This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
File:                     a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft (raw, json)
Hash identifier:          +3jDyJurOzqK54/xyi/AficAzTlH2MTx5xew+w9svg0=
Subject key identifier:   41:A4:11:50:B1:D7:0F:D4:BA:42:B1:95:C6:45:E8:54:0A:85:F2:BF
Authority key identifier: 6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D
Certificate issuer:       /CN=A9112804/serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
Certificate serial:       0CF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
Manifest number:          14D6
Signing time:             Sat 06 Dec 2025 17:30:10 +0000
Manifest this update:     Sat 06 Dec 2025 17:30:09 +0000
Manifest next update:     Sat 13 Dec 2025 17:30:09 +0000
Files and hashes:         1: a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl (hash: YquMX+sdqHjce8u4X4SscSBQG7gvYccQp666754Cb8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl
                          rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3314 (0xcf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112804, serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
        Validity
            Not Before: Dec  6 17:30:09 2025 GMT
            Not After : Dec 13 17:30:09 2025 GMT
        Subject: CN=69346821-4d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:56:be:b3:0c:49:a9:43:55:db:03:4d:b0:
                    43:e8:11:17:a3:bb:fe:86:69:09:98:bb:6c:d6:d2:
                    90:ff:8c:5f:89:41:b1:88:0e:92:14:4c:54:81:b9:
                    9b:3d:15:d0:c9:a6:cb:05:1c:75:80:bc:38:ca:ab:
                    1a:6b:e6:98:2c:9d:f6:d4:37:2c:59:e5:16:f3:98:
                    2d:c2:2b:82:7b:4c:98:7d:23:ad:42:26:3f:3a:38:
                    fc:c3:4d:36:13:5e:d8:f6:43:10:fc:59:7e:6c:ba:
                    39:00:e6:86:75:12:60:9d:a6:29:7c:8c:21:2b:f1:
                    65:0c:12:08:e8:2a:84:07:08:07:ff:c5:e4:81:8a:
                    91:4b:3b:50:41:7b:1b:e3:d0:95:f3:2f:80:da:df:
                    8d:bd:88:5f:ef:fe:c1:59:bb:90:ca:aa:48:7b:15:
                    fb:3e:dd:e2:28:59:f3:98:b8:df:5c:4f:1f:d1:eb:
                    20:1b:7b:bc:ca:47:d6:27:71:0f:8c:25:5b:0d:d4:
                    4e:45:6d:53:0c:3a:0b:85:77:2a:fd:e2:b5:89:53:
                    75:60:e1:bd:1a:17:2a:73:2d:b3:9e:63:c0:90:e0:
                    92:cf:76:0e:9e:a3:76:b1:a1:3f:09:dd:b2:5e:cb:
                    e3:9b:31:3a:a7:67:87:66:57:90:7d:2e:e2:61:71:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A4:11:50:B1:D7:0F:D4:BA:42:B1:95:C6:45:E8:54:0A:85:F2:BF
            X509v3 Authority Key Identifier:
                keyid:6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:77:9b:3f:1f:5a:8b:47:63:9a:d7:f3:39:58:dd:21:ee:b8:
         d0:6f:40:8e:fd:f9:72:37:5b:f7:97:5a:31:ee:94:8a:53:a1:
         bc:26:5f:c1:ef:86:72:1b:ee:ab:3a:6a:99:63:f7:36:db:f7:
         cd:37:bf:d1:da:52:70:9e:7b:53:5a:d0:88:e1:64:0b:0c:cf:
         44:c3:de:b3:be:d4:dd:cb:a6:45:f3:64:38:62:b4:75:2b:09:
         cd:c6:a4:51:ed:ad:05:cb:28:e4:aa:da:4f:47:1e:3c:fa:53:
         59:51:35:08:2d:32:af:74:02:be:c0:e6:38:be:86:13:e8:e1:
         fc:1b:0a:40:84:e1:f9:16:14:06:56:95:15:5d:28:c5:46:d8:
         84:73:85:6b:a1:0f:c7:b5:ee:2f:d9:db:cc:ab:33:fe:eb:12:
         93:ab:60:b4:43:79:a9:c7:19:75:6e:d4:b3:9f:d3:c7:15:50:
         27:eb:19:eb:d3:71:f6:b7:db:3a:50:1c:93:3d:2f:3a:29:e0:
         f7:fe:7c:c9:a8:72:b2:2e:d2:e4:ce:98:a1:e7:85:c8:c1:24:
         1f:f8:38:2f:59:30:2e:48:9e:69:f8:03:b5:f1:c5:76:1f:91:
         cf:79:c6:ed:40:fd:23:d8:d0:49:08:46:af:a8:02:80:c3:48:
         64:cd:70:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI4MDQxMTAvBgNVBAUTKDZCQTc5QUQ1NEE5MzgzQ0I1MjY3MzM5OTZCRTY2RTky
QkY4RDM4NEQwHhcNMjUxMjA2MTczMDA5WhcNMjUxMjEzMTczMDA5WjAYMRYwFAYD
VQQDEw02OTM0NjgyMS00ZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0QBWvrMMSalDVdsDTbBD6BEXo7v+hmkJmLts1tKQ/4xfiUGxiA6SFExUgbmb
PRXQyabLBRx1gLw4yqsaa+aYLJ321DcsWeUW85gtwiuCe0yYfSOtQiY/Ojj8w002
E17Y9kMQ/Fl+bLo5AOaGdRJgnaYpfIwhK/FlDBII6CqEBwgH/8XkgYqRSztQQXsb
49CV8y+A2t+NvYhf7/7BWbuQyqpIexX7Pt3iKFnzmLjfXE8f0esgG3u8ykfWJ3EP
jCVbDdRORW1TDDoLhXcq/eK1iVN1YOG9Ghcqcy2znmPAkOCSz3YOnqN2saE/Cd2y
XsvjmzE6p2eHZleQfS7iYXHsjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGkEVCx
1w/UukKxlcZF6FQKhfK/MB8GA1UdIwQYMBaAFGunmtVKk4PLUmczmWvmbpK/jThN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0
RkExMUU5OTkxODQzM0RDNEY5QUUwMi9hNmVhMVVxVGc4dFNaek9aYS1adWtyLU5P
RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E2ZWExVXFUZzh0U1p6T1phLVp1a3ItTk9FMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjgwNC8zNkVDREE1NEY0RkExMUU5OTkxODQzM0RDNEY5QUUwMi9hNmVhMVVxVGc4
dFNaek9aYS1adWtyLU5PRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3d5s/H1qLR2Oa1/M5WN0h7rjQb0CO/flyN1v3l1ox7pSKU6G8Jl/B
74ZyG+6rOmqZY/c22/fNN7/R2lJwnntTWtCI4WQLDM9Ew96zvtTdy6ZF82Q4YrR1
KwnNxqRR7a0FyyjkqtpPRx48+lNZUTUILTKvdAK+wOY4voYT6OH8GwpAhOH5FhQG
VpUVXSjFRtiEc4VroQ/Hte4v2dvMqzP+6xKTq2C0Q3mpxxl1btSzn9PHFVAn6xnr
03H2t9s6UByTPS86KeD3/nzJqHKyLtLkzpih54XIwSQf+DgvWTAuSJ5p+AO18cV2
H5HPecbtQP0j2NBJCEavqAKAw0hkzXAT
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:36 2025 by rpki-client