This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
File:                     6mEYPX8HHa7UVWQxG4oadb3OcNY.mft (raw, json)
Hash identifier:          gFLRrokvjXuE4Z33q5vml7pPRlwdiyXFAKWSSVNtnls=
Subject key identifier:   68:93:D4:E7:E0:92:3B:70:A3:01:75:81:34:D4:9A:83:C3:A8:B5:18
Authority key identifier: EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6
Certificate issuer:       /CN=A91874B6/serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
Manifest number:          010B
Signing time:             Fri 05 Dec 2025 03:02:00 +0000
Manifest this update:     Fri 05 Dec 2025 03:01:59 +0000
Manifest next update:     Fri 12 Dec 2025 03:01:59 +0000
Files and hashes:         1: 6mEYPX8HHa7UVWQxG4oadb3OcNY.crl (hash: UH0zi9S/xNGWZdGLSXpOOgIFZ1cRBTM86Y1RLGjoqss=)
                          2: CB54BF04390611EF93BAC362C4F9AE02.roa (hash: SBPg4qf1Hpdi+0DWgBFMwDlSC1uKF+MPsUyay046sq4=)
                          3: 5AFDCA16390611EF9290C361C4F9AE02.roa (hash: SumhTWc+8flvVqGSUtlnNECtrOpr5Ex0r4tAHN1aP0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl
                          rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91874B6, serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6
        Validity
            Not Before: Dec  5 03:01:59 2025 GMT
            Not After : Dec 12 03:01:59 2025 GMT
        Subject: CN=69324b28-cf72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:f0:47:14:fd:5f:fd:9c:7e:72:e5:a6:55:
                    4a:20:10:8b:c3:1f:97:25:f3:b5:1b:ee:db:14:45:
                    7e:74:8e:ca:e6:4b:0d:c5:ca:94:97:13:e6:c2:fa:
                    c6:9b:60:16:5e:73:b8:e2:49:04:fa:3c:87:e5:fb:
                    91:09:3f:3b:6c:f2:74:52:3e:81:0c:30:1c:a0:75:
                    3e:a9:28:4a:0e:3b:55:71:4d:96:b7:6b:fd:1f:6a:
                    84:bf:73:77:72:13:3f:5a:2f:4c:1d:63:54:74:d5:
                    a1:c8:78:a1:d6:b4:30:14:1a:bf:39:7b:33:b8:1e:
                    3b:47:a5:d7:00:5e:04:b5:53:12:07:56:17:80:4d:
                    1e:80:62:22:c4:9d:4a:c3:c1:97:d2:d2:46:af:13:
                    23:04:f5:d0:4c:d7:4a:d2:cd:4b:f8:65:09:60:0f:
                    d2:3b:1b:18:54:ed:05:1d:fc:d6:74:f5:0b:9c:d1:
                    1d:cf:26:0d:9c:63:a2:66:a2:43:b6:32:f9:9e:a8:
                    b7:0f:5c:48:9e:d3:09:c6:48:05:8a:96:6c:e8:c7:
                    3c:00:b3:20:d5:ae:94:54:41:5f:ce:f0:af:80:a9:
                    00:1c:5c:64:2f:b8:fa:c8:42:69:9b:fb:92:1c:90:
                    91:9f:ee:92:c4:e8:a6:c7:7f:d4:ba:c7:18:4d:27:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:93:D4:E7:E0:92:3B:70:A3:01:75:81:34:D4:9A:83:C3:A8:B5:18
            X509v3 Authority Key Identifier:
                keyid:EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:36:e1:4e:ea:2a:66:78:36:e7:13:ba:e0:a1:b0:db:2d:
         73:62:7b:9e:1e:a8:de:e1:85:18:dd:bb:b9:25:88:e8:80:b5:
         aa:0c:39:e0:09:ae:90:45:86:a3:be:96:86:0f:7b:c9:a4:a5:
         6d:9e:90:f4:fd:e7:6d:89:c7:17:2c:f5:77:98:c5:4b:08:c9:
         9d:b4:ad:a6:34:56:65:32:56:a4:32:4b:f1:9e:74:c0:3c:29:
         39:ab:7c:ad:a7:e2:d0:55:3c:e6:99:5f:b7:08:69:93:cb:96:
         7c:9d:bd:26:ac:7c:c1:70:ae:7f:e8:2b:9d:d9:62:b9:eb:87:
         0d:74:43:f0:11:f8:e4:74:86:d7:56:d2:e3:8a:69:95:bf:82:
         62:24:50:10:ce:10:37:f4:c7:c4:b3:ba:11:df:d9:c1:11:fc:
         85:49:1a:00:af:64:31:56:5d:5d:74:47:e1:1a:ec:2e:17:f5:
         c9:e3:f5:a9:20:4b:64:6b:4f:e1:b8:f4:22:0e:c1:b2:c5:fb:
         dc:4b:b7:2a:41:56:db:df:d4:75:85:e0:74:69:8d:a8:b0:a7:
         dc:0c:5b:95:3b:ee:92:f7:c3:ba:69:b4:fe:41:2a:0f:66:3c:
         93:e3:78:2f:ea:8c:63:b5:79:e4:76:a8:0d:4a:6d:5e:20:b8:
         90:00:5c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:30:43 2025 by rpki-client