This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
File:                     RC6qL6yoXGzvgcRKZaY36GftNTQ.mft (raw, json)
Hash identifier:          KZeSToGvSJg1m5tEaVl3kU1la9pwCEjSQ514MkGEqrI=
Subject key identifier:   33:4B:6A:F0:37:6F:06:36:A6:B4:AB:0B:74:86:CD:6E:CF:05:37:59
Authority key identifier: 44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34
Certificate issuer:       /CN=A9145E01/serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
Manifest number:          04
Signing time:             Fri 05 Dec 2025 05:56:59 +0000
Manifest this update:     Fri 05 Dec 2025 05:56:58 +0000
Manifest next update:     Fri 12 Dec 2025 05:56:58 +0000
Files and hashes:         1: RC6qL6yoXGzvgcRKZaY36GftNTQ.crl (hash: 62ZRtqxQDw5n/VN3pPkD20lWrL9fN4g6wfZeNeAwrh0=)
                          2: 042373B2CF5A11F08A42EF16C4F9AE02.roa (hash: EggkpcVOgI9lqzWLNGUO4SNdA0AExjaPLsB6eR+b1dk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E01, serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534
        Validity
            Not Before: Dec  5 05:56:58 2025 GMT
            Not After : Dec 12 05:56:58 2025 GMT
        Subject: CN=6932742b-62e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0a:39:f7:28:61:fc:6d:79:e1:97:0c:a4:43:
                    53:0e:f1:dc:6e:ed:7b:4b:a5:c0:ca:37:14:cc:28:
                    0e:4d:88:04:40:9b:67:66:12:ff:0b:2c:97:04:a0:
                    f7:77:76:ef:5f:56:6f:82:d1:b4:4a:dc:83:fc:28:
                    6f:56:35:64:1b:1b:87:01:da:05:fc:60:86:0a:4c:
                    82:39:6d:33:66:25:a3:d3:23:2f:aa:d3:81:41:48:
                    46:a6:08:c4:c7:ae:62:a4:fa:1b:1a:dc:e8:cd:e5:
                    bf:c4:60:26:78:2a:fa:c9:d8:24:b5:8e:cc:42:35:
                    7e:2b:32:81:25:31:dd:b0:94:81:92:94:5b:37:64:
                    b3:97:07:1d:d8:2d:8f:97:1f:c8:88:f6:1d:3f:76:
                    f6:cf:c3:15:d6:a1:0a:85:aa:27:17:0f:d8:6c:44:
                    5f:bc:fc:2b:56:14:4a:5a:45:72:71:24:15:54:04:
                    1a:21:8a:3f:98:de:df:d7:36:61:de:b4:69:d1:2e:
                    24:6c:be:07:d5:e5:a0:27:68:85:e1:7f:5e:92:04:
                    f4:4a:dd:ea:39:3d:5e:87:8b:55:6f:d9:eb:bd:9c:
                    10:27:06:bc:c5:41:b3:44:17:83:67:9e:7e:fa:2f:
                    20:c8:68:b6:32:47:ff:6f:43:86:f2:a2:b0:43:1f:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4B:6A:F0:37:6F:06:36:A6:B4:AB:0B:74:86:CD:6E:CF:05:37:59
            X509v3 Authority Key Identifier:
                keyid:44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:df:76:0e:77:6f:92:5d:01:c2:68:da:9d:e8:1d:f4:93:07:
         d5:02:10:7d:d1:7d:e2:08:85:be:98:f8:d3:5d:24:0b:b6:a7:
         75:5e:81:20:a5:1d:8b:91:8f:bb:43:ea:c0:20:99:4f:1f:18:
         77:cb:71:44:84:43:2e:c9:55:08:2b:85:c8:66:5b:6a:c4:83:
         95:31:2c:d0:87:62:47:94:8e:c5:26:87:9d:68:49:f2:ef:a9:
         d3:c7:c1:06:06:a9:a0:52:08:6d:3a:1c:1a:85:5a:0f:7e:1b:
         e7:52:53:b9:eb:7e:3e:81:fa:de:35:d2:4f:52:68:75:fd:fc:
         c0:ba:d1:85:b5:57:e6:c3:76:7b:f7:5d:9c:03:b1:58:e8:a9:
         79:da:6c:8c:bb:89:3a:45:4e:ad:be:64:ba:6f:ac:44:95:5a:
         59:b3:df:c4:65:28:da:b5:bd:62:d1:6f:43:6e:09:a8:2c:82:
         25:a8:0f:6b:cd:f2:49:d1:1c:04:14:62:73:b9:8c:a8:b3:c3:
         3e:56:fa:fd:5e:9d:10:33:f3:3e:e3:19:15:e9:cf:53:7d:5f:
         82:a7:c9:a5:bf:a8:dc:bf:c7:90:52:e4:0b:89:3c:1c:2f:d8:
         b3:b7:1d:67:43:5b:4b:16:27:4d:4d:bf:4b:fb:42:78:be:1e:
         03:4f:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:50:15 2025 by rpki-client