This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
File:                     xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json)
Hash identifier:          7zEizdb5qhbsZazgIRFZC9v+r9CFA+Z5VOIpRBV2FzQ=
Subject key identifier:   44:33:E7:07:25:34:EC:AF:67:A6:7D:F1:18:4B:AB:16:BF:F2:EE:11
Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE
Certificate issuer:       /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
Certificate serial:       1358
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
Manifest number:          134E
Signing time:             Thu 04 Dec 2025 16:38:17 +0000
Manifest this update:     Thu 04 Dec 2025 16:38:17 +0000
Manifest next update:     Thu 11 Dec 2025 16:38:17 +0000
Files and hashes:         1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: B+D2VLQAwcbQv7o8Ae+B+HXQ1xEHYT3OKQ6goj+I2xI=)
                          2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: 0tM/V7nX9hi4ETzuWiBmb9YtIWsrgFEIcg6fokAj5jY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl
                          rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4952 (0x1358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161EA6, serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
        Validity
            Not Before: Dec  4 16:38:17 2025 GMT
            Not After : Dec 11 16:38:17 2025 GMT
        Subject: CN=6931b8f9-124b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:6a:3a:b9:ed:c0:ef:4c:54:7c:81:73:fb:
                    bb:f2:35:29:2f:d7:d5:8d:9d:9f:6a:5a:cf:28:b8:
                    38:23:07:2e:40:fb:36:ca:a9:90:ab:eb:76:e2:e0:
                    7a:30:5e:19:95:a5:26:e2:d9:6f:7f:75:46:a9:e8:
                    6a:b3:cd:16:a7:e6:6f:36:91:1b:b3:dc:9a:ce:9a:
                    f6:bd:3a:8f:98:d9:53:be:46:fd:48:ad:04:08:70:
                    b3:21:c0:fe:86:e3:86:0d:20:f1:81:90:cc:bc:b8:
                    85:29:b2:84:48:71:43:77:16:af:3e:a9:42:c9:92:
                    f8:3a:dd:77:3b:36:e5:d4:42:2f:c1:3c:61:8d:eb:
                    cf:2e:fd:56:01:73:02:8d:54:75:6c:51:59:42:81:
                    33:01:dc:68:0b:9c:b7:02:72:d7:79:8b:a1:49:43:
                    e9:fc:f7:b1:c7:09:63:fe:cc:a7:80:1c:ea:63:bd:
                    97:b8:c1:14:67:81:f1:6f:64:6c:0d:f1:61:ac:07:
                    57:d5:f0:0e:cc:66:89:4e:83:29:c6:54:8e:7e:9c:
                    f2:19:c3:35:aa:e5:0d:23:bd:99:f3:c9:cb:e1:d4:
                    6c:c7:e0:f4:48:c5:b3:80:95:d4:3b:d9:8c:11:fa:
                    60:1c:f5:95:39:f8:ec:23:bd:0a:7a:8a:f8:a1:ed:
                    b5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:33:E7:07:25:34:EC:AF:67:A6:7D:F1:18:4B:AB:16:BF:F2:EE:11
            X509v3 Authority Key Identifier:
                keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:9a:f4:f3:00:7f:09:ff:fe:fa:18:f9:ec:65:80:0f:a2:1c:
         39:42:c9:1b:67:23:94:11:af:c4:6b:e1:e1:8a:64:2d:97:e2:
         2b:dd:73:f7:65:a9:78:cb:b5:18:e1:29:54:ee:57:0e:fa:00:
         6e:43:18:b6:24:b0:c6:3a:cf:1c:7f:18:4c:a5:eb:c5:ec:e0:
         a1:7d:e2:d0:d2:30:d4:1e:2d:ca:2b:b6:16:a3:bd:f8:0f:f3:
         19:02:3a:6f:78:48:a2:61:dc:09:18:ca:e0:04:ba:fe:ce:41:
         fc:6f:a3:4d:6e:b2:f5:7a:14:b3:cb:a5:9a:dc:50:66:97:78:
         4a:20:39:1f:f1:a4:85:2b:b8:d5:41:99:9a:d3:e3:a6:b9:44:
         d4:c9:88:88:19:c0:01:1c:e2:5e:1e:95:a3:70:7e:5e:d8:d2:
         43:59:1b:b0:65:e0:28:64:66:9a:1f:f9:6f:95:8d:81:f6:d8:
         62:d0:41:9a:9e:11:e4:68:d7:8e:e1:2b:3f:0c:ff:94:f3:6e:
         4b:1c:a5:7c:5e:ed:fc:a8:9c:dc:8f:e5:ee:1c:20:40:48:5b:
         21:1a:3e:13:f3:98:55:85:d5:07:9c:89:f5:e4:46:b0:d8:a1:
         83:e9:4b:d1:03:c9:11:2a:e2:e3:6c:8c:92:46:dd:d6:45:2f:
         84:2b:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:31 2025 by rpki-client