This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
File:                     v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json)
Hash identifier:          YuVpPBPer3djLB6Bcf9r0XreEInYus8ohDiDzgy77s0=
Subject key identifier:   4D:42:E3:01:0A:DF:C6:3D:50:19:17:D9:F3:B6:3E:41:42:38:95:52
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Certificate issuer:       /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial:       0748
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
Manifest number:          06E6
Signing time:             Thu 04 Dec 2025 21:15:25 +0000
Manifest this update:     Thu 04 Dec 2025 21:15:24 +0000
Manifest next update:     Thu 11 Dec 2025 21:15:24 +0000
Files and hashes:         1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: XhyS9ovlab/ZuaIXBtUtNj+WEUMBePGpndJ9m7GELZw=)
                          2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: y4GtwygNXHOsgApCazrA1K5LMWjkg33ysXo8KtVSOnk=)
                          3: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: UwSCk8PiXVxxp/HUKiEsKMP9QLxahaMhhaVASnsqLPY=)
                          4: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: H9Y3DaflkrUF1wxbldqrT+3B0vj/ROqeiUXQ97YC1aw=)
                          5: 671FC40EE29211EE94348874C4F9AE02.roa (hash: 8z6xDKhwld/+PqMlkxmQW4jjFgb0KSjTx84Nej4v1h8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
                          rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864 (0x748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
        Validity
            Not Before: Dec  4 21:15:24 2025 GMT
            Not After : Dec 11 21:15:24 2025 GMT
        Subject: CN=6931f9ed-95d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:68:53:70:46:ab:c5:05:17:82:7b:4f:67:
                    e4:18:91:13:17:40:60:42:cd:67:c1:b5:4c:86:04:
                    d2:b5:67:d7:f9:b5:9d:92:17:7f:62:5c:07:f3:b6:
                    36:8e:45:93:0b:c4:a3:dd:dd:3d:0e:86:6d:06:26:
                    bf:96:8f:ec:b0:cf:0b:5e:9d:08:c0:0c:2d:9c:ca:
                    43:ca:2b:64:a8:4e:69:a6:75:71:53:c8:be:f4:92:
                    ec:4f:e8:36:7c:c1:55:02:00:da:a6:fa:b1:56:c7:
                    13:54:97:fc:87:07:4b:ba:f8:ac:0f:b6:14:69:57:
                    f4:55:9e:6d:e1:12:39:ea:b0:9b:29:63:d5:07:b0:
                    a2:03:9c:18:f9:94:96:5c:fe:41:c8:81:75:ec:fc:
                    9f:86:22:bd:d3:b0:13:18:1d:3b:98:c5:fa:70:35:
                    94:4d:8e:5d:bc:dc:94:78:95:c3:f4:54:60:11:18:
                    fc:4e:56:61:f9:a4:54:2f:fd:c6:41:f7:4e:a0:94:
                    4b:d3:e4:f4:39:2a:76:31:43:85:5b:44:47:a7:c3:
                    56:d3:9b:be:a1:34:cf:19:12:59:47:9e:ed:e1:b9:
                    a7:28:ef:e4:fa:c4:7c:4e:85:4c:28:04:70:33:4e:
                    90:f8:f8:f6:df:8e:13:83:91:24:d8:72:1b:44:2f:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:42:E3:01:0A:DF:C6:3D:50:19:17:D9:F3:B6:3E:41:42:38:95:52
            X509v3 Authority Key Identifier:
                keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:9d:58:b5:8b:88:c5:3c:be:3a:a0:a6:7a:b4:e1:db:82:83:
         14:ba:3e:a0:9c:00:c6:29:b1:6c:7d:4e:6e:4b:03:e1:b4:11:
         56:a9:62:fe:a9:c3:9e:49:93:5c:61:19:1b:1d:9c:32:69:b3:
         7f:c3:b5:bc:a6:53:e6:02:4f:b4:ec:97:66:9d:a4:47:9e:c0:
         be:34:fd:51:c5:2a:29:00:c5:4e:a5:df:5a:a0:36:20:59:f5:
         4c:09:aa:d4:f1:70:84:df:bc:32:53:82:9e:bd:38:20:e1:26:
         38:14:da:0e:68:17:14:7d:8b:7c:d7:58:83:35:88:cc:56:e5:
         4b:42:a0:72:a6:f3:97:f3:d5:c4:ef:32:d9:10:a6:8f:a7:c5:
         17:21:3f:4e:72:3e:84:92:e6:e3:c7:f5:e1:4a:55:7c:5c:f1:
         80:dc:43:fc:87:b0:9d:6a:2d:c1:d8:1a:af:ff:ba:34:e6:d7:
         76:fa:66:f8:1d:4e:22:4f:14:42:1d:68:56:fa:3c:d7:53:16:
         85:fc:0a:f2:8a:ad:7c:8e:b7:f4:e2:cd:96:0a:b6:36:4c:fd:
         62:d2:b2:fa:a2:79:00:38:45:b4:6d:29:e4:cb:42:7d:72:65:
         4d:22:fc:f4:8e:e3:f5:73:91:19:26:67:a7:60:59:83:14:67:
         60:29:bb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:13 2025 by rpki-client