This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
File:                     6osEPoaPdVc7zEVArUlUEC3JIrg.mft (raw, json)
Hash identifier:          ir67SXT9s/XBAfq3KNl7tHqukOfbav1RQO5LH7Xu2Sw=
Subject key identifier:   96:93:AC:CC:41:0D:BC:45:F0:FF:EF:6C:19:EF:08:13:73:15:C8:FE
Authority key identifier: EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8
Certificate issuer:       /CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
Manifest number:          012C
Signing time:             Fri 05 Dec 2025 02:43:15 +0000
Manifest this update:     Fri 05 Dec 2025 02:43:14 +0000
Manifest next update:     Fri 12 Dec 2025 02:43:14 +0000
Files and hashes:         1: 6osEPoaPdVc7zEVArUlUEC3JIrg.crl (hash: +Q848MaXtDq5C5OC5NQQSZNN7imWQd7mTOAPg+jJ8oY=)
                          2: 6EF22D0A07C411EF8A38A486C4F9AE02.roa (hash: 8prECIabYnqUfREr8EBJH6HiMmcVX47yz+EPVyLkbdw=)
                          3: 4F038F1007C511EFB3AD2E14C4F9AE02.roa (hash: uG56xTy1rWS0BULY/7uSQn3T7UadwVmMs3Ye+KVukjA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl
                          rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165772, serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8
        Validity
            Not Before: Dec  5 02:43:14 2025 GMT
            Not After : Dec 12 02:43:14 2025 GMT
        Subject: CN=693246c3-a4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7c:89:f3:a6:7a:cd:c5:d0:1a:f0:40:f4:d7:
                    ad:26:f9:c3:92:af:50:cd:ec:ee:96:5f:50:20:e7:
                    b7:5c:fd:dd:59:4c:18:2b:d5:cd:0b:f6:d2:97:ee:
                    6a:aa:4b:99:8a:01:30:2d:09:ec:e8:69:49:f7:1f:
                    2f:5c:f3:6e:d9:a5:f4:f3:38:e2:19:32:1d:05:9a:
                    5f:e2:bd:a8:d8:da:63:de:42:62:c6:6c:c6:07:27:
                    04:f8:0a:5e:b6:fe:b7:6c:53:ee:c6:d1:ef:bc:3b:
                    a1:bc:84:99:3f:c3:82:d7:07:60:2a:36:32:a7:56:
                    9c:a7:c8:04:db:66:b2:d3:3c:de:5d:0f:40:05:93:
                    f6:88:e6:cd:db:2f:4b:9f:7a:ff:5c:8b:86:37:2d:
                    28:b4:d2:3f:fa:97:8e:da:53:52:a1:74:e4:eb:80:
                    7a:5d:41:7a:a1:9d:d6:84:50:d6:45:6e:84:9f:5f:
                    7f:0f:d0:af:3d:14:ad:67:ad:cb:ae:3a:00:81:1a:
                    f5:08:79:97:f3:f1:4b:04:17:11:13:8b:90:6f:f3:
                    90:f4:bd:91:f2:f0:dd:d3:39:6b:e7:74:2f:09:92:
                    e9:89:ec:e8:cf:81:80:15:54:0c:cb:c9:ff:65:f4:
                    6b:24:ff:6a:26:80:4d:67:2c:3c:75:4d:50:60:a9:
                    cb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:93:AC:CC:41:0D:BC:45:F0:FF:EF:6C:19:EF:08:13:73:15:C8:FE
            X509v3 Authority Key Identifier:
                keyid:EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:76:ba:a4:82:96:38:e2:61:40:99:f3:44:e3:48:da:74:ec:
         fb:bc:75:25:08:2c:55:c2:a5:96:99:06:36:fe:68:b2:3c:9b:
         98:5f:8a:d1:b7:76:b6:be:18:b5:ee:e1:eb:7a:78:d8:79:8e:
         a3:b9:6f:70:8b:e4:e0:ec:60:83:2d:fe:ed:c4:6b:0b:94:fa:
         5b:93:4c:00:ac:ef:4e:51:e3:d5:5b:42:10:12:84:07:24:d8:
         69:e6:86:85:da:09:1d:33:74:b8:7b:89:ab:09:33:ea:7a:1b:
         02:00:d1:eb:d7:d2:19:d7:c9:1b:62:06:d9:bd:54:26:2b:40:
         42:06:b8:eb:30:62:c4:6c:3c:79:54:92:86:f2:70:0a:a7:2e:
         ce:f0:aa:6f:a7:89:c9:70:d1:d2:aa:a2:f2:16:91:aa:d1:d4:
         27:1a:72:48:d0:2d:f5:40:f1:e0:1a:21:a6:fd:72:1c:53:96:
         cf:d4:7d:fd:43:8d:d9:b7:6a:93:5a:03:23:7a:29:9e:ab:1e:
         12:57:6c:93:4f:9a:88:ec:07:f2:e2:3f:c6:60:0b:fc:ae:5a:
         6a:e8:fe:ad:3d:e5:a8:ba:90:13:7e:e1:95:c6:cf:81:8d:8e:
         b6:e4:9e:cb:52:12:bf:ef:f5:73:6c:0c:b6:4e:21:3e:16:fa:
         cd:6a:75:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:27:21 2025 by rpki-client