This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
File:                     u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json)
Hash identifier:          57A4O1eFUSlkAT5CRuZPTLnEW+c1yrbBRb7T4AA4UNA=
Subject key identifier:   00:94:83:68:F3:F9:7A:37:37:49:A5:CB:8E:B2:87:7D:57:D9:6F:52
Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
Certificate issuer:       /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Certificate serial:       0C78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
Manifest number:          0C6E
Signing time:             Thu 04 Dec 2025 17:59:39 +0000
Manifest this update:     Thu 04 Dec 2025 17:59:39 +0000
Manifest next update:     Thu 11 Dec 2025 17:59:39 +0000
Files and hashes:         1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: n1pm2ob0/jj8ZCm1VsnodAE/2AMzr2Fjbg+0lOb2pzU=)
                          2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: hEqwrUqaJG9qwPBUi04q/1E7lJxaXmcpC2YVDYoqPPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3192 (0xc78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AA, serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
        Validity
            Not Before: Dec  4 17:59:39 2025 GMT
            Not After : Dec 11 17:59:39 2025 GMT
        Subject: CN=6931cc0b-1366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:db:c9:cd:95:72:7d:33:45:da:a3:e4:29:
                    79:fe:f7:43:2c:b9:22:53:e9:7b:f5:3d:11:ba:c9:
                    27:2e:dc:ac:a8:03:7e:82:49:c8:6c:9f:f4:50:53:
                    e6:01:c5:ac:f0:69:cc:f2:61:e6:06:ec:dd:b0:e0:
                    59:4b:7f:11:5d:48:f1:4a:c3:8e:da:e8:1e:25:03:
                    53:c2:2e:23:4c:0f:c3:9c:49:99:de:88:27:7c:05:
                    22:8e:25:94:3d:86:ff:c8:91:1e:18:b1:9e:15:fc:
                    6b:d4:ec:2d:b1:ee:43:a8:3d:7d:03:1d:c5:ff:21:
                    47:6c:4d:4e:de:71:e1:e2:94:4d:75:17:5b:04:a9:
                    f9:cb:50:af:4d:e5:0f:80:06:da:7e:9f:47:68:fa:
                    3c:ee:ce:53:8d:e2:f1:95:7a:98:2b:a9:42:53:8c:
                    44:cc:8a:e6:5e:2e:bd:92:22:6a:7a:1f:00:ec:c5:
                    c3:13:0a:ac:a6:27:c7:b9:a6:db:52:4e:4a:4f:5e:
                    f2:62:0e:06:c0:da:6d:e2:85:32:a5:df:13:97:49:
                    f4:07:6f:f7:7d:c4:a5:f0:7e:e3:00:3e:dc:42:e7:
                    37:91:bc:cb:b1:46:84:b1:47:10:85:0f:ab:d3:f7:
                    d2:74:07:41:b7:f2:f6:fd:44:59:b0:6e:9d:51:39:
                    16:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:94:83:68:F3:F9:7A:37:37:49:A5:CB:8E:B2:87:7D:57:D9:6F:52
            X509v3 Authority Key Identifier:
                keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9f:e0:a2:a2:b1:23:f6:e5:f5:c7:99:6b:11:0a:eb:a5:cc:
         27:f3:b8:da:ac:7b:22:d8:5e:c8:71:04:1d:e1:27:f3:db:1d:
         e7:d9:f8:86:6d:80:3f:cc:0b:3e:97:78:14:7a:cf:0e:82:6e:
         24:c9:b1:fd:b3:4f:8f:f8:b6:8e:65:16:cb:c5:9c:aa:14:f1:
         17:42:d4:d7:4b:d8:bc:5a:b9:29:35:4f:89:f5:7c:12:75:0c:
         e5:3a:75:ba:54:bf:e2:57:b0:da:e2:2b:09:b8:8f:51:59:ba:
         f7:f7:3d:6e:f3:5f:d5:72:ef:46:36:3f:6b:4a:70:74:9d:0c:
         cb:26:16:9a:5a:67:7d:36:94:64:e7:a4:72:91:07:c4:70:66:
         01:2e:ed:19:36:37:c9:6e:da:02:0a:a0:d1:6d:36:96:91:c4:
         06:a5:75:97:0c:3f:f0:7f:e0:23:30:59:d5:61:38:12:e2:f6:
         8a:b1:1d:c5:ea:3a:0e:0f:2b:60:ff:eb:2b:26:d4:fb:54:f6:
         7c:b5:c2:ae:e7:95:32:c8:52:b8:96:ca:f7:52:2a:86:b4:30:
         78:36:80:9e:9b:58:82:4f:5b:6d:e6:9a:d8:8b:5f:2a:ac:3f:
         72:a5:d9:49:04:a8:7b:3f:b7:12:54:6d:0c:8e:cb:a7:51:fb:
         21:14:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:35 2025 by rpki-client