This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
File:                     6EKSkSMrng-5SFoKrUk9fgfH5NE.mft (raw, json)
Hash identifier:          /AUUPqJTzsaErMD9l7BJp2bdfSKlQNqJqwKxd/CBArY=
Subject key identifier:   E3:43:15:5B:A5:AE:61:B5:C4:F7:BE:6C:26:FE:2E:9F:5D:49:1B:AC
Authority key identifier: E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1
Certificate issuer:       /CN=A9199696/serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
Manifest number:          92
Signing time:             Fri 05 Dec 2025 04:25:49 +0000
Manifest this update:     Fri 05 Dec 2025 04:25:49 +0000
Manifest next update:     Fri 12 Dec 2025 04:25:49 +0000
Files and hashes:         1: 6EKSkSMrng-5SFoKrUk9fgfH5NE.crl (hash: JXFxuzWGOWa7qiPEOaabM3E5bWhyqIeayki9kzUSfkk=)
                          2: 1A44E27AF1A711EFA441E72CC4F9AE02.roa (hash: +T8xPEy3qOwqRDiq3fa/SHDl3cgx+ER91jGPjiK2GbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl
                          rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199696, serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1
        Validity
            Not Before: Dec  5 04:25:49 2025 GMT
            Not After : Dec 12 04:25:49 2025 GMT
        Subject: CN=69325ecd-a776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:de:f1:9b:1f:2c:a1:ff:31:25:a7:fd:20:
                    a0:5a:83:d8:79:75:23:81:0c:c2:b0:58:dd:64:fd:
                    ad:01:92:15:12:29:ee:65:4d:56:4c:00:23:84:ef:
                    8c:a1:0f:ea:0f:05:45:dd:25:92:e4:07:29:e5:d8:
                    ee:78:7c:eb:fd:43:6b:c8:8b:b5:d6:6f:fb:73:ad:
                    74:67:3e:95:93:f1:b5:0d:e0:da:0b:4a:dd:06:78:
                    3c:d2:12:ad:ec:b6:fe:5b:f1:6a:c0:d5:23:ae:28:
                    0d:ae:85:86:d5:d6:3b:71:5e:82:0f:b3:f0:2a:97:
                    52:20:f7:6a:bf:c2:cf:f8:da:ba:a8:24:95:89:96:
                    12:81:13:04:a8:c8:c0:e6:e0:12:12:95:ac:72:b2:
                    49:9b:0a:30:85:14:26:f4:09:1d:6e:ac:af:6b:76:
                    ea:f3:de:98:9e:a0:ce:58:65:d2:af:f5:00:90:b2:
                    c9:2d:48:e8:6a:74:83:bd:1a:3e:80:fb:22:e1:b4:
                    bc:58:fc:05:51:3b:ec:c0:8b:27:07:b7:bf:fd:ff:
                    0c:30:32:2a:1a:37:35:d7:e0:f2:79:05:38:4b:31:
                    fe:5a:93:12:c4:eb:87:d7:e1:9d:4c:39:4a:7e:54:
                    01:ac:f5:9b:c9:6a:67:52:3a:5c:9a:a4:55:09:bf:
                    53:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:43:15:