This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
File:                     oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json)
Hash identifier:          qt/8WEduiZEdovWxyvlPEmqW36lQjP4klOPsM+iw0bU=
Subject key identifier:   61:09:89:F0:D1:D0:0F:C7:51:A6:01:96:76:9E:38:AB:FD:86:E4:DA
Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
Certificate issuer:       /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
Manifest number:          6C
Signing time:             Fri 05 Dec 2025 04:49:54 +0000
Manifest this update:     Fri 05 Dec 2025 04:49:54 +0000
Manifest next update:     Fri 12 Dec 2025 04:49:53 +0000
Files and hashes:         1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: NZcnhCP1FuSHgYGW/ot0RAxKwV4V/qIJJ/o0Hkleg5A=)
                          2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: F4KKMKiW48gN9aBGOT2hP2pHnwX5JnqO3laTg5f8NeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
                          rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
        Validity
            Not Before: Dec  5 04:49:54 2025 GMT
            Not After : Dec 12 04:49:53 2025 GMT
        Subject: CN=69326472-7459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:c3:b4:75:bb:92:cb:ba:b7:1b:ff:18:a8:
                    5b:54:35:e6:cf:1e:6b:0f:1d:a6:5a:23:10:fc:a3:
                    c0:bc:9b:fa:21:3d:6f:ee:27:05:b2:d0:ae:9f:1a:
                    8a:01:77:e5:73:a5:0d:82:9b:09:86:63:61:01:4c:
                    98:73:ed:e7:4c:c1:bf:a4:39:08:a5:74:4b:c3:3c:
                    1d:b3:78:a5:d1:59:6e:0a:c0:78:20:03:fa:45:8e:
                    94:a7:8b:4a:9a:6d:0a:1c:af:78:19:1e:37:c6:83:
                    64:c8:f5:01:65:49:d4:0c:d8:ac:b6:e2:3a:c3:65:
                    66:a3:55:bd:4d:ed:29:dd:76:9e:25:a8:ec:ad:24:
                    c5:ee:0c:3f:3e:34:35:57:85:ef:23:fc:be:0a:a0:
                    17:54:a3:7e:8e:37:bf:6d:f4:66:ce:22:38:7a:15:
                    47:3d:fe:d2:37:a7:33:b1:67:bc:0c:59:56:ed:68:
                    3e:55:7a:96:59:31:5f:36:49:ae:ce:8b:b1:ab:b4:
                    a6:82:11:0e:88:d0:d6:ef:49:66:3d:64:69:31:fb:
                    6c:f6:0d:0b:f9:b9:1a:15:d2:65:bb:70:e5:32:70:
                    51:77:a5:a1:33:f3:93:98:45:0b:04:52:07:88:fb:
                    98:59:0f:d6:36:bc:22:98:d4:f6:7b:e1:b9:f2:ed:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:09:89:F0:D1:D0:0F:C7:51:A6:01:96:76:9E:38:AB:FD:86:E4:DA
            X509v3 Authority Key Identifier:
                keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:87:e0:6c:7d:5e:c3:49:a5:5d:31:57:8b:7f:52:89:06:8e:
         5b:ce:9f:06:e7:13:83:e8:59:1c:76:0c:94:a8:0c:8f:d9:e7:
         12:e1:78:dd:a1:a2:7b:39:87:18:73:cc:d6:62:ec:31:31:d6:
         e7:74:3f:b6:7b:4b:1f:fd:3c:7c:11:39:46:26:79:73:64:14:
         5f:fa:12:83:02:41:65:93:d0:c4:08:60:90:ae:04:3f:d0:f5:
         8f:1a:86:aa:1d:66:e4:ae:31:9c:de:24:f5:40:50:b1:be:22:
         ab:ed:f4:49:29:5b:67:21:60:3d:e6:17:6d:78:0a:60:c0:b3:
         e0:31:62:11:f3:b8:b0:4c:81:63:02:07:b4:eb:a5:a0:66:7c:
         ce:f6:17:b4:10:d6:81:ed:91:23:0c:57:c7:d6:2d:38:c7:a8:
         66:6b:49:29:a4:58:ab:8e:6b:d5:fe:6b:fd:6b:b7:9c:64:fa:
         29:48:cf:8e:34:34:7a:8a:60:e2:83:05:9d:00:12:ee:72:5a:
         c3:ce:61:50:4c:3f:72:fa:81:aa:f7:57:11:8e:49:e7:74:7e:
         1a:c6:f9:d5:85:a6:c4:6b:3c:a1:59:cd:29:8f:d8:96:24:51:
         f7:0f:17:e1:68:9b:79:67:73:b9:f0:03:fc:17:52:57:ef:fd:
         ea:7e:4f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:29:29 2025 by rpki-client