This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
File:                     6qKbMnjqfy5or_PZQPu17Kn41WA.mft (raw, json)
Hash identifier:          DA/fvxn4/h2uNY7VKTF9/YjM0yeWrgcBWyyFmius4Oc=
Subject key identifier:   D2:E2:8B:EB:7A:19:81:14:84:26:44:5E:4F:3B:95:6A:50:A8:62:BD
Authority key identifier: EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
Certificate issuer:       /CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
Manifest number:          0148
Signing time:             Fri 05 Dec 2025 02:26:22 +0000
Manifest this update:     Fri 05 Dec 2025 02:26:21 +0000
Manifest next update:     Fri 12 Dec 2025 02:26:21 +0000
Files and hashes:         1: 6qKbMnjqfy5or_PZQPu17Kn41WA.crl (hash: pZ5/TWtaCgGSIQL5s3HnxRORio+1m97V8Qs1yNt649c=)
                          2: 57410984DB6811EEA3A06625C4F9AE02.roa (hash: PjA6/y3/URFKtBBGqwXOyXSRNtGtQief3EK0IMYpEOs=)
                          3: 68005612A19211EF9444186DC4F9AE02.roa (hash: I8WaXI8yHGLpuVw4P8ETRUbWjO9zaTONFtyBe4x2ewE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
                          rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185339, serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
        Validity
            Not Before: Dec  5 02:26:21 2025 GMT
            Not After : Dec 12 02:26:21 2025 GMT
        Subject: CN=693242cd-b89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:15:24:a4:eb:c3:8f:3b:49:f8:fb:66:12:
                    0a:df:88:01:90:01:50:3d:1c:d1:7a:a7:6f:6d:a5:
                    a7:1f:45:f7:38:67:88:52:00:1f:8c:1b:4b:f6:d2:
                    3c:f6:cc:09:85:31:27:a7:5c:37:9a:49:2d:9b:14:
                    c6:84:5f:83:cb:52:ba:e6:9d:dc:bf:43:7e:bd:87:
                    82:9b:2d:9c:55:fa:bf:fe:0f:cc:33:03:4c:64:e0:
                    b2:31:7e:fc:02:15:2c:cf:20:9a:a4:ca:21:a5:6f:
                    56:f2:20:86:2d:d4:fa:bb:28:1c:d3:8e:60:1b:b9:
                    e5:b2:64:e5:80:8b:ef:cc:e4:f7:fe:bb:0e:69:92:
                    cd:b8:02:83:63:0a:09:6f:a5:89:d6:3f:18:5a:6b:
                    79:f4:b4:30:48:99:a5:98:a8:ea:55:fd:83:f9:64:
                    3c:f4:ad:1c:95:5a:cc:1f:0e:a0:02:4b:3e:51:a5:
                    f2:ab:bc:7b:5c:20:5a:db:27:6e:78:57:71:e6:02:
                    bb:eb:c5:1d:4d:ba:13:bf:cd:10:33:c3:ab:9e:26:
                    45:d0:06:64:0c:42:28:0c:ad:f5:79:94:21:8e:29:
                    6c:cf:6d:87:2c:b9:e6:73:30:7c:91:69:cd:8e:b2:
                    f3:1a:e3:18:15:d5:6d:ba:b2:39:9c:d6:e6:cc:dc:
                    ec:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E2:8B:EB:7A:19:81:14:84:26:44:5E:4F:3B:95:6A:50:A8:62:BD
