This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
File:                     6uK86DXkKxFfGLP-Do8n-EpHSZY.mft (raw, json)
Hash identifier:          ADyxoZkHhwmZEVF6HYgAcN4Xz+Dan/FYPjoJa6srXrg=
Subject key identifier:   06:2E:6F:06:17:B7:76:97:D2:5E:1B:EB:24:7B:46:5B:44:4B:6B:AC
Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
Certificate issuer:       /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
Manifest number:          017F
Signing time:             Fri 05 Dec 2025 01:56:36 +0000
Manifest this update:     Fri 05 Dec 2025 01:56:35 +0000
Manifest next update:     Fri 12 Dec 2025 01:56:35 +0000
Files and hashes:         1: 6uK86DXkKxFfGLP-Do8n-EpHSZY.crl (hash: 7kDi/FPyHjDd6tjurB1qVzaLnE/yZ/YDQHiVvfeoz1I=)
                          2: 5F57D01A5EA511EFB0E1B468C4F9AE02.roa (hash: gUWx0NFdXc+5m0GyQOzPhC8d8WUCa2XrObn3BWMcy0w=)
                          3: A2348A2E8EBD11F0848C250FC4F9AE02.roa (hash: P4t1JoBwMAtSUSse6Vs6XIMlYjrk416jR4wspRulBCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl
                          rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C0DE, serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
        Validity
            Not Before: Dec  5 01:56:35 2025 GMT
            Not After : Dec 12 01:56:35 2025 GMT
        Subject: CN=69323bd4-80af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:cd:56:c4:80:61:04:9e:75:49:97:4e:1c:
                    72:64:8b:30:76:d0:4e:3e:ec:da:1c:77:4b:d8:75:
                    6b:2b:4b:cd:aa:ae:1a:e9:f5:77:49:86:cd:89:b8:
                    88:ab:dc:71:8d:c7:2f:68:8c:ce:74:14:36:56:c4:
                    09:9a:a4:56:f8:6f:95:d2:4b:2a:f1:c7:23:f0:87:
                    f1:bb:8a:03:ce:61:24:07:11:7d:72:62:04:a3:20:
                    7b:e1:ba:38:c9:62:a8:15:3d:4f:36:04:57:2a:4a:
                    53:e4:79:25:32:51:60:56:70:5d:6a:a1:6e:1d:d1:
                    bd:6b:aa:35:97:4e:e2:8f:43:d0:85:dd:70:c7:b7:
                    a0:ef:a3:86:06:6c:34:30:9f:af:d7:8e:95:4d:38:
                    41:df:e6:16:33:2c:4e:67:e9:41:6c:68:c7:5c:61:
                    4e:6a:28:b3:cc:4b:a3:65:a0:c2:ad:3c:87:57:d7:
                    bf:fe:b8:12:ab:61:4f:9a:7b:56:90:69:88:87:38:
                    fe:ba:e1:e3:90:db:c6:88:b1:cf:99:c2:7c:f1:50:
                    fa:92:c7:47:c5:07:af:46:ea:1d:58:3d:07:e3:d8:
                    ba:9b:c8:b7:ca:94:ec:d0:b9:02:2f:a4:b7:59:00:
                    5e:f3:06:4b:f1:63:37:33:ef:01:83:b2:09:68:b2:
                    bf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2E:6F:06:17:B7:76:97:D2:5E:1B:EB:24:7B:46:5B:44:4B:6B:AC
            X509v3 Authority Key Identifier:
                keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:44:e8:74:8b:5a:63:86:07:49:96:32:0f:f9:37:9f:f8:3e:
         bf:fb:66:10:dd:56:66:bf:d0:33:0f:07:c3:88:97:dd:f8:b5:
         3f:ba:d3:2f:0d:c5:e5:85:b0:70:f3:92:c3:ed:ba:5c:41:7a:
         7d:4f:5a:ea:20:1b:42:de:0b:e5:c2:db:4c:2d:4e:b7:72:32:
         18:bf:9e:59:3b:78:d7:74:8c:25:d8:81:8d:f9:6f:81:dd:f5:
         92:df:49:8f:ee:3d:16:cc:84:a6:d4:db:32:cf:69:2a:6d:14:
         87:11:5b:31:67:ee:39:10:18:08:2e:f0:52:48:6c:d5:6c:41:
         ce:fe:aa:9f:33:9c:fe:b0:b9:68:57:ea:e8:fa:07:97:c2:84:
         2c:4a:ac:3f:7c:bd:77:66:64:72:a6:bd:31:27:36:b1:6e:ed:
         6f:32:d2:59:c4:be:e4:8a:91:c4:a7:51:f5:3b:54:9b:f4:ad:
         c2:e8:6a:06:df:8b:18:3b:68:20:d8:c2:f6:e7:15:5a:88:eb:
         e1:f0:8a:94:18:02:eb:7d:d6:35:f7:d5:1c:1c:28:55:18:c2:
         f7:d4:23:02:11:39:0f:4b:6e:6a:48:38:b6:5e:42:9f:90:a7:
         92:6a:36:45:a9:b6:96:23:d6:29:3b:2d:a2:0d:f2:41:72:18:
         63:5d:af:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:10 2025 by rpki-client