This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
File:                     q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft (raw, json)
Hash identifier:          //ujYw0+O2UmjYBL/xIx3QOrKRd70Dvtz/PfNMX0Hy8=
Subject key identifier:   08:4F:F0:75:F5:D5:54:3C:16:67:84:5B:EA:74:0D:8F:F5:DF:BB:11
Authority key identifier: AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91
Certificate issuer:       /CN=A914845D/serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
Certificate serial:       0696
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
Manifest number:          0691
Signing time:             Thu 04 Dec 2025 21:12:50 +0000
Manifest this update:     Thu 04 Dec 2025 21:12:50 +0000
Manifest next update:     Thu 11 Dec 2025 21:12:50 +0000
Files and hashes:         1: q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl (hash: LnTgiksUUfZ9u/aF8USPA/ItAw0Q7yaXYK/YVH5JC6k=)
                          2: 96A61404AAA911EBA223275EC4F9AE02.roa (hash: E9czvgeh6YRFhRYFfzW1p9Rsfnmm6YmfPInujvKlVu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl
                          rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1686 (0x696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914845D, serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
        Validity
            Not Before: Dec  4 21:12:50 2025 GMT
            Not After : Dec 11 21:12:50 2025 GMT
        Subject: CN=6931f952-c2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:1b:54:35:81:7c:db:ec:79:81:bc:12:5b:
                    ad:e7:d3:ea:a7:53:95:33:e1:2f:2c:34:b6:02:11:
                    81:6f:a4:79:18:9d:02:d4:32:59:f2:63:b5:69:26:
                    64:24:95:39:04:6f:f5:ef:13:c9:ab:01:68:fc:84:
                    50:14:f1:16:7b:91:86:95:85:2d:18:ec:de:c2:fb:
                    7d:4c:ef:63:c9:42:18:5c:c6:9d:4c:24:07:29:53:
                    42:71:ed:32:b2:d5:f7:d1:1c:89:34:4f:19:47:ac:
                    88:82:d1:c1:9c:27:b3:b7:18:ee:d9:ae:e9:15:5a:
                    3b:3e:a4:10:81:d9:08:41:37:c6:47:35:dc:10:80:
                    73:be:27:a0:4f:da:1e:d1:b8:78:cb:d8:2d:51:5d:
                    ce:8d:8a:49:eb:3b:5c:86:10:6d:5d:e3:b4:d3:e3:
                    8c:18:8c:f4:d3:e4:da:0f:47:3d:13:ee:ad:c6:8c:
                    a5:e6:64:22:c5:ca:d8:21:49:61:49:c6:7f:dc:82:
                    94:54:07:fa:30:13:3b:1e:1f:84:84:83:88:c0:0d:
                    d2:d5:94:f8:b3:74:29:2b:1f:44:0a:21:c8:d3:5b:
                    ee:2d:f0:35:c3:5a:54:b7:71:2d:c6:cd:1e:48:e8:
                    62:55:76:2f:2b:4b:b3:6b:23:38:8c:ea:81:7d:47:
                    91:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4F:F0:75:F5:D5:54:3C:16:67:84:5B:EA:74:0D:8F:F5:DF:BB:11
            X509v3 Authority Key Identifier:
                keyid:AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:f7:53:c0:de:59:ea:8a:27:ff:9a:8f:f0:ba:19:50:6a:
         4b:f8:34:53:8f:f2:aa:2f:f5:86:68:aa:69:d6:17:33:56:8d:
         45:46:0b:e6:d0:87:ec:d6:17:37:3d:aa:17:c8:7e:d3:16:9f:
         6c:25:d2:1d:3c:45:2d:2c:d6:12:f3:82:29:0f:56:44:35:20:
         4f:8d:9a:86:5b:60:0e:cb:86:8f:41:c8:d4:e1:e9:87:aa:3d:
         82:4b:2f:e7:d3:c4:ce:90:9d:10:2b:bf:8a:5c:92:d4:a8:37:
         30:90:d0:80:cb:66:c1:f8:7c:1b:56:34:82:02:13:52:fa:22:
         a3:c1:f6:7b:e1:84:03:bd:24:9e:8b:a3:23:1a:7a:f6:14:f4:
         ea:9c:ed:c2:a0:c8:bc:a5:b2:1f:c7:f0:d3:ac:db:d1:cf:ef:
         f1:0b:32:bc:34:ca:90:cb:d2:b1:91:d5:82:cb:10:59:9b:9e:
         b8:04:db:ae:82:e9:05:c8:19:c6:0d:e5:97:58:da:1e:b9:9c:
         c2:4a:d2:c3:98:62:78:0c:1c:29:e3:4a:d2:4a:d3:d7:39:c2:
         cf:37:58:af:16:cb:61:c7:fb:89:55:55:1e:fa:15:78:7c:87:
         be:94:90:17:23:ab:cb:78:8f:72:e1:54:2c:ea:db:c4:15:64:
         9c:01:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:31:28 2025 by rpki-client