This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
File:                     dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json)
Hash identifier:          d9WZYGS7qCCDOTUI71XsPeFgmiaABK6kGCZgjKK6mgw=
Subject key identifier:   CB:3E:D2:E8:76:AF:CC:EA:D4:E2:74:8A:F8:F1:63:FD:9E:1D:A4:C5
Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Certificate issuer:       /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Certificate serial:       07DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
Manifest number:          07D0
Signing time:             Sat 06 Dec 2025 20:18:59 +0000
Manifest this update:     Sat 06 Dec 2025 20:18:59 +0000
Manifest next update:     Sat 13 Dec 2025 20:18:59 +0000
Files and hashes:         1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: sIlFJmRTnuoRvYDCJrPzfNevnfsaoGGYtC6qvcXjAc8=)
                          2: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: pSgSIQQUaLX2o2nTmQmGl/Qpmc9pAZuJpTvLRIL92IA=)
                          3: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: 00f5UezOFyyqRBMxbkiUS7o0hS0GGG4xnKYK/4mdm8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
                          rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
        Validity
            Not Before: Dec  6 20:18:59 2025 GMT
            Not After : Dec 13 20:18:59 2025 GMT
        Subject: CN=69348fb3-99f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6e:ab:62:07:b2:75:25:e4:df:b2:9e:a7:93:
                    d0:7c:79:2c:b6:86:a3:df:c7:1c:64:62:2d:a0:08:
                    24:bd:c4:84:31:c0:4e:d4:e3:d6:fa:e0:9e:9f:ea:
                    db:35:5b:71:6b:6e:78:91:30:4e:02:cf:44:42:9a:
                    08:20:46:39:02:15:54:24:4c:01:c0:a0:6a:96:63:
                    10:b2:80:2a:a8:3c:7d:ed:65:17:2a:64:2d:ac:2a:
                    14:6f:88:79:bf:04:bc:49:38:76:3a:57:31:35:26:
                    50:02:08:6b:5f:7d:ff:bf:88:37:72:73:d8:75:a2:
                    c6:da:a6:ab:98:a9:90:26:2a:27:35:3d:3d:61:06:
                    cb:b1:6f:c9:de:71:7d:f5:0c:60:4b:60:27:0b:ca:
                    8e:be:22:1e:b6:d4:ff:8a:87:95:07:c0:bd:fc:0a:
                    57:ec:69:76:c7:d8:49:7a:64:37:cd:98:46:62:3e:
                    c5:7c:f3:a1:20:38:66:50:8e:26:a2:3d:9e:89:26:
                    8f:e3:a5:0d:38:29:84:7f:16:a8:92:5f:35:05:b7:
                    f8:bf:46:89:f8:ee:8a:ee:3b:bd:5f:61:bf:e7:44:
                    11:a2:2c:ff:f7:b9:74:50:7d:77:29:72:ee:94:e0:
                    1f:e1:b8:ee:fd:7b:b4:3c:17:bd:a1:34:35:b3:ec:
                    a5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3E:D2:E8:76:AF:CC:EA:D4:E2:74:8A:F8:F1:63:FD:9E:1D:A4:C5
            X509v3 Authority Key Identifier:
                keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a2:6a:0b:59:69:f7:ea:52:ef:11:07:4b:d1:ac:97:9c:74:
         e1:b9:8e:ac:6b:fd:4f:30:98:b9:3d:b3:0d:44:98:71:c2:a7:
         3a:b0:04:1c:4f:c7:8b:3e:a0:a7:20:26:0d:3d:1b:ec:90:4d:
         ef:f6:96:6b:45:08:fe:8d:0e:b3:75:e9:ac:a6:7e:47:1c:e0:
         33:bd:82:4e:a1:25:c7:a6:81:a5:0b:78:71:ed:aa:30:ed:0e:
         c6:d5:16:96:12:56:2c:a9:7a:1c:77:d3:67:d7:e4:8f:b9:ab:
         0c:31:3c:e0:7d:40:65:3f:64:aa:48:74:22:db:b9:03:88:b1:
         bc:c0:94:89:eb:de:40:d1:d8:a8:67:52:79:2b:25:e5:af:8a:
         5d:21:af:2e:0e:1b:b9:74:45:95:c2:4b:6b:80:9d:73:d2:39:
         da:bb:45:db:ac:c5:5a:0c:d6:00:e6:6f:33:47:fd:57:3d:cf:
         31:62:4d:40:43:b4:12:38:33:1f:c5:ac:df:e6:bd:6c:42:c4:
         d4:44:2c:08:1c:f3:bd:4b:cf:ca:9f:37:dd:86:7b:68:8b:dd:
         44:c0:33:f7:8c:07:98:c3:65:d0:e9:38:b3:62:55:33:9d:ca:
         52:73:c0:e7:83:1f:ff:cf:de:85:ed:7a:89:be:13:59:54:fc:
         f6:be:7e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:19 2025 by rpki-client