This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
File:                     E6R11r48LHrEqN03EGaqbAF0-j0.mft (raw, json)
Hash identifier:          aZzxdECkyJUD8O0bnAmO5C5cEct2F+m64oKQKTG2B3w=
Subject key identifier:   6A:16:91:72:42:BF:BB:1A:59:80:F0:8F:BD:3D:C7:DC:7E:F8:4F:41
Authority key identifier: 13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D
Certificate issuer:       /CN=A91CA141/serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D
Certificate serial:       09A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
Manifest number:          099B
Signing time:             Mon 22 Dec 2025 19:24:58 +0000
Manifest this update:     Mon 22 Dec 2025 19:24:58 +0000
Manifest next update:     Mon 29 Dec 2025 19:24:58 +0000
Files and hashes:         1: E6R11r48LHrEqN03EGaqbAF0-j0.crl (hash: 4EbHlZqI5FtsS6KtR8+sToRTW579qCtqBMrBmc1/kQw=)
                          2: 6B576C449E5711EABC193842C4F9AE02.roa (hash: rmBjNT0g6o5OQJ7VMnQunSAodjeObi4QujloW5TWZhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl
                          rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2466 (0x9a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA141, serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D
        Validity
            Not Before: Dec 22 19:24:58 2025 GMT
            Not After : Dec 29 19:24:58 2025 GMT
        Subject: CN=69499b0a-ed03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:95:0e:92:e2:13:10:08:4d:d4:65:70:24:
                    24:44:f2:9a:ef:34:48:58:63:82:51:27:4d:e9:4a:
                    ac:7a:ab:00:7e:91:2a:3d:2f:3d:8c:01:9a:5f:56:
                    8b:62:62:67:a1:e7:90:7a:96:64:47:18:dd:19:95:
                    82:23:88:4f:c0:13:8a:62:8c:76:11:6a:3d:58:91:
                    4d:ac:e1:3f:56:64:8b:17:24:ff:eb:eb:2b:77:f9:
                    37:4f:15:6b:31:93:5b:ea:91:5f:f0:6b:1f:9d:bd:
                    64:a7:09:fa:c9:01:63:ce:96:19:b2:69:f9:24:67:
                    ca:13:34:79:17:f1:a4:2a:ef:9c:f6:02:5e:db:2b:
                    75:fd:d5:97:9a:2a:d6:8f:8b:db:09:4a:c8:82:73:
                    1a:3b:74:cf:c1:75:e8:1b:43:9c:ad:44:1d:b5:b6:
                    47:01:1b:a9:5f:9b:34:9d:5a:19:1d:ec:f9:ed:bb:
                    f5:3b:8e:a6:01:ba:9e:84:40:70:23:61:1d:fc:5e:
                    05:e0:2e:26:7a:9b:d2:18:15:11:ff:5d:74:11:41:
                    1f:a8:a8:19:87:21:5d:bd:8b:9d:65:6c:5b:ee:93:
                    0a:ce:7e:70:82:14:49:d2:6b:ca:95:59:82:e8:4a:
                    ce:00:3a:7e:75:44:93:57:a0:33:22:02:00:dd:7c:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:16:91:72:42:BF:BB:1A:59:80:F0:8F:BD:3D:C7:DC:7E:F8:4F:41
            X509v3 Authority Key Identifier:
                keyid:13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e3:36:09:4a:62:b7:92:53:f3:88:1c:ef:c6:b7:b9:27:76:
         3c:da:97:ac:ab:3a:f2:01:d0:91:b6:72:ad:d7:48:4d:d7:26:
         a8:87:cd:74:64:9e:ef:98:2d:93:76:8a:2a:41:73:b8:de:69:
         e6:20:e4:3d:4c:3f:0c:f2:96:6f:83:0f:50:17:af:01:ef:a4:
         39:3b:21:84:70:80:73:38:57:02:2b:5a:b3:02:77:6a:22:5a:
         28:48:36:5f:59:7b:5d:c9:ce:51:61:08:d9:5c:4b:7c:58:66:
         7e:db:e3:ff:70:9c:bf:57:8f:b2:b0:e5:81:13:5d:82:4a:a0:
         b7:18:51:01:33:73:9a:01:59:5f:31:87:40:c2:37:28:d3:63:
         4e:40:00:ac:ec:eb:9d:67:b4:d3:c0:16:a6:ed:e1:e5:79:40:
         aa:34:92:48:bc:c8:57:6f:3c:e9:22:78:72:ad:b7:70:cd:4d:
         5a:94:10:ef:7e:0e:d3:05:09:1d:ec:28:cb:d1:6f:cd:72:0f:
         a7:75:b0:d1:ef:4c:c6:ec:b8:96:dc:27:1b:32:6c:c0:be:d4:
         41:8c:2c:9f:07:13:7f:d5:44:47:82:e9:8b:53:b8:73:98:ee:
         b1:2e:15:96:eb:7a:04:c2:6b:d8:4d:fa:f2:a9:ce:6c:cd:c2:
         85:0e:d4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:29 2025 by rpki-client