This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
File:                     6VE3HeTcsQAlSE0vFP3NosZFW5E.mft (raw, json)
Hash identifier:          aTyvQvPnqFPyGk2u20lNNgL9/VLqwRhB+QlvEc4JPcE=
Subject key identifier:   B2:C0:BA:81:1A:2D:9A:8C:F6:5E:BB:86:FE:E0:43:9E:B2:B1:09:83
Authority key identifier: E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91
Certificate issuer:       /CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91
Certificate serial:       07C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
Manifest number:          07BA
Signing time:             Sat 06 Dec 2025 20:23:39 +0000
Manifest this update:     Sat 06 Dec 2025 20:23:39 +0000
Manifest next update:     Sat 13 Dec 2025 20:23:39 +0000
Files and hashes:         1: 6VE3HeTcsQAlSE0vFP3NosZFW5E.crl (hash: qV4owtU4GRb8W7ikWVheERFMJLHbavP6jLe90nYYgIE=)
                          2: A3E98D0E22A911EB96014E82C4F9AE02.roa (hash: U4wBCZUawWY0aygfRe0tLOK9t09mOsA+sFaJMAhACbA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl
                          rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988 (0x7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195FCB, serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91
        Validity
            Not Before: Dec  6 20:23:39 2025 GMT
            Not After : Dec 13 20:23:39 2025 GMT
        Subject: CN=693490cb-41ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:92:c0:ce:0c:0a:29:a5:33:a5:11:10:ba:13:
                    e5:9f:58:98:b1:07:5f:aa:df:d0:df:ff:ee:80:3e:
                    c8:f8:c5:62:19:d9:a2:9c:a1:2f:b2:d6:d6:4a:ed:
                    77:9a:a6:c0:78:66:6b:f9:ff:34:06:10:e5:0d:fe:
                    27:eb:cf:88:28:94:f1:3e:70:c0:3f:26:a4:a1:ac:
                    82:f4:78:d5:bc:b6:9c:a7:12:30:56:ea:49:04:97:
                    8d:6d:0b:50:fa:3e:9e:59:96:9b:fc:15:0d:aa:df:
                    e1:07:3e:d6:2b:d6:ce:a4:ab:5e:8e:c5:19:35:de:
                    8f:0a:67:fe:23:8b:0e:9e:c5:48:5f:d9:81:97:e9:
                    02:99:39:c3:db:7f:a0:60:b0:73:56:eb:ce:25:b8:
                    98:85:ac:f7:97:c8:9e:cf:fd:36:12:39:f5:26:94:
                    40:88:da:f3:dc:9b:2f:40:79:f7:39:87:e2:62:6f:
                    bc:1b:a8:b4:b9:e7:5b:e3:e6:e9:b9:00:5b:b0:c4:
                    82:97:22:fa:d4:f8:f0:f3:3f:1a:d0:fc:d4:e0:21:
                    57:e6:e3:cf:6b:ca:4e:5a:dc:c1:61:bd:8f:0f:c0:
                    f9:b5:3b:c6:ba:c4:b4:1e:27:10:7d:97:d1:48:67:
                    f4:9d:5e:4d:7a:7a:6e:78:d3:81:f1:be:2c:e3:af:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C0:BA:81:1A:2D:9A:8C:F6:5E:BB:86:FE:E0:43:9E:B2:B1:09:83
            X509v3 Authority Key Identifier:
                keyid:E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:86:d2:25:6a:20:a5:f6:9c:f1:a8:de:b3:8e:d5:ea:7c:0c:
         94:e9:5a:7c:b9:97:af:22:b9:fa:d5:51:6b:e9:e6:01:23:a6:
         57:be:20:d2:96:cc:bd:27:3d:61:03:24:07:fa:58:9d:bf:24:
         71:ef:c5:6d:92:2b:52:55:22:52:d5:71:11:c5:b7:8c:20:18:
         4a:c4:45:a9:d7:8f:40:82:7e:5a:4e:9e:10:7f:81:1d:ea:e8:
         40:56:5c:4d:bf:ca:28:e6:37:78:7e:88:59:48:89:0f:45:b2:
         e4:45:34:3b:5d:fe:5e:69:19:f6:c1:14:84:23:4e:77:b6:45:
         f3:ed:56:96:4a:23:55:bf:6a:eb:76:aa:1d:9d:ff:78:d2:35:
         92:6c:1b:c0:68:41:a8:49:64:4b:63:64:c2:29:f8:0b:d6:5e:
         03:ec:b0:fe:4e:48:c3:d4:4e:e0:ef:e8:11:7f:3f:98:b7:bd:
         0c:2b:c9:07:5f:37:1d:cc:76:4f:d9:f9:aa:bd:95:75:95:28:
         b0:e2:f4:56:92:08:b0:5d:90:df:ee:35:af:83:a4:cb:cf:d0:
         1f:dd:f4:bd:b3:5b:2b:fa:95:53:89:f4:0b:05:55:d9:c4:86:
         0b:fa:b4:93:8e:09:b9:d0:f6:1e:b0:40:18:7a:81:ae:7d:df:
         36:6e:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:25:07 2025 by rpki-client