This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
File:                     q6uaWObZNbfys4ayc-NP3Dhg0pk.mft (raw, json)
Hash identifier:          mkNgGWCdolxWqNWOEqUIORbOIAzsQnJPDf1pPLRatgI=
Subject key identifier:   CB:99:72:1B:16:D2:CF:B2:71:B8:6A:C1:02:DF:CF:23:C2:7D:91:DA
Authority key identifier: AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99
Certificate issuer:       /CN=A915802F/serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299
Certificate serial:       023A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
Manifest number:          0236
Signing time:             Fri 05 Dec 2025 00:16:10 +0000
Manifest this update:     Fri 05 Dec 2025 00:16:09 +0000
Manifest next update:     Fri 12 Dec 2025 00:16:09 +0000
Files and hashes:         1: q6uaWObZNbfys4ayc-NP3Dhg0pk.crl (hash: DUuwUoLSli4TNZUTCnfp+zJB3h58rPvXnoh1fGc0zLU=)
                          2: 0CDB293E6E3F11ED9DF20483C4F9AE02.roa (hash: d+wu5/8SQF07OZNomUNLLvrSwSOmchI/wXzBDk7VXfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl
                          rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915802F, serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299
        Validity
            Not Before: Dec  5 00:16:09 2025 GMT
            Not After : Dec 12 00:16:09 2025 GMT
        Subject: CN=6932244a-cbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:e5:47:cd:33:f2:34:50:6f:5b:54:21:c3:
                    f3:f2:60:a4:06:ac:2f:87:25:af:01:d8:60:9c:c1:
                    31:bf:88:bb:69:9a:49:d0:3e:88:42:5f:8e:9f:94:
                    cf:54:cb:3e:39:7f:1c:81:78:06:32:ca:16:4a:96:
                    ce:e7:c8:ca:e4:bc:50:f4:be:a9:fe:41:9d:95:c7:
                    0d:48:a8:0f:66:d9:f8:d8:75:f9:89:97:99:2c:43:
                    c2:c0:99:23:54:ee:05:a6:ec:fd:58:de:06:4f:a9:
                    9c:9c:66:77:94:8a:c2:b8:d2:9d:6c:f2:47:c8:0a:
                    ef:ab:6b:6c:73:28:58:e0:f6:5b:aa:9c:5f:56:e0:
                    8d:7b:6e:ad:91:25:5c:3c:8b:05:fb:2d:cd:6b:34:
                    26:04:dc:bf:23:ed:74:9e:e1:55:f9:d2:85:a3:d8:
                    8c:11:59:d9:67:e7:43:38:4f:77:9a:2b:36:2a:d7:
                    d1:a6:cb:10:a7:2d:a6:da:cf:1c:72:4d:6d:0b:62:
                    1d:2a:ef:13:7a:fa:ea:5d:4c:e5:f9:2e:27:a3:0d:
                    bd:11:68:26:79:06:d7:84:43:e5:c8:36:37:08:5e:
                    c1:67:bb:83:de:15:66:ec:ab:97:f3:63:46:8b:3a:
                    d8:8d:55:69:09:30:ce:c9:01:8d:56:42:9a:32:02:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:99:72:1B:16:D2:CF:B2:71:B8:6A:C1:02:DF:CF:23:C2:7D:91:DA
            X509v3 Authority Key Identifier:
                keyid:AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:4c:31:6f:a8:ed:35:89:d6:47:db:eb:14:36:f9:bd:84:09:
         ca:dd:94:07:22:09:47:8c:b2:e4:23:83:b2:b0:98:a3:6c:0a:
         05:c8:06:66:b7:97:64:fe:40:4e:1c:f3:01:99:f9:35:bb:c2:
         37:24:cd:dd:76:8d:ba:dd:8a:b5:ee:eb:93:7a:7c:bd:03:5a:
         c3:70:8a:c4:9a:7c:bc:42:2f:00:ca:80:fd:ca:67:97:cd:54:
         70:1d:e7:49:2b:95:6f:4d:5b:01:ad:38:38:08:07:57:13:23:
         ec:55:70:b0:4c:96:4d:9a:22:4f:42:aa:40:a0:90:36:65:d5:
         95:7a:cd:59:0c:fc:ec:31:cb:a6:ca:05:82:41:fe:e6:f9:d5:
         3f:2c:db:de:2d:22:af:8b:13:cf:8f:69:ae:a4:51:8b:41:55:
         72:cd:c2:16:af:18:25:d0:6f:15:c4:d8:6c:20:bc:6e:ef:a9:
         cb:1a:c6:e6:a5:f8:2a:67:5c:0b:0a:da:10:89:62:ac:de:28:
         3e:74:f5:38:9f:50:4b:63:b8:0a:39:ef:2f:32:5b:a5:de:03:
         7f:b4:b3:60:6c:0a:d1:fa:b2:d9:4d:88:ec:93:6d:0b:69:26:
         64:27:80:ce:fe:5e:e7:2f:b5:3c:78:ca:e4:80:f8:b3:e8:74:
         fb:2c:d9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:04:09 2025 by rpki-client