This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
File:                     3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json)
Hash identifier:          CRTz7dBmTcbl52FDyO/v/wA6bCIeiJ0DLsBgsKqFrRA=
Subject key identifier:   73:6D:13:D6:65:F0:01:70:9E:C9:B8:86:67:95:59:02:2F:F9:15:E6
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Certificate issuer:       /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
Manifest number:          B6
Signing time:             Sun 07 Dec 2025 07:28:48 +0000
Manifest this update:     Sun 07 Dec 2025 07:28:48 +0000
Manifest next update:     Sun 14 Dec 2025 07:28:48 +0000
Files and hashes:         1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: wmCNr+xwG2sXgA+yo1HU50EciwbKaEnMcSdoLk7TSFA=)
                          2: 5CEF82D2D33E11F0AD0B405AC4F9AE02.roa (hash: lpBz8HpFIqfsqCV19EQkmpFSbAEYeJCPchDGn0DYL7E=)
                          3: 5E2D7894562911F0A243A66DC4F9AE02.roa (hash: w0THdO9T6h078pEq3+Lht0f7Z/7SLZrFg+11EWkOMY4=)
                          4: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: iwbEqaCxKmbwG8HWY/Xyjd6spo1BsNrw7Oh89SRylss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
                          rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
        Validity
            Not Before: Dec  7 07:28:48 2025 GMT
            Not After : Dec 14 07:28:48 2025 GMT
        Subject: CN=69352cb0-111f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:8b:26:49:b7:07:8a:a3:82:17:6d:00:40:
                    ce:45:11:8a:65:78:dd:0d:fb:2b:79:3a:7c:85:9c:
                    e9:74:5c:9f:10:b5:82:e1:08:7f:68:ea:a8:b7:48:
                    00:18:33:c0:bb:66:3e:c5:01:0b:ca:01:dd:b3:8d:
                    3c:13:a0:17:a8:ec:4e:b8:0d:84:f4:ca:26:a4:e7:
                    59:15:07:e2:e0:a8:3a:60:6a:70:83:88:70:9d:4b:
                    4f:a8:08:b4:8a:53:58:ef:56:94:3d:b0:c9:ea:d8:
                    c7:85:14:f5:28:56:ce:6f:83:51:b4:2b:f2:5b:1b:
                    13:32:fc:61:97:94:09:c0:d1:9c:dc:ba:ec:1d:50:
                    7b:fb:2b:f7:4a:f9:72:1d:df:61:b7:fd:b9:21:a0:
                    ca:8e:58:73:63:b8:72:fc:37:a9:48:89:0b:6f:7e:
                    06:38:a5:b5:81:b7:cb:42:f3:ef:fd:43:81:1d:a6:
                    83:9f:62:d8:89:fa:88:7b:e9:9f:8c:dc:c7:62:4f:
                    60:4a:ca:99:34:7a:dc:85:a8:ec:a0:d6:a3:21:8d:
                    5d:52:b5:ef:70:03:8e:d9:fa:56:22:60:4d:c0:23:
                    75:b7:2a:26:2a:1a:18:64:6b:a3:05:c9:4b:d8:a0:
                    b9:51:f8:64:df:1c:bf:85:b8:b1:bb:1b:41:d7:34:
                    36:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6D:13:D6:65:F0:01:70:9E:C9:B8:86:67:95:59:02:2F:F9:15:E6
            X509v3 Authority Key Identifier:
                keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7f:43:1f:ac:0c:2d:b6:b1:b9:c6:1b:1a:14:30:b1:74:99:
         ee:6b:48:8c:61:ca:5c:73:e8:47:b3:75:96:ed:0e:38:c8:f0:
         89:f0:64:56:71:79:1c:ef:1d:0f:a6:28:f2:59:21:ad:31:6c:
         fe:68:85:d2:8f:0f:42:16:48:a2:0b:39:cf:83:9f:3e:87:ba:
         5c:72:ac:bb:e3:d3:e8:43:3e:5d:5b:bd:99:6a:ba:5a:d4:bd:
         aa:67:1b:51:e9:78:ac:e8:d1:45:24:c4:0c:43:42:7c:43:ff:
         b0:7a:d2:eb:83:f3:a3:79:98:92:3b:4a:52:b9:3c:04:d4:d2:
         04:c7:eb:bc:c2:a3:13:87:24:58:32:23:8b:4a:38:ee:73:14:
         59:d5:9b:dc:9c:e5:60:ba:c8:31:df:fc:ad:97:8e:f5:38:75:
         18:e3:83:d8:b0:50:20:19:5b:49:26:ed:f5:bb:8d:e7:7f:52:
         b5:04:5e:f8:ec:fa:ca:34:1e:d1:d2:d3:b6:e7:d5:1b:77:8a:
         0c:ba:6d:55:1a:e0:ff:8b:ff:be:6d:15:9b:66:cb:dc:84:09:
         20:49:53:db:61:7e:81:09:73:01:93:09:ad:6f:45:e3:eb:25:
         1d:92:85:51:52:be:aa:20:e4:7f:84:80:08:fd:3c:ec:f8:e9:
         a5:16:d3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:02:10 2025 by rpki-client