This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
File:                     6_d1-2stKz-APD8za4MAqL5r6YU.mft (raw, json)
Hash identifier:          e/KvD8sohnwFa5j26+HO5pd74Ma4LbE8kaInsUjE1rE=
Subject key identifier:   8E:7F:06:A4:3A:F2:61:54:DA:4E:A0:1E:7A:56:C7:4C:B5:7C:9B:26
Authority key identifier: EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85
Certificate issuer:       /CN=A91D65E6/serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
Manifest number:          0140
Signing time:             Tue 23 Dec 2025 03:22:26 +0000
Manifest this update:     Tue 23 Dec 2025 03:22:26 +0000
Manifest next update:     Tue 30 Dec 2025 03:22:26 +0000
Files and hashes:         1: 6_d1-2stKz-APD8za4MAqL5r6YU.crl (hash: l1nK1J9YlHxvgNfcB277RPqVhwoTk7K3m7O67e80MSI=)
                          2: 45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa (hash: CcUp55XuDgPxaWMypNloisBK2Ub48xmWh//qSjTOE5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl
                          rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D65E6, serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
        Validity
            Not Before: Dec 23 03:22:26 2025 GMT
            Not After : Dec 30 03:22:26 2025 GMT
        Subject: CN=694a0af2-06a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:a4:c9:1b:44:ec:54:29:d9:89:51:f5:a9:
                    8b:27:0b:f0:8c:49:af:2d:c0:a8:d4:a9:46:91:57:
                    4d:67:a8:58:d1:81:5e:a3:91:36:f6:55:eb:fb:07:
                    3b:5b:c0:87:5b:fd:51:3b:3f:79:2e:6d:8a:7f:d7:
                    42:a2:9e:ce:e0:3a:bb:d2:8f:fe:df:23:c1:9f:45:
                    fa:2f:6a:b4:64:48:46:62:7f:f2:39:ce:11:57:6f:
                    4f:c3:38:73:78:78:c8:48:2d:ee:39:5e:f9:1d:4e:
                    51:fe:fa:6f:38:39:ee:89:5c:a0:bb:e4:32:ee:7b:
                    c4:5b:38:b9:d0:9a:05:4a:2a:a6:84:32:0d:84:57:
                    21:d5:ea:2b:c8:c2:b3:9b:32:a7:bc:4b:04:b5:66:
                    71:90:cd:02:1d:db:a1:fb:90:45:a1:93:ae:ee:09:
                    68:80:84:3c:c3:e2:2b:fc:c0:53:d5:57:05:da:bc:
                    eb:2b:6b:45:9e:54:af:81:50:40:02:f6:82:c9:e4:
                    4a:c6:29:ec:42:15:1e:25:6b:24:df:be:46:ee:93:
                    ce:c4:70:a2:f4:3a:47:ce:7a:b0:bc:d6:6a:fd:18:
                    eb:f3:49:59:48:5c:2e:03:94:37:0b:37:b0:0b:d2:
                    18:de:12:77:ff:c0:2c:9e:18:f1:21:a8:fc:f8:d1:
                    a4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7F:06:A4:3A:F2:61:54:DA:4E:A0:1E:7A:56:C7:4C:B5:7C:9B:26
            X509v3 Authority Key Identifier:
                keyid:EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:b9:83:ad:9a:f5:6f:92:df:48:e5:58:72:bc:c9:a3:9f:
         92:38:69:3b:9b:78:37:62:aa:82:3f:e7:ac:fa:18:b7:a9:87:
         15:34:9e:0a:6e:1d:af:47:b2:e0:88:a9:b7:36:44:93:68:e5:
         09:08:4a:cf:50:e6:ff:fd:9f:3b:61:74:39:c6:8b:79:10:e3:
         00:34:6d:70:e6:70:90:e2:15:7a:97:48:32:06:c3:f8:9f:8c:
         70:6f:e8:55:0d:73:7f:01:71:67:0c:ee:aa:7f:c4:61:8e:88:
         c7:80:15:93:4d:22:46:dc:48:aa:3b:96:e2:17:db:87:0e:a8:
         dd:e4:61:e2:23:57:ae:28:48:09:3f:64:b2:49:18:73:a1:fa:
         ac:1c:03:94:fb:85:74:c3:d2:89:ed:7a:6b:ae:07:e7:54:2f:
         38:7c:87:06:b3:87:bb:f4:df:8c:fb:12:cd:47:42:5f:e9:7d:
         1a:d4:18:0d:d8:79:18:23:8a:56:3b:1d:87:13:56:06:05:ad:
         6e:01:d3:ac:13:12:34:dd:1c:2c:cc:d7:6b:1d:3d:7e:bd:a5:
         c6:a8:31:08:5b:16:78:47:80:58:72:4d:a2:1e:bb:5e:61:f9:
         d4:26:56:f5:72:e5:31:d0:25:88:3d:74:8f:55:22:60:8e:59:
         e1:08:d2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:04 2025 by rpki-client