This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft
File:                     AG_6MenQAhaRnYn4s-fb7ffvlrM.mft (raw, json)
Hash identifier:          EIpRd5SBcKrr2jI3YPRA8odEbdaguEyXSUYX+sVXsGc=
Subject key identifier:   95:CB:B1:89:D8:04:28:E7:08:49:D1:AE:89:D0:C4:8B:31:56:77:33
Authority key identifier: 00:6F:FA:31:E9:D0:02:16:91:9D:89:F8:B3:E7:DB:ED:F7:EF:96:B3
Certificate issuer:       /CN=A9196DC9/serialNumber=006FFA31E9D00216919D89F8B3E7DBEDF7EF96B3
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft
Manifest number:          1C
Signing time:             Sun 07 Dec 2025 05:49:09 +0000
Manifest this update:     Sun 07 Dec 2025 05:49:08 +0000
Manifest next update:     Sun 14 Dec 2025 05:49:08 +0000
Files and hashes:         1: AG_6MenQAhaRnYn4s-fb7ffvlrM.crl (hash: gKQeDWfaYLh4MFya3DYe26SGxxyuTcM8L6kM0cXEssY=)
                          2: 473BC6AAAE5C11F089298455C4F9AE02.roa (hash: 1DDzPpe+WSx+Jj7KjmakEhVYtPTGv6AwRf317rIDpEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.crl
                          rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DC9, serialNumber=006FFA31E9D00216919D89F8B3E7DBEDF7EF96B3
        Validity
            Not Before: Dec  7 05:49:08 2025 GMT
            Not After : Dec 14 05:49:08 2025 GMT
        Subject: CN=69351554-4df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f7:fc:61:d9:eb:94:d9:b4:a1:32:c6:b7:7a:
                    8f:9e:56:fa:90:86:f4:e9:25:7a:74:ef:31:a7:77:
                    40:69:01:e6:c4:ba:5c:bc:08:85:95:0e:a4:ef:07:
                    4f:17:04:34:b7:df:11:58:93:60:11:85:a7:7b:8f:
                    dc:c8:ea:b5:1e:a2:9b:6a:c3:33:08:d7:02:23:d0:
                    a8:e0:e1:cf:6f:e6:88:c5:77:76:d5:db:f2:a9:55:
                    d7:30:6b:38:ed:5b:54:01:06:4e:31:0a:f4:5d:ee:
                    f3:7e:30:5d:a1:45:26:47:92:07:0b:23:e9:93:8b:
                    0b:30:a0:33:e7:44:4f:5b:26:8b:d5:01:83:e2:a4:
                    43:42:ef:ec:12:52:c4:50:16:02:d3:3d:d1:59:13:
                    8f:4e:2b:46:1f:93:2f:2f:72:1d:de:8f:fa:ea:92:
                    9e:97:30:79:c1:bc:51:9a:a5:e7:f9:e1:3f:5b:bf:
                    9d:04:c3:6a:8c:e7:c4:cc:59:9f:aa:06:e5:7c:bd:
                    71:74:37:87:96:d0:51:bd:f1:b8:97:a9:00:8c:cb:
                    c2:b2:ff:bb:7f:3c:27:76:27:1d:ba:c7:f9:f4:a8:
                    04:f5:4c:df:e5:f7:84:fe:b0:3b:e4:18:f2:f0:c6:
                    68:e9:8b:9e:b5:f1:cd:79:92:d5:9d:93:c0:ef:be:
                    a8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CB:B1:89:D8:04:28:E7:08:49:D1:AE:89:D0:C4:8B:31:56:77:33
            X509v3 Authority Key Identifier:
                keyid:00:6F:FA:31:E9:D0:02:16:91:9D:89:F8:B3:E7:DB:ED:F7:EF:96:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3d:b6:2a:7f:e9:67:58:f3:5c:5b:32:0f:13:f4:6e:ae:d6:
         47:0a:27:2d:0b:75:4b:d2:48:5d:84:cd:d6:e2:1d:f7:7a:2a:
         10:26:9b:54:7f:49:51:8d:82:87:9d:d4:14:d3:63:5d:6d:46:
         3c:cc:46:a5:e2:ce:9d:51:91:43:6f:bb:70:d5:4e:18:66:3b:
         56:41:35:4a:dc:43:f0:7e:1d:ad:28:5f:22:da:e6:a4:79:01:
         31:7a:34:54:74:58:61:d3:f4:c4:f8:94:67:3c:6b:37:8c:39:
         b6:af:6e:dc:e9:5e:b5:5e:d7:4f:11:26:8f:9b:b7:ac:9b:95:
         9f:75:a5:61:a7:d9:38:1c:35:8c:f0:ba:74:91:86:b5:ae:41:
         76:7d:90:0a:4d:d2:8e:be:8b:8c:ee:26:bf:92:d2:84:8b:b5:
         5d:de:99:46:5c:fc:58:af:b9:0b:25:36:91:e7:54:81:99:ec:
         15:68:bd:4d:04:b6:47:3f:77:21:e3:14:73:a4:0b:93:74:59:
         9a:8a:17:28:54:77:a2:be:96:64:61:cb:0c:e1:16:70:18:a0:
         e9:c8:2a:a0:63:b7:e4:d1:6c:9f:51:a8:6f:68:5c:d4:ab:57:
         0e:c9:98:34:2c:e2:ac:35:3d:01:ef:48:e3:24:65:a3:7c:ce:
         93:90:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:08:40 2025 by rpki-client