            X509v3 Authority Key Identifier:
                keyid:EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e3:77:23:af:8c:5c:00:0b:2f:0f:e4:c8:18:3f:52:81:41:
         33:62:94:94:6f:a2:3c:e3:5b:ae:85:53:28:5b:a7:d7:cf:c4:
         1a:49:88:8d:17:f8:db:b8:61:56:04:ed:08:55:67:14:a4:89:
         d5:53:c6:f0:da:df:bf:96:1f:69:c3:7e:bb:d7:4c:02:3c:6e:
         4a:97:20:32:c6:74:48:56:e2:25:6b:bf:c4:c2:c3:45:8b:09:
         02:73:ac:22:97:65:89:8b:3b:b4:7c:97:bb:5d:cd:8d:db:b9:
         9b:6e:22:d4:eb:51:c2:4b:48:ae:9c:bd:6a:0b:a3:19:04:48:
         04:0d:ee:13:9a:bc:f5:c0:65:7a:69:97:c0:0b:a7:a2:e8:59:
         f7:da:da:3f:58:e0:10:93:2d:b8:dc:a3:f9:c5:8b:ad:73:33:
         21:d7:a3:bd:a6:24:86:c9:ab:5a:6f:f9:77:77:ae:9c:63:e9:
         11:23:ad:d4:45:87:bb:1b:d8:bd:40:1e:14:37:2b:3d:4e:dd:
         a4:f3:2f:2d:5c:2c:d6:a4:df:da:9c:ad:ca:e3:c8:5e:b1:6e:
         29:29:ca:50:2f:f8:60:8b:38:54:c9:c4:c8:b9:b3:85:e7:b1:
         67:13:39:84:32:a9:d7:6c:85:16:ec:88:c9:7d:05:2c:2e:6c:
         a2:64:77:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzMzkxMTAvBgNVBAUTKEVBQTI5QjMyNzhFQTdGMkU2OEFGRjNEOTQwRkJCNUVD
QTlGOEQ1NjAwHhcNMjUxMjA1MDIyNjIxWhcNMjUxMjEyMDIyNjIxWjAYMRYwFAYD
VQQDEw02OTMyNDJjZC1iODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzSsVJKTrw487Sfj7ZhIK34gBkAFQPRzReqdvbaWnH0X3OGeIUgAfjBtL9tI8
9swJhTEnp1w3mkktmxTGhF+Dy1K65p3cv0N+vYeCmy2cVfq//g/MMwNMZOCyMX78
AhUszyCapMohpW9W8iCGLdT6uygc045gG7nlsmTlgIvvzOT3/rsOaZLNuAKDYwoJ
b6WJ1j8YWmt59LQwSJmlmKjqVf2D+WQ89K0clVrMHw6gAks+UaXyq7x7XCBa2ydu
eFdx5gK768UdTboTv80QM8OrniZF0AZkDEIoDK31eZQhjilsz22HLLnmczB8kWnN
jrLzGuMYFdVturI5nNbmzNzslwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLii+t6
GYEUhCZEXk87lWpQqGK9MB8GA1UdIwQYMBaAFOqimzJ46n8uaK/z2UD7teyp+NVg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTMzOS9EQUNEQjM4RURC
NjcxMUVFQTYxNzg5MjRDNEY5QUUwMi82cUtiTW5qcWZ5NW9yX1BaUVB1MTdLbjQx
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZxS2JNbmpxZnk1b3JfUFpRUHUxN0tuNDFXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTMzOS9EQUNEQjM4RURCNjcxMUVFQTYxNzg5MjRDNEY5QUUwMi82cUtiTW5qcWZ5
NW9yX1BaUVB1MTdLbjQxV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAl43cjr4xcAAsvD+TIGD9SgUEzYpSUb6I841uuhVMoW6fXz8QaSYiN
F/jbuGFWBO0IVWcUpInVU8bw2t+/lh9pw36710wCPG5KlyAyxnRIVuIla7/EwsNF
iwkCc6wil2WJizu0fJe7Xc2N27mbbiLU61HCS0iunL1qC6MZBEgEDe4Tmrz1wGV6
aZfAC6ei6Fn32to/WOAQky243KP5xYutczMh16O9piSGyatab/l3d66cY+kRI63U
RYe7G9i9QB4UNys9Tt2k8y8tXCzWpN/anK3K48hesW4pKcpQL/hgizhUycTIubOF
57FnEzmEMqnXbIUW7IjJfQUsLmyiZHfG
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:45 2025 by rpki-client