This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
File:                     r0YdV6kKM1svp3p6rsFnNJVJI7E.mft (raw, json)
Hash identifier:          DnhvMQTwafuIoVWtpW42Mjruq/zhf8OVtaSb8fGHcCI=
Subject key identifier:   E4:80:F1:10:0F:FA:AD:DC:4F:7D:78:8D:CC:27:27:A6:18:EA:8A:A8
Authority key identifier: AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1
Certificate issuer:       /CN=A9114EF6/serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
Manifest number:          B6
Signing time:             Fri 05 Dec 2025 04:12:04 +0000
Manifest this update:     Fri 05 Dec 2025 04:12:03 +0000
Manifest next update:     Fri 12 Dec 2025 04:12:03 +0000
Files and hashes:         1: r0YdV6kKM1svp3p6rsFnNJVJI7E.crl (hash: 73iWPrwjqh/Hgk3uggVSSqLqdQdPbJAv7r3PdT6AUOw=)
                          2: 7EF2846AD16911EF9ECCE01FC4F9AE02.roa (hash: jXWB36+aUwW3gMQ6oCZ4givUDcVN7PCST84/uqy66zs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl
                          rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114EF6, serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1
        Validity
            Not Before: Dec  5 04:12:03 2025 GMT
            Not After : Dec 12 04:12:03 2025 GMT
        Subject: CN=69325b93-d6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:6d:ec:40:94:29:e6:4a:39:35:98:d2:41:
                    d9:e6:74:35:dc:d8:62:b2:ed:15:22:3b:90:c6:c1:
                    53:71:74:08:83:48:77:08:85:3f:c8:65:fc:87:eb:
                    2b:6e:91:02:c6:67:83:aa:fe:37:94:3b:b1:19:af:
                    83:24:3c:0e:2a:f2:5f:c5:b8:fa:53:be:82:91:9c:
                    32:48:7e:b5:00:4b:69:32:6c:1a:7c:f8:cb:71:51:
                    6f:72:73:4d:71:8c:bb:99:7b:a6:ce:89:7a:44:c5:
                    b6:a9:ec:13:d4:19:cc:c3:a6:fc:1d:79:8e:12:53:
                    7e:08:01:55:34:47:dc:c5:db:d2:8c:f5:78:a5:4c:
                    44:20:c6:1f:a9:5d:da:bf:27:62:15:2f:c8:9d:10:
                    bb:c1:16:1e:b6:93:5a:6f:d5:86:64:0d:95:a4:55:
                    5c:5c:f4:9e:82:9b:3b:3c:5d:83:f5:51:28:04:50:
                    6d:bf:74:c8:2c:20:73:2a:97:24:3a:87:89:33:88:
                    8a:fc:84:f3:5f:cb:de:04:0e:10:5b:12:f0:37:c8:
                    04:7c:c7:24:ad:4f:e9:9a:ba:65:ac:1e:c5:30:1a:
                    bd:82:95:66:4a:21:96:e3:6c:3b:94:58:e6:2d:37:
                    07:f7:53:23:c1:03:fe:d4:2c:3f:2d:5e:fb:6a:7e:
                    a5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:80:F1:10:0F:FA:AD:DC:4F:7D:78:8D:CC:27:27:A6:18:EA:8A:A8
            X509v3 Authority Key Identifier:
                keyid:AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6e:1a:a3:79:34:1e:81:5a:80:62:76:44:bd:6b:57:40:87:
         ce:6f:63:85:6a:71:1e:09:56:e6:07:48:14:38:18:be:f6:97:
         95:84:a7:13:d1:91:3e:90:93:c0:b6:7f:ca:12:0d:74:81:2e:
         e3:2d:88:48:09:f5:76:8a:4f:e7:41:31:c4:01:c1:05:bd:17:
         62:ad:4d:e5:1c:26:2c:7b:e3:2b:34:f1:77:25:bf:f5:2f:35:
         9d:96:ce:6d:5a:17:cb:3d:85:0c:9c:45:9a:7f:65:0e:c2:d4:
         ba:9a:4c:33:63:38:a9:09:17:91:f9:95:d4:ca:a5:cc:d6:fe:
         2c:85:ba:f7:2f:fd:39:c8:f5:f9:f7:5d:f7:89:03:f3:5a:83:
         7b:22:71:54:fa:bb:3b:ae:a0:c6:fc:e4:8c:ab:3a:b1:07:4a:
         db:1f:bb:58:82:cf:e4:aa:14:f0:41:b0:07:b7:70:13:df:7e:
         fc:22:0d:8e:1e:2b:8c:4b:6e:77:6b:85:27:f7:d5:c6:2c:b6:
         56:73:6d:1f:4e:ea:95:ad:e8:1d:44:fc:db:29:43:5a:ca:9b:
         a3:36:62:5b:4a:7a:3f:18:a3:79:c6:65:9e:72:e5:09:ec:66:
         ae:79:e4:90:3d:ef:e0:54:7c:60:5b:b1:a0:66:95:0b:fb:74:
         c2:68:49:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:11 2025 by rpki-client