This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
File:                     C6xCmG6avbfO4s37Kp_o1tAqq1w.mft (raw, json)
Hash identifier:          K6yNptCLWlU+nliJtgJ5BoSWFveAlGWyidBO3Q68O2Q=
Subject key identifier:   CD:AB:AF:C2:5A:19:19:43:DD:76:3D:31:BF:C4:4C:1E:CA:94:96:1D
Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
Certificate issuer:       /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Certificate serial:       03F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
Manifest number:          03DF
Signing time:             Sat 06 Dec 2025 23:15:45 +0000
Manifest this update:     Sat 06 Dec 2025 23:15:45 +0000
Manifest next update:     Sat 13 Dec 2025 23:15:45 +0000
Files and hashes:         1: C6xCmG6avbfO4s37Kp_o1tAqq1w.crl (hash: sU3eWAFl1i4FFXGbQO3YSjdaplY0cizvDuaMaaUHkIw=)
                          2: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (hash: 6/4Wi7NNWL18DEfbDuCr0VcAnjHlRgOew4WUdCphh0Q=)
                          3: E4EB20D84C0C11F08C577458C4F9AE02.roa (hash: 2gw1MPH+9gJhqqbpMge6estJwPuHTaPF1vMXeS3q2UM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl
                          rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
        Validity
            Not Before: Dec  6 23:15:45 2025 GMT
            Not After : Dec 13 23:15:45 2025 GMT
        Subject: CN=6934b921-beea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:30:5f:ca:30:26:a7:ff:70:af:99:12:50:
                    86:e7:27:68:f5:ee:3e:da:07:f7:23:6a:e6:99:35:
                    0b:bb:c0:ac:ed:03:d7:ec:39:fa:61:4c:e6:98:29:
                    7b:5f:fa:64:92:15:52:57:43:8e:9c:7c:1b:43:91:
                    b7:d2:ec:c9:44:79:da:f7:6a:74:b4:b2:af:0d:7f:
                    5a:39:6d:e6:c5:e6:1b:6d:b7:10:02:a7:ea:f3:80:
                    34:77:35:cc:11:81:c2:f7:e9:21:6b:07:21:b0:cf:
                    38:63:21:81:17:88:6b:a5:5e:c4:12:a3:8e:71:c1:
                    5d:5b:0a:99:95:81:36:e0:a7:32:76:26:db:34:59:
                    07:09:25:a4:53:bb:92:20:14:9f:1b:6f:2e:72:ac:
                    fe:50:0b:e5:10:e6:1a:9a:54:d7:55:ab:b4:19:23:
                    dd:59:0a:3c:9b:f5:79:14:cf:89:14:05:a6:74:72:
                    5a:3d:fc:08:10:2b:62:11:76:53:aa:89:5b:5a:7b:
                    f3:14:37:dd:f0:a0:21:1c:32:ab:c1:ce:72:72:6a:
                    f0:c6:70:cc:89:98:a1:b9:f5:91:b3:af:8b:4f:78:
                    bd:b4:2e:81:bd:b4:7b:c5:18:ab:25:00:f7:c8:63:
                    5c:e9:74:fd:72:87:38:db:68:d5:a3:f7:62:73:bf:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AB:AF:C2:5A:19:19:43:DD:76:3D:31:BF:C4:4C:1E:CA:94:96:1D
            X509v3 Authority Key Identifier:
                keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bb:4d:43:c9:fa:08:01:ad:a1:22:f9:91:f0:3e:12:b1:0e:
         9a:50:22:c3:b9:3d:f5:f8:c4:81:01:f0:7c:ca:b4:f3:7d:e5:
         f4:db:b1:c4:28:99:41:8b:19:a6:3f:21:ae:fd:36:c0:c4:51:
         66:4c:81:4c:e6:79:80:64:2a:5c:a8:1d:b6:d3:9b:69:12:94:
         77:ca:ed:e3:4b:b4:ed:1c:04:b7:26:17:1b:6f:8f:97:20:2d:
         65:49:57:ab:0a:f9:6d:3d:d8:9f:f0:8c:ec:73:fc:75:f9:9a:
         7d:72:c0:da:3a:86:eb:9a:bd:c1:27:f5:8c:df:d4:b4:fc:2e:
         3e:58:bf:29:20:c2:59:61:92:b2:7f:ed:71:36:6a:7f:71:a3:
         28:3d:28:0e:8f:7d:e7:1f:ad:a1:fe:b5:b0:8d:8d:c3:95:e6:
         a2:6d:cd:00:58:a9:cf:35:50:db:0a:73:59:a5:c6:f2:42:9b:
         9d:b5:03:53:6b:cb:a2:75:3c:a3:4b:46:32:a8:62:be:41:24:
         1d:c1:ff:e1:5f:a1:78:ab:f0:ac:e6:65:42:84:5b:ba:e2:e5:
         9c:8f:c0:dd:18:3c:a7:ca:de:b1:27:f9:21:75:38:99:f3:dd:
         7d:8e:83:c1:62:48:24:47:11:5b:ce:c6:a7:98:6a:7a:2e:41:
         a6:c4:52:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:07 2025 by rpki-client