk4
RTBCMTExOTMwHhcNMjUxMjIzMDM1MjAzWhcNMjUxMjMwMDM1MjAzWjAYMRYwFAYD
VQQDDA02OTRhMTFlMy1hMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA057S9RGXUf1xIAlrxhYy/8IhiJScK693T9X1gpvfSAqCC98x9ZdIHzjDhnux
8tsySL7ZDHZ9clL20mzx0wNdH38TPLxKGK/TBpPoyoFAQ3uB3B1oDijrzAPcWxPZ
tYVrByILS0NlI4yXqWKakFWDtZkDRh+jh5YcHEcxb3Q7I0Yg1DvAhvp7g07pGmfQ
kon3bnsaxrekscm7LWkRSyt5mQhxDeJ8WBok525m1pl0Y18Jyb/8fmkLth416h/V
IiY+0Z9qv2lxhb850Ml1hFX+6hmRUirX1bP7f4VuUsgoSobUmnS5RXho3SVH04m1
NzSbjhmZN12FgFNksaEPhb1cZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX/OgZ3
TrCTFZsu/NFycV0QfG4cMB8GA1UdIwQYMBaAFOhoIenyPULzYuQq4q+1vZjgsRGT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkZENi82OERBNEI2QTM4
RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2Tmk1Q3JpcjdXOW1PQ3hF
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZHZ2g2Zkk5UXZOaTVDcmlyN1c5bU9DeEVaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkZENi82OERBNEI2QTM4RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2
Tmk1Q3JpcjdXOW1PQ3hFWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKs0+bnuhkwkmwNhdX8MUNonhvg6UIx1fk8e1X15h3F9oPGWQq8296
iwYgMyLCjXoR1NG0Ljj1oE0X6syEj5DYeYvnCXe0ISGr7nQyxOd4jhH/jcvprc8U
q70ICOQbWnkuQlAltG50jJ6OVrudAJkK7rDcYloNS66aVmXTqXY62IKYZiKY33Nr
l3tHpXwu/4iEiNoR+HYc/C2iBIp9KHaLPgoaezGFLE/iOpdY5YX2hZdV/JJaFEwm
mDo+di3F+R2ZxhaS+2D0c1pm7ftMIjJ8g+1P90llvDuflqYTpjWY5UpFL/1o0PQO
vKd+GZXJoybj/2ttJYMMig/NAc09keAk
-----END CERTIFICATE-----
Generated at Tue Dec 23 11:21:07 2025 by rpki-client