This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft
File:                     6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json)
Hash identifier:          E0++Do03BlYudl6s4f/OLKeKW/wziqQjCgObYZU4/20=
Subject key identifier:   7A:AC:AB:2F:AE:EC:FC:90:B5:A0:0B:4C:A0:6E:DB:A7:77:4B:F6:33
Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28
Certificate issuer:       /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28
Certificate serial:       0C9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft
Manifest number:          0C7E
Signing time:             Sat 06 Dec 2025 17:55:04 +0000
Manifest this update:     Sat 06 Dec 2025 17:55:03 +0000
Manifest next update:     Sat 13 Dec 2025 17:55:03 +0000
Files and hashes:         1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: yYJl+uWwzGLTcCqC2n3jn0BMscPorDBMj3bbGygi+GA=)
                          2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: n02qcDfoz5xfgtE3pmF9DuTrufYGzGxNykq63R1mDas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl
                          rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3228 (0xc9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28
        Validity
            Not Before: Dec  6 17:55:03 2025 GMT
            Not After : Dec 13 17:55:03 2025 GMT
        Subject: CN=69346df7-dd36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:68:7f:d2:47:93:40:55:64:0b:db:75:80:
                    51:da:6e:4d:67:ed:0b:39:8c:a7:f2:28:69:fc:d1:
                    8a:b5:70:33:66:c3:5a:dc:e9:2d:05:98:a5:a6:3f:
                    21:a3:10:7b:f3:58:20:f0:40:03:e7:53:d8:27:5f:
                    51:9d:bd:01:ca:a7:c1:67:06:69:57:f2:1d:53:8e:
                    ac:b4:ae:43:7a:34:c6:74:44:e0:1e:8f:00:53:5b:
                    ba:fa:49:b3:92:39:fa:9f:bf:64:a0:0a:3a:03:5f:
                    00:79:11:60:cf:be:a3:17:f5:d5:e5:d9:7a:bc:39:
                    83:f1:e0:bd:a9:94:b2:d3:41:92:44:7a:85:ec:ef:
                    5b:05:39:47:56:10:6b:58:97:22:69:82:82:52:a2:
                    df:fd:7c:53:69:cb:19:ed:ca:a7:79:0c:46:4c:bb:
                    14:08:60:93:29:d6:67:eb:b9:e2:26:95:ad:69:34:
                    45:61:7a:e6:98:e3:68:9c:9c:e9:02:1a:6a:9d:a5:
                    f3:5d:38:ed:c5:a7:3b:db:ae:be:bc:48:15:48:d3:
                    01:63:dd:76:7d:21:51:63:ad:e8:7d:52:89:88:12:
                    78:ff:e5:36:ba:c1:5d:f0:80:db:07:04:7b:7a:f8:
                    b3:ba:42:3f:1c:72:7a:e4:6b:13:de:e0:66:7e:ab:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AC:AB:2F:AE:EC:FC:90:B5:A0:0B:4C:A0:6E:DB:A7:77:4B:F6:33
            X509v3 Authority Key Identifier:
                keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7e:aa:b6:e7:6e:61:d1:1d:5c:81:36:2c:80:f5:a7:33:a4:
         20:87:9e:78:12:34:77:77:e3:ff:0a:7d:66:34:c9:37:7e:7d:
         55:5b:b8:cf:fc:57:63:03:49:75:bf:34:cf:c7:d2:a4:46:6e:
         24:3d:fa:68:02:dd:5e:1f:e7:4b:96:07:75:37:c9:9c:46:a6:
         72:08:6f:42:be:a5:5f:85:4d:07:8c:a4:b9:71:97:b4:88:f7:
         fd:23:48:03:e4:58:1b:f5:6d:11:e3:a7:a9:4e:7a:bc:53:ec:
         93:67:99:1e:53:7c:c7:b7:93:96:0d:38:f4:bf:70:5e:ff:03:
         10:4a:69:5d:0f:e3:62:97:20:1e:18:91:d7:aa:b0:bb:51:9f:
         a6:4e:08:e5:08:8a:3d:8a:bc:88:e7:27:5b:06:c5:ad:db:87:
         b1:8a:cc:88:c9:a1:11:8e:e5:02:e1:f8:77:7c:e3:48:51:78:
         94:4d:84:87:54:91:23:88:12:42:fc:f3:89:39:a9:39:6a:18:
         20:d1:79:7c:6f:b2:0f:71:3b:a7:6a:82:ec:6d:85:15:43:74:
         34:90:4b:b0:f6:16:f8:2a:4f:db:54:a6:47:d7:ce:72:3f:42:
         7d:19:56:bd:5f:43:78:18:70:d8:1e:18:86:27:7e:64:c3:ef:
         55:3d:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:21:20 2025 by rpki-client