This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
File:                     6sqCrlKk_xgNM2F5-DlQpasLx7M.mft (raw, json)
Hash identifier:          HbzLVfM1TXQJUVC0+iTpwwkkwmgMflpta95k5osxV6M=
Subject key identifier:   23:D2:56:9B:9E:1C:AF:98:0F:BD:AB:BB:F3:2F:75:D9:43:69:D7:F2
Authority key identifier: EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3
Certificate issuer:       /CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
Manifest number:          0138
Signing time:             Fri 05 Dec 2025 02:34:09 +0000
Manifest this update:     Fri 05 Dec 2025 02:34:09 +0000
Manifest next update:     Fri 12 Dec 2025 02:34:09 +0000
Files and hashes:         1: 6sqCrlKk_xgNM2F5-DlQpasLx7M.crl (hash: 0Vf1x+x1lrb2KrSRB4wlPcJTMNxUbSY2iCZT7WTbLJI=)
                          2: C2A2E774EEC311EE8832C93AC4F9AE02.roa (hash: ms7snh2IzeS7RUyS63vDyik3Jw03vBKHQY1xlDWMLMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl
                          rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91486D3, serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3
        Validity
            Not Before: Dec  5 02:34:09 2025 GMT
            Not After : Dec 12 02:34:09 2025 GMT
        Subject: CN=693244a1-7da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:a5:f7:5c:42:cc:b6:64:17:8b:4f:52:27:
                    10:5e:28:89:cd:e9:95:e2:f1:2f:05:8e:83:f6:43:
                    32:c4:c6:77:c9:dd:9a:0d:ec:f8:d4:41:99:c5:71:
                    b8:60:fc:a7:68:48:d4:b5:fc:9b:d3:a9:42:78:fa:
                    c3:65:31:cf:8a:06:5b:b3:41:e2:e5:19:15:fa:af:
                    d6:ba:1d:a6:db:37:cd:d9:91:d5:27:ab:86:1f:ff:
                    a7:6b:74:2e:58:37:fa:e0:8d:ea:4b:8d:41:24:73:
                    85:05:7b:57:99:9a:6b:87:b7:92:c6:94:ae:12:db:
                    8e:2b:aa:75:05:0b:65:7e:2f:55:99:e6:40:ac:8b:
                    de:80:15:b6:b3:4b:d9:f5:a6:a4:13:70:35:e9:22:
                    18:a1:68:14:9b:7e:79:0c:30:bf:77:55:cf:2f:62:
                    47:66:7c:2f:8d:10:68:74:67:81:4d:df:4e:09:7e:
                    ba:d3:12:68:19:72:de:77:e5:75:e6:2e:39:02:a4:
                    51:5d:eb:f5:69:40:da:20:ff:94:ab:5c:64:f4:18:
                    21:a0:78:c3:d5:fe:ce:bb:89:c5:84:90:4e:fb:96:
                    20:24:4f:38:ff:3d:03:b1:e7:cf:bd:b6:cb:87:17:
                    26:01:77:6d:ce:00:a0:b7:4d:c2:c9:42:24:d1:74:
                    34:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D2:56:9B:9E:1C:AF:98:0F:BD:AB:BB:F3:2F:75:D9:43:69:D7:F2
            X509v3 Authority Key Identifier:
                keyid:EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:23:d7:66:8d:cd:43:ef:2a:70:c0:7d:3d:8d:4e:19:fd:e7:
         01:7c:23:de:65:97:90:76:4c:ca:a0:65:a0:63:f1:63:75:9e:
         a7:1f:d8:05:9f:d5:b3:f9:93:fa:01:00:66:37:1d:db:1e:61:
         20:07:96:e1:69:ea:88:66:cc:4f:41:98:ed:fb:fd:c3:ce:73:
         5e:78:16:e3:6a:5e:57:26:6a:b6:c4:ef:06:39:82:19:c7:36:
         6c:58:1d:f0:c4:2a:ed:48:8b:98:c3:e6:4f:82:da:aa:0d:f9:
         7f:40:ba:7d:6c:2b:2d:20:63:ea:38:16:b7:36:be:f9:61:a9:
         a1:c4:54:b7:56:40:7d:2a:80:7f:8e:04:4d:84:5d:44:15:39:
         3b:63:4a:d1:62:ee:f4:40:42:ba:e4:a9:52:6f:7c:dc:cc:49:
         a9:c4:8b:05:00:e6:8e:22:f4:b1:25:46:3d:b6:ee:87:eb:92:
         ee:e4:ea:49:c8:9c:ec:03:a9:d1:c9:7b:e1:8b:73:c7:f7:8f:
         9f:a7:59:2a:83:d9:63:b8:08:e2:58:c1:51:4c:cb:f0:4a:54:
         bf:c3:25:1e:69:41:db:af:64:be:f2:5b:b3:d5:d1:6b:8d:c7:
         e0:ce:ea:fc:d4:bb:5b:97:83:85:1f:33:44:de:7f:8b:a9:3c:
         50:00:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:18 2025 by rpki-client