This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
File:                     G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft (raw, json)
Hash identifier:          nE6Grdk5VM2vbuybccGwkjOQE7o5Wnt1HiSdq+VXYeU=
Subject key identifier:   56:2B:E7:02:79:18:00:DA:B0:F9:1C:28:F3:D4:5E:F4:39:BF:17:E8
Authority key identifier: 1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4
Certificate issuer:       /CN=A918770D/serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4
Certificate serial:       1C7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
Manifest number:          1C6D
Signing time:             Thu 04 Dec 2025 15:55:52 +0000
Manifest this update:     Thu 04 Dec 2025 15:55:52 +0000
Manifest next update:     Thu 11 Dec 2025 15:55:52 +0000
Files and hashes:         1: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl (hash: XMsqyvUYGRCbXtHyQn5nvsyS5PP7xhDygdSH5JRqorE=)
                          2: 6C5A7912ED2311E680140D19C4F9AE02.roa (hash: w+6iR/F583nwtLejN1ZMM4mivM5f0eBnZv1CsfpH8hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 15:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7291 (0x1c7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918770D, serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4
        Validity
            Not Before: Dec  4 15:55:52 2025 GMT
            Not After : Dec 11 15:55:52 2025 GMT
        Subject: CN=6931af08-bff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:50:da:af:69:2a:ff:96:2b:ac:16:88:98:
                    a0:11:75:11:01:dd:94:4a:c6:f3:ec:81:7a:a0:d6:
                    c9:49:47:8f:6e:06:27:47:27:63:36:1b:2e:aa:1a:
                    66:23:8a:f1:10:11:bb:9d:7f:28:ae:66:c9:f6:38:
                    c0:f4:b7:f1:85:82:c9:8b:79:1e:a2:01:65:59:ee:
                    59:8f:4f:6c:35:ab:02:b2:13:9f:73:af:ec:3e:9a:
                    2c:a2:fa:35:27:5b:a4:d4:d2:83:a4:96:80:4f:e6:
                    2f:91:ae:db:fb:0c:83:13:17:a0:e4:fd:ef:ca:70:
                    bc:de:61:89:ad:04:1c:5a:a6:ec:ef:72:a8:9b:42:
                    ab:2b:0f:02:51:9b:95:63:6c:47:ef:b6:6a:46:5b:
                    b8:67:d9:2b:49:ca:74:c7:de:df:bd:e8:a9:84:bb:
                    d1:3b:32:ba:fa:b2:df:78:7b:44:82:b1:b2:85:1b:
                    af:53:3a:60:5c:a1:55:4f:f2:69:19:17:c6:c5:bd:
                    d3:2c:a2:d0:c7:d0:64:74:f5:8e:1c:d7:2f:1a:14:
                    9f:e7:ae:06:9d:7f:70:28:1f:51:8f:88:e5:af:ac:
                    e6:6e:c6:81:f5:b1:c3:55:7f:4d:b4:8d:49:b3:25:
                    d0:28:bf:14:f3:75:33:36:f1:7a:5a:0b:1f:77:94:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2B:E7:02:79:18:00:DA:B0:F9:1C:28:F3:D4:5E:F4:39:BF:17:E8
            X509v3 Authority Key Identifier:
                keyid:1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:6d:e3:79:fc:08:27:90:37:9e:7b:c0:cd:bb:76:6e:b8:ee:
         0d:c3:f4:7c:e9:70:f6:d4:91:e2:0b:59:e6:9d:b4:a4:23:69:
         e0:d8:13:67:f5:f3:8f:05:28:f4:7b:b5:b2:3a:9b:d6:f5:6d:
         56:0c:cb:a1:5d:89:e8:01:99:59:29:14:d4:2b:43:94:81:0c:
         0b:7a:f5:70:67:29:69:f5:1a:a4:35:88:83:ab:b2:b0:3f:10:
         f6:ce:4c:05:cf:9a:a2:93:41:72:92:6a:69:6c:a4:47:d4:19:
         97:92:67:d8:ac:33:ad:e8:10:fa:3d:43:48:12:40:69:5c:ef:
         ce:ce:cb:7a:ab:db:95:40:24:9c:ef:56:63:19:8b:83:b9:18:
         13:de:1f:8a:77:07:eb:7b:8c:a1:45:c5:97:e2:5b:38:53:aa:
         2d:85:cb:20:24:24:61:9b:8a:db:9c:d4:d1:88:ee:84:21:68:
         86:99:34:9f:fd:60:e8:8d:c1:d5:ae:99:9c:98:1e:4e:d2:dc:
         3c:0b:6b:94:9f:e5:77:de:34:d9:fd:7c:b7:9d:26:fe:c1:a2:
         e2:f4:d2:98:2f:47:1a:e8:d5:95:32:6a:8f:a4:81:f1:73:93:
         60:f5:23:46:20:2d:f4:ce:59:93:7a:76:02:cd:fc:d7:9d:30:
         da:35:ee:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:34:28 2025 by rpki-client