This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
File:                     6_FxbSSrM1DAvAcLRejf29D88b8.mft (raw, json)
Hash identifier:          mdANKBevb2Swe4YFKVWopOPTap48SvyxuTf9fS8cRKE=
Subject key identifier:   CB:C3:17:2C:B2:78:8A:55:6B:F4:7F:27:FF:0A:BE:E4:91:F2:CB:70
Authority key identifier: EB:F1:71:6D:24:AB:33:50:C0:BC:07:0B:45:E8:DF:DB:D0:FC:F1:BF
Certificate issuer:       /CN=A914E4C3/serialNumber=EBF1716D24AB3350C0BC070B45E8DFDBD0FCF1BF
Certificate serial:       27A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
Manifest number:          27A1
Signing time:             Sat 06 Dec 2025 15:24:43 +0000
Manifest this update:     Sat 06 Dec 2025 15:24:43 +0000
Manifest next update:     Sat 13 Dec 2025 15:24:43 +0000
Files and hashes:         1: 6_FxbSSrM1DAvAcLRejf29D88b8.crl (hash: zwwpbAScAM2bZbS/TSBXHoFMfWiq9ztk/cDI+VC9MiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.crl
                          rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10145 (0x27a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4C3, serialNumber=EBF1716D24AB3350C0BC070B45E8DFDBD0FCF1BF
        Validity
            Not Before: Dec  6 15:24:43 2025 GMT
            Not After : Dec 13 15:24:43 2025 GMT
        Subject: CN=69344abb-7413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:18:4c:e3:d2:e7:74:3b:85:ba:d6:1f:0f:9f:
                    22:16:82:6d:a7:c2:d8:8d:62:bc:6a:e4:f2:c8:ff:
                    de:01:ba:68:67:b8:dc:d8:68:49:70:65:46:cc:12:
                    a4:14:94:bc:ac:2d:61:fa:ea:e8:6d:fa:72:e5:5a:
                    44:f9:53:82:84:c0:6e:5a:0b:32:74:21:97:17:41:
                    b3:04:86:96:9d:b3:42:ef:6b:0e:0a:35:d4:47:46:
                    f6:8e:7d:ab:7e:f9:cf:ad:44:05:0d:69:b4:2f:d1:
                    d5:e6:e6:4d:34:7a:87:71:01:39:d0:ce:57:ca:4b:
                    44:1c:23:a6:aa:2a:a8:44:54:9b:2f:2b:9c:ba:91:
                    dd:15:7a:7c:8a:45:f0:39:8c:87:61:8c:cd:54:8c:
                    8f:fb:8f:6b:1f:c1:77:1e:a5:76:11:67:c0:bc:23:
                    e9:df:f8:2c:64:0d:53:a7:e8:02:8a:92:93:88:0c:
                    a8:9f:87:35:33:16:c9:9e:f6:e4:a6:4a:61:99:15:
                    d7:5e:79:db:80:1f:c8:87:85:46:fc:5e:c4:59:de:
                    06:97:49:c5:cd:cf:93:91:9c:3a:f8:f7:64:2d:a1:
                    3e:86:12:47:8e:84:17:1a:19:fe:0d:a3:05:b3:75:
                    e2:a4:f5:8d:83:6c:ca:5d:aa:34:d8:db:a6:c5:38:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C3:17:2C:B2:78:8A:55:6B:F4:7F:27:FF:0A:BE:E4:91:F2:CB:70
            X509v3 Authority Key Identifier:
                keyid:EB:F1:71:6D:24:AB:33:50:C0:BC:07:0B:45:E8:DF:DB:D0:FC:F1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c6:00:07:5b:16:0b:ca:11:cf:82:49:bf:c6:50:08:98:b9:
         5c:d3:6f:db:02:7d:c9:4a:1f:c7:be:fb:e3:7c:17:86:f5:fc:
         5c:89:0c:f8:d4:cc:74:ca:d9:c5:6f:74:f2:97:2d:58:2e:24:
         da:fc:30:3f:6c:da:89:44:4d:51:3d:a0:48:bc:f8:26:2e:15:
         77:5a:16:39:0e:19:45:f2:ca:82:25:d7:72:da:02:a7:9a:b0:
         36:87:a8:c9:4b:53:c3:2f:1b:05:3d:46:02:66:63:74:ad:ca:
         11:92:7e:af:0b:1f:d8:1e:fc:02:cd:51:ff:69:4f:82:6d:96:
         df:4f:26:36:5c:d8:e4:5d:31:81:60:24:23:4f:0a:45:3e:29:
         80:77:52:3e:6c:e9:23:d4:22:74:86:da:9c:3d:83:fa:0e:12:
         b9:ee:99:08:95:bf:a9:7c:a5:4f:3e:d0:e8:4d:07:74:7f:3f:
         b4:9e:25:ce:b0:8f:e7:5d:ab:ab:da:6e:56:16:7f:50:3b:50:
         7d:f9:8f:94:75:06:67:5f:1c:e1:a4:f2:1e:d1:c7:fd:bb:ab:
         13:d4:c7:a2:12:84:a1:13:5b:b2:83:63:3a:bd:57:ea:72:d9:
         bf:aa:81:8c:52:80:02:56:99:0b:3b:d7:07:3a:c6:26:75:04:
         63:5e:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:52:19 2025 by rpki-client