This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
File:                     6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json)
Hash identifier:          etp2iLvnTz0k+XbBo2KtHizyTFGA5+7RS3crhRkwiKo=
Subject key identifier:   C5:6B:F9:B6:1C:AA:EB:2B:B5:36:35:EA:1F:72:AE:39:E9:66:7D:72
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Certificate issuer:       /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
Manifest number:          0238
Signing time:             Fri 05 Dec 2025 00:12:51 +0000
Manifest this update:     Fri 05 Dec 2025 00:12:50 +0000
Manifest next update:     Fri 12 Dec 2025 00:12:50 +0000
Files and hashes:         1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: wIfUGPVFGjR67I6mO9vjN1j/hIqDqPp4GJdqCM0iQsI=)
                          2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: qDl9A66XUfdxXb2Z9BDWMcaLCM85XHiGpfBrshr3vQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
                          rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
        Validity
            Not Before: Dec  5 00:12:50 2025 GMT
            Not After : Dec 12 00:12:50 2025 GMT
        Subject: CN=69322383-7a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:5d:39:c8:44:08:38:cd:02:95:b9:2d:32:
                    8d:e2:c2:e9:b4:cd:52:c4:8e:1e:2a:33:18:e1:4b:
                    86:f8:fb:17:9c:99:ff:d0:bd:0e:f8:ae:8d:d8:63:
                    27:c0:51:0f:da:77:57:88:38:48:44:e4:8c:a0:f3:
                    c9:24:50:94:1d:34:15:22:14:92:b9:a1:db:a2:1f:
                    95:85:0c:da:87:39:b0:b7:5a:ba:ac:a2:f3:0f:16:
                    68:3c:09:2a:cc:d1:50:ce:cd:5a:7e:b2:4f:51:a8:
                    87:4f:34:87:9e:79:1a:6e:b8:cf:a2:f7:16:31:b3:
                    76:c5:4a:43:23:c5:09:cf:8d:b9:bd:c6:51:f0:65:
                    fb:a7:31:29:70:bf:11:34:33:44:83:e0:d6:03:06:
                    20:cb:8e:c1:58:f4:f7:43:14:46:57:fa:a3:5c:a4:
                    f6:14:71:f9:b6:36:3c:e4:6e:f9:b6:f3:3e:54:dc:
                    f4:67:e5:d6:7c:9d:dd:fb:26:dd:1d:79:06:b4:d7:
                    34:7e:e5:f1:fe:5a:b4:33:ad:d3:f2:2b:24:95:9b:
                    6f:a2:b8:28:9e:77:e3:9c:a1:18:20:de:87:c6:81:
                    8f:5b:55:e3:d5:85:e3:c3:24:0f:5e:8c:d9:96:f7:
                    d3:d3:ad:ee:ad:c4:7c:a8:d9:9e:f7:90:51:27:8f:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6B:F9:B6:1C:AA:EB:2B:B5:36:35:EA:1F:72:AE:39:E9:66:7D:72
            X509v3 Authority Key Identifier:
                keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:29:70:06:47:c6:93:dd:c5:24:bb:63:d0:2a:cf:89:22:ca:
         a2:58:96:b1:df:25:56:dc:90:9e:bb:61:5b:fc:12:ff:d0:0a:
         2f:ff:1a:96:50:df:ca:5e:eb:00:af:b9:ec:7c:6c:3c:b2:8f:
         e3:16:e6:51:a5:09:c1:0d:ec:1f:b8:a7:1b:db:f6:e7:78:da:
         db:f7:3e:a0:46:2a:f8:7c:02:09:44:00:f7:c0:0f:8c:f1:a6:
         eb:55:b6:ea:3b:81:34:99:3d:dc:45:27:b6:85:46:6e:d6:d7:
         f7:6f:ff:fd:86:0d:39:71:47:58:8a:68:9a:ad:53:f3:c0:ea:
         0a:2e:56:c1:ab:5c:ad:fe:56:9c:13:25:47:22:e0:35:0d:24:
         a3:13:44:e0:b9:bf:30:62:e2:da:04:d4:12:ce:4d:07:5d:a2:
         e9:c8:34:53:de:9a:13:66:fc:94:81:59:bc:88:dc:54:66:42:
         14:c6:46:75:31:70:70:24:ad:19:63:07:36:fc:e9:41:02:28:
         a2:b8:3b:2e:c5:eb:6b:c1:a7:aa:5f:ea:17:47:74:75:8c:a1:
         9b:43:17:27:42:81:61:2b:1b:79:b8:b7:1c:d8:9d:ce:d9:c2:
         11:33:26:9c:79:61:e6:cd:3b:8e:55:7e:df:b9:be:cb:78:d0:
         48:2a:0b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:44:58 2025 by rpki-client