This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
File:                     r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json)
Hash identifier:          l7yaFTsdA0j8hvIM9VOba24NCQ98HSxYJmHaxyXyuVQ=
Subject key identifier:   DC:36:44:AE:99:A6:7C:CC:7F:BC:82:2D:43:E0:7F:7A:49:DC:44:2F
Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37
Certificate issuer:       /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
Manifest number:          0244
Signing time:             Tue 23 Dec 2025 00:52:36 +0000
Manifest this update:     Tue 23 Dec 2025 00:52:36 +0000
Manifest next update:     Tue 30 Dec 2025 00:52:36 +0000
Files and hashes:         1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: yz58bZtZDcY8MsSFITE7dp2NF3v5xgnet403FlhkyKs=)
                          2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: Dx7BujyDWBTPK8FDZBcp5GgmogMZnafYGexXcGahR58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl
                          rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37
        Validity
            Not Before: Dec 23 00:52:36 2025 GMT
            Not After : Dec 30 00:52:36 2025 GMT
        Subject: CN=6949e7d4-db77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0b:34:1e:17:4d:9e:3b:24:38:2c:5b:e4:e1:
                    2d:35:24:84:7a:d1:63:d2:f4:f7:ca:79:10:79:a8:
                    6f:dd:1d:2f:e0:32:fc:f5:87:bd:aa:0b:bb:d4:94:
                    b3:5b:d0:c2:a8:7b:00:e4:a7:87:ab:3e:cf:b5:1b:
                    58:37:3b:8f:7b:2d:a2:83:d0:08:ac:42:80:d9:c0:
                    00:bd:97:88:a2:68:c6:b9:a3:8b:a4:24:23:cc:4b:
                    f0:5b:57:ae:16:68:03:60:15:fc:71:a6:bf:49:bc:
                    15:e2:f4:1f:3a:72:07:3d:05:05:e8:d7:07:27:0f:
                    30:c4:7d:96:98:c8:42:a5:04:fa:34:4a:d0:74:dd:
                    6e:88:38:04:78:bd:c7:60:ec:bf:9f:52:80:f3:dc:
                    a1:f9:28:02:a1:71:62:88:93:13:6b:04:2e:7a:43:
                    a7:70:7d:ec:62:11:2a:0a:54:3c:90:1b:2d:2d:e7:
                    01:f5:05:26:d5:3a:7c:a5:01:b2:17:b8:d7:aa:14:
                    30:ec:1b:f7:bf:73:7b:f6:da:16:61:c2:13:60:97:
                    c1:e2:be:dd:3d:51:b5:52:e0:63:2e:32:b7:1f:e6:
                    49:6d:3f:5e:2e:1a:08:f4:c8:b3:e0:6f:15:bf:7e:
                    c5:b2:3c:d6:04:ed:c9:51:61:19:49:0c:b1:a2:43:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:36:44:AE:99:A6:7C:CC:7F:BC:82:2D:43:E0:7F:7A:49:DC:44:2F
            X509v3 Authority Key Identifier:
                keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:89:b0:5f:00:89:40:c5:b2:a5:1f:ec:04:db:e6:eb:d0:dd:
         3d:e7:e8:40:16:60:c8:26:d8:c4:79:14:62:ad:0c:8e:b2:6d:
         2d:83:ca:cc:fd:ec:6c:4c:ac:af:8e:60:2a:53:84:69:5e:81:
         99:9b:48:84:51:28:0e:8d:1f:5c:f9:59:67:79:f3:bf:fe:56:
         86:8c:67:c8:c3:94:30:d0:58:64:63:29:02:73:d3:7c:71:24:
         e9:47:9d:98:2a:7c:f7:ad:28:c1:84:cc:b3:cc:3d:45:f0:cc:
         0e:f0:7c:8c:a8:59:59:d0:51:b2:a1:6d:ad:5f:fc:f3:01:87:
         95:6c:d0:09:b7:b8:1d:ed:ae:bf:35:ff:d0:7b:38:2f:1b:ad:
         d9:d2:5e:f8:b5:c2:74:78:05:ea:2f:06:8b:e4:3a:53:75:95:
         29:a0:45:a2:05:38:2c:b6:fb:02:05:cd:0e:59:a3:b9:c1:00:
         e5:e3:05:e6:cf:67:d3:c0:87:fa:d0:94:bc:b6:c8:33:42:7d:
         52:11:ce:0a:46:d9:15:39:c6:ea:27:e0:a6:f4:be:81:c6:cb:
         83:c4:17:56:51:0c:95:b4:b3:ce:89:1c:d7:59:b3:c5:6a:a6:
         f4:f9:22:78:f3:9c:1d:fa:20:db:bc:66:85:cd:75:d1:f7:15:
         1b:d4:2b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:51 2025 by rpki-client