This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
File:                     C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft (raw, json)
Hash identifier:          ychg3wbRmt8ZJQUMPotw+8TVLWBzixgUFTzHu0haS4A=
Subject key identifier:   68:87:D3:A8:72:87:8F:6B:93:B9:1D:52:08:F8:14:39:60:D7:C0:D8
Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
Certificate issuer:       /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
Manifest number:          D6
Signing time:             Fri 05 Dec 2025 03:42:59 +0000
Manifest this update:     Fri 05 Dec 2025 03:42:58 +0000
Manifest next update:     Fri 12 Dec 2025 03:42:58 +0000
Files and hashes:         1: C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl (hash: xoY+3L1xKUCQH60smE69bpe39AHe+wAFOqFoKhJSLbU=)
                          2: FDC6BEA491FA11EFA4F0932CC4F9AE02.roa (hash: YBvvTG8CEcUFzimDCpf2NnR5CR5UGFVI9gkQ+sgXEds=)
                          3: 10C5553891FB11EFB901C22CC4F9AE02.roa (hash: ArlGMl3wEFoKu6XnIzHTkLugUTq0moKGL5QIiW5qRPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl
                          rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153944, serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
        Validity
            Not Before: Dec  5 03:42:58 2025 GMT
            Not After : Dec 12 03:42:58 2025 GMT
        Subject: CN=693254c3-ce08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:95:3a:6a:36:57:81:50:08:de:6e:f8:28:
                    49:eb:31:3a:bc:31:70:00:3e:ec:ca:a3:ea:64:57:
                    5e:c4:c9:33:df:82:91:b0:d1:ca:01:4e:6a:3c:fa:
                    ed:90:1e:a8:24:21:9c:76:9c:64:e3:23:d8:62:71:
                    a9:c8:ae:62:e9:07:c9:92:2b:6a:d6:6b:3f:74:25:
                    4c:84:f4:44:cb:6f:10:66:5c:9b:87:7e:50:3b:58:
                    8a:17:1d:2f:db:be:2d:56:05:82:a8:16:56:98:61:
                    25:09:7f:33:d6:53:e6:43:1d:87:47:05:46:4c:72:
                    9a:e0:78:d6:9a:c2:9d:cf:dc:27:45:e8:31:af:57:
                    d1:77:16:c4:73:99:0c:ec:7c:87:ba:4e:b4:e5:a6:
                    8f:bf:9b:6f:90:9a:77:de:73:97:ef:11:f4:c2:66:
                    f4:26:73:e3:72:0d:85:83:85:bf:30:74:d1:78:93:
                    06:37:3f:de:4b:30:ce:27:79:6e:12:9a:98:5f:64:
                    db:45:4d:93:4d:b1:30:ea:d4:8b:de:00:81:5f:d8:
                    e4:f6:94:6e:0b:51:9a:b9:80:fb:a4:a4:75:ed:e0:
                    3d:2b:e3:ff:bf:4a:2e:bf:7a:5c:bb:ed:9b:84:97:
                    5b:a8:66:19:e5:e1:0f:2b:1f:58:37:66:c5:f4:3e:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:87:D3:A8:72:87:8F:6B:93:B9:1D:52:08:F8:14:39:60:D7:C0:D8
