This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
File:                     6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json)
Hash identifier:          Nat8P1AF6C2DVmdEIHC7++GkAVEVx014OLMVjAKA8tw=
Subject key identifier:   B6:6E:E6:63:8F:E9:16:3D:4D:B5:EF:44:9D:C3:F1:40:B3:33:83:7D
Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60
Certificate issuer:       /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
Certificate serial:       0DA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
Manifest number:          0D9C
Signing time:             Sat 06 Dec 2025 17:21:12 +0000
Manifest this update:     Sat 06 Dec 2025 17:21:11 +0000
Manifest next update:     Sat 13 Dec 2025 17:21:11 +0000
Files and hashes:         1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: 4Ro93o1ErJUAKXbLlubVbIfbE8nXi6AG5uV7/0ifbjs=)
                          2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: s4ZYVNsJ/dDC5UQbemd3E28U99L1NBZ1Sp+DApyMoKk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl
                          rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3494 (0xda6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
        Validity
            Not Before: Dec  6 17:21:11 2025 GMT
            Not After : Dec 13 17:21:11 2025 GMT
        Subject: CN=69346607-ac1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:61:73:3d:fe:9e:de:49:18:3e:20:b5:0b:
                    0e:d9:7f:d7:86:09:fe:59:7d:1a:23:57:26:51:ba:
                    71:fb:c9:ce:af:95:cc:c6:6a:1a:fb:85:c3:c0:c7:
                    28:29:9e:4d:53:58:cf:7e:74:79:09:c1:eb:d4:0a:
                    33:df:8c:f6:fe:2b:55:e5:41:57:95:cb:a8:0b:8d:
                    a6:9a:69:04:5b:e7:31:60:3b:51:5f:18:5d:89:f8:
                    d0:5b:0b:00:3c:a2:72:72:4e:c0:f3:b0:7e:b6:28:
                    99:ee:fa:cc:90:b0:fa:de:b0:13:34:37:66:25:8e:
                    48:d9:e6:42:38:b7:cb:04:e1:1a:a3:39:a6:0b:71:
                    91:69:54:d2:9f:64:4b:45:13:79:ff:60:b5:d5:7c:
                    e7:0d:b1:14:a9:e4:14:7b:67:0b:69:f7:7e:80:78:
                    ee:a4:15:fc:7a:5b:4b:c9:25:0e:f2:e3:64:dd:35:
                    d5:cc:7e:aa:69:6c:8c:ef:b8:4e:24:ab:a8:dd:36:
                    ea:83:28:26:42:e0:15:1b:d0:ec:3b:84:fe:3b:aa:
                    8b:78:cb:71:d8:17:0e:f6:28:a9:24:b2:0d:ce:99:
                    69:5c:09:60:51:12:70:65:19:12:a1:38:49:c1:8e:
                    da:4e:88:f2:c5:a5:c7:9c:b6:d5:87:ea:ec:20:55:
                    74:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6E:E6:63:8F:E9:16:3D:4D:B5:EF:44:9D:C3:F1:40:B3:33:83:7D
            X509v3 Authority Key Identifier:
                keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0c:99:71:85:22:ef:d8:86:f9:82:ba:3b:9d:2d:38:a5:76:
         ce:92:e1:29:5d:df:3b:3f:49:64:7f:c7:00:41:fa:e1:63:20:
         b7:b8:e9:4f:d2:9c:16:3f:8f:da:f5:45:52:ce:99:fc:b6:7c:
         aa:1c:86:53:be:59:86:9f:41:9a:44:f3:86:c3:e2:68:b4:02:
         47:fb:3b:af:6e:f7:91:9b:47:88:e9:88:61:18:67:0d:39:9e:
         a5:c4:d1:be:8e:c6:ce:84:6c:e6:31:56:ac:eb:2a:b9:65:48:
         43:cf:d7:21:1c:3b:09:9b:9d:cc:6a:3c:d8:f6:42:cf:fe:44:
         03:dc:7c:25:f7:6c:03:1a:94:26:c5:41:35:1a:e8:45:8a:ac:
         a5:fb:03:94:4e:bc:10:cb:0b:32:91:d1:d0:88:ad:a7:38:a6:
         bf:11:4b:7e:10:2b:39:c9:83:40:47:a2:ef:66:db:cb:d2:aa:
         10:63:3f:40:f8:62:da:1a:2c:75:67:5c:8a:a1:86:07:ba:f5:
         61:5f:ad:de:52:72:11:ee:f1:fe:c8:d4:b8:84:08:00:cb:35:
         82:25:ae:81:f3:c7:ba:f5:78:10:69:bb:45:21:27:cc:ff:52:
         a9:06:48:5a:25:30:fe:b1:4a:17:66:67:14:9b:34:27:e7:17:
         bf:19:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:33:18 2025 by rpki-client