This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
File:                     6IdrUasrF3RAzUxM0uTwpZjgOBw.mft (raw, json)
Hash identifier:          1j5mYQvs91rZpIjst0YT24Bz/1kekRrovzMs16ArHAE=
Subject key identifier:   CE:10:AE:FC:5D:47:F0:15:E8:00:68:67:D2:07:D9:20:B0:FF:1C:26
Authority key identifier: E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C
Certificate issuer:       /CN=A913AE23/serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
Manifest number:          011E
Signing time:             Fri 05 Dec 2025 02:55:50 +0000
Manifest this update:     Fri 05 Dec 2025 02:55:49 +0000
Manifest next update:     Fri 12 Dec 2025 02:55:49 +0000
Files and hashes:         1: 6IdrUasrF3RAzUxM0uTwpZjgOBw.crl (hash: IpljzVUHoRSJfCmWCPqpJHw5ePTkvUlc08C+bS9mRC4=)
                          2: 20B02A7A2C6D11EF9E3D5230C4F9AE02.roa (hash: QH07aDb+fmKlDQWdj0T2NqSMHqeuEIv/QY/EnszX8xc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl
                          rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:55:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE23, serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C
        Validity
            Not Before: Dec  5 02:55:49 2025 GMT
            Not After : Dec 12 02:55:49 2025 GMT
        Subject: CN=693249b5-9c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:21:9e:e7:f2:bc:8c:ea:b4:a8:c5:50:2e:
                    e9:2d:22:49:fd:1b:ee:e8:cf:2f:02:bd:0f:4b:15:
                    8a:5f:83:17:62:ba:15:18:70:4c:16:d9:81:17:09:
                    a7:99:29:aa:f6:ad:fb:14:55:12:d4:a1:9d:16:5a:
                    bc:2b:52:26:d5:a5:6e:9e:8f:d8:c0:42:9f:74:a9:
                    00:ff:1a:d9:e8:ef:c6:1c:7d:59:4d:05:e8:57:d5:
                    4e:eb:eb:87:78:f8:29:b6:05:26:1e:c1:6e:9a:22:
                    c2:c0:fe:7d:86:0c:82:74:4a:2d:e4:8d:c6:ff:32:
                    26:66:89:e5:b2:dc:47:57:30:e1:fd:47:b0:2e:9f:
                    78:55:a0:8b:12:36:4e:a9:27:8b:e4:e1:11:50:26:
                    55:f1:17:9a:12:40:c3:0e:34:3f:10:88:02:51:ed:
                    63:21:3c:cc:20:76:d1:76:e3:e8:73:ec:7e:27:56:
                    ab:c7:d0:9d:f9:01:93:a7:52:47:79:b1:37:c2:f5:
                    d0:12:ec:7c:39:5a:e4:1c:e8:bb:e1:9e:bb:a4:93:
                    29:c3:86:c9:80:74:a9:47:4a:be:af:8e:fd:14:5e:
                    f1:7a:ff:b0:29:17:9c:2d:a6:e1:d1:2f:e8:93:9a:
                    6a:b2:ac:4f:58:c5:87:79:43:24:02:29:f7:03:4a:
                    ff:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:10:AE:FC:5D:47:F0:15:E8:00:68:67:D2:07:D9:20:B0:FF:1C:26
            X509v3 Authority Key Identifier:
                keyid:E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:ba:24:31:ec:51:1f:3e:55:43:2f:f3:b9:de:a2:d3:9e:50:
         6d:91:3e:bc:e6:64:ca:75:86:37:a5:cd:fc:82:72:a5:48:1c:
         63:15:0a:4a:42:ce:69:cf:1d:1d:ac:3e:04:03:26:5c:49:8f:
         fb:5d:74:9c:52:dd:c7:5a:ea:2d:8f:8d:ef:2b:b3:ba:27:20:
         59:f1:49:6d:a9:11:5b:1e:13:4f:c3:da:a2:bf:ee:73:c7:f2:
         10:63:0c:92:4d:ba:5f:5a:2d:a2:16:7f:a9:ff:ec:ec:39:48:
         98:a3:6d:ce:27:ae:26:90:e7:4d:dc:fc:d3:4d:b3:93:79:82:
         03:a1:85:2d:86:d0:be:33:74:d8:9e:d4:19:b2:38:5b:8c:59:
         9a:17:0c:c5:3b:d2:c8:36:c1:07:00:3e:ed:dd:43:9f:06:16:
         84:83:f4:20:40:4c:8c:2e:25:35:e0:f8:a6:f6:aa:02:fe:91:
         52:06:c7:47:b5:d3:57:17:82:be:25:5b:2c:32:50:46:af:05:
         76:58:bb:75:7d:2d:51:d1:ba:b1:01:37:4f:7f:13:ee:2d:93:
         b4:3c:ba:79:88:ce:32:99:5f:84:e0:1a:71:56:99:97:3c:9d:
         56:e4:a3:73:fd:bb:22:35:09:5b:f5:fe:43:70:f2:20:bb:10:
         e2:35:13:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:04 2025 by rpki-client