            X509v3 Authority Key Identifier:
                keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:88:ae:2a:72:a7:cd:48:a7:6d:a6:63:ca:5e:e4:b8:9b:b2:
         76:cd:ba:63:1f:8e:98:86:94:92:f4:52:aa:68:71:93:e7:01:
         28:1c:5a:e7:f1:8a:ee:cd:89:83:db:4b:20:c5:e0:2c:77:0c:
         3f:f0:9d:1f:4c:e4:90:02:31:8f:53:a1:9c:ff:fb:71:06:6f:
         b0:77:61:7b:51:be:fb:04:f7:a0:1b:8a:23:68:a1:c5:0d:00:
         a5:5e:a2:98:ac:c1:27:47:a0:59:1b:f2:ea:75:a3:b9:60:56:
         2c:06:01:4d:e0:91:98:f3:9d:18:be:89:b6:86:ae:c8:03:85:
         ce:b3:8c:46:f2:a1:31:f8:ab:40:09:5c:be:30:e4:be:b9:1e:
         d3:a0:ad:5e:ab:a4:0f:d1:9d:7d:06:41:94:d5:1b:53:7c:f4:
         4f:d7:06:5b:9f:f6:ac:eb:eb:2b:3a:5b:5c:a8:71:58:4a:d9:
         d8:bc:73:21:75:14:79:de:ae:0f:18:db:5f:e9:7b:47:ba:f6:
         82:6f:66:84:bf:0e:d6:2b:25:ae:17:c0:46:9b:c7:87:e6:b6:
         60:11:c6:e1:99:0c:e2:a1:21:e9:a8:1f:f3:5a:87:7c:32:cc:
         9f:1e:75:a2:04:84:cc:9b:35:96:cd:a2:2e:61:24:f6:2c:49:
         62:6a:b4:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM5NDQxMTAvBgNVBAUTKDBCQTA3QThCRDUzQzJFMUZGRkY0QTI0NTA1QzQzNDA0
NTQ5NTA5RkUwHhcNMjUxMjA1MDM0MjU4WhcNMjUxMjEyMDM0MjU4WjAYMRYwFAYD
VQQDEw02OTMyNTRjMy1jZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAneiVOmo2V4FQCN5u+ChJ6zE6vDFwAD7syqPqZFdexMkz34KRsNHKAU5qPPrt
kB6oJCGcdpxk4yPYYnGpyK5i6QfJkitq1ms/dCVMhPREy28QZlybh35QO1iKFx0v
274tVgWCqBZWmGElCX8z1lPmQx2HRwVGTHKa4HjWmsKdz9wnRegxr1fRdxbEc5kM
7HyHuk605aaPv5tvkJp33nOX7xH0wmb0JnPjcg2Fg4W/MHTReJMGNz/eSzDOJ3lu
EpqYX2TbRU2TTbEw6tSL3gCBX9jk9pRuC1GauYD7pKR17eA9K+P/v0ouv3pcu+2b
hJdbqGYZ5eEPKx9YN2bF9D7b4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiH06hy
h49rk7kdUgj4FDlg18DYMB8GA1UdIwQYMBaAFAugeovVPC4f//SiRQXENARUlQn+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzk0NC85NTBDM0VCQzkx
RjkxMUVGOEU2RUVFMjdDNEY5QUUwMi9DNkI2aTlVOExoX185S0pGQmNRMEJGU1ZD
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M2QjZpOVU4TGhfXzlLSkZCY1EwQkZTVkNmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Mzk0NC85NTBDM0VCQzkxRjkxMUVGOEU2RUVFMjdDNEY5QUUwMi9DNkI2aTlVOExo
X185S0pGQmNRMEJGU1ZDZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBtiK4qcqfNSKdtpmPKXuS4m7J2zbpjH46YhpSS9FKqaHGT5wEoHFrn
8YruzYmD20sgxeAsdww/8J0fTOSQAjGPU6Gc//txBm+wd2F7Ub77BPegG4ojaKHF
DQClXqKYrMEnR6BZG/LqdaO5YFYsBgFN4JGY850Yvom2hq7IA4XOs4xG8qEx+KtA
CVy+MOS+uR7ToK1eq6QP0Z19BkGU1RtTfPRP1wZbn/as6+srOltcqHFYStnYvHMh
dRR53q4PGNtf6XtHuvaCb2aEvw7WKyWuF8BGm8eH5rZgEcbhmQzioSHpqB/zWod8
MsyfHnWiBITMmzWWzaIuYST2LEliarQS
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:26:19 2025 by rpki-client