This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
File:                     p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json)
Hash identifier:          yiDuSMIUMKurxVyQSi/tKQjE65hI3ickRlY42wSvBeo=
Subject key identifier:   57:FD:2E:3F:F2:16:3F:B6:F5:A7:00:D6:1B:F5:2D:E3:66:51:AE:DD
Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
Certificate issuer:       /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014
Certificate serial:       0C1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
Manifest number:          0C14
Signing time:             Thu 04 Dec 2025 18:11:18 +0000
Manifest this update:     Thu 04 Dec 2025 18:11:18 +0000
Manifest next update:     Thu 11 Dec 2025 18:11:18 +0000
Files and hashes:         1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: 2Q15WCSHXZUNvYbceOCSYZKjJMxapWRJQC7XIR+KwiQ=)
                          2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: bvU87sPankSR4y/0B0suj/VghvgnUkOI9EyFZQQUQyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3100 (0xc1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014
        Validity
            Not Before: Dec  4 18:11:18 2025 GMT
            Not After : Dec 11 18:11:18 2025 GMT
        Subject: CN=6931cec6-c01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e8:f5:9a:ce:54:68:b9:10:be:f7:90:a6:be:
                    af:69:9d:07:83:43:e2:66:1f:25:77:dc:17:52:78:
                    36:3c:5c:89:3b:1a:b7:8c:6b:74:a2:1e:3a:c0:07:
                    5e:a3:89:ef:12:c7:a7:c8:4d:01:ba:d6:d8:39:76:
                    df:49:2d:2a:12:2e:20:c1:b6:3e:2e:d6:58:ab:87:
                    81:28:92:94:9e:bc:d4:3d:a1:98:2a:4c:7c:e1:fc:
                    4e:20:6e:75:28:14:ee:bd:c0:a1:b6:a9:3e:38:e9:
                    ca:14:23:e3:12:fe:ad:cc:34:14:e1:a5:23:10:f3:
                    77:6c:5e:d3:7d:95:ad:0f:80:ab:33:81:d9:48:55:
                    c0:20:ff:82:fd:38:c2:cf:d3:7c:60:9a:90:6e:3b:
                    db:27:ef:fb:23:8c:5f:63:bc:b3:48:97:ed:31:87:
                    1f:8c:f0:c2:8a:a0:1f:62:42:bb:29:61:76:fe:a5:
                    23:b7:11:06:e3:92:3b:08:99:a3:62:ed:ad:4c:f0:
                    c9:ae:76:27:ba:c7:89:d4:b4:e3:45:6b:67:d1:ab:
                    d4:8d:e8:f1:d4:6b:00:09:51:51:f2:3c:5e:64:a6:
                    1f:96:f2:36:e0:d1:ab:0c:30:74:20:fe:1e:8d:ba:
                    ea:8f:d5:3f:81:4a:f3:cd:ec:b9:e5:51:db:2b:b8:
                    cb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FD:2E:3F:F2:16:3F:B6:F5:A7:00:D6:1B:F5:2D:E3:66:51:AE:DD
            X509v3 Authority Key Identifier:
                keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:99:ef:32:0b:e2:94:8b:94:b9:98:4e:8b:8e:54:44:e2:
         61:32:c9:e9:90:f6:84:4b:09:a2:27:39:ee:68:61:bd:98:7e:
         25:62:79:f5:9a:a2:ee:79:0a:cd:5d:50:17:bc:69:7d:19:0a:
         d3:c1:5f:7a:c7:78:00:a6:85:80:6f:a3:ff:3b:cb:e7:73:d2:
         8e:f5:f8:4b:3d:11:22:65:53:8d:3a:a7:51:c0:c1:2f:29:c6:
         23:1b:db:dc:58:e1:8b:7d:35:f7:72:bc:8c:1f:3a:cc:01:70:
         7d:36:1e:01:a8:b7:57:82:49:89:6b:6b:c3:23:99:51:fc:c2:
         c9:5e:59:08:f8:07:d2:16:e1:2d:e8:05:6d:3b:2e:72:89:09:
         e3:f0:30:52:6e:6a:15:98:c3:77:2a:f5:0c:34:b0:81:a5:c4:
         bb:7d:dc:a1:31:72:8f:0c:ee:54:35:92:6c:d6:48:96:23:9a:
         39:2c:1d:05:dd:2c:ca:23:ba:2c:de:44:0a:9a:14:b3:de:e3:
         2c:6b:d1:b5:80:20:44:07:12:38:b5:f4:9c:41:fd:e5:0b:2a:
         20:3f:02:17:62:d7:83:b5:40:24:a4:00:33:f1:e9:7b:71:d9:
         09:09:cd:fd:d2:2a:8c:8d:9d:17:5f:23:23:e1:ee:dc:b7:e6:
         27:75:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:37 2025 by rpki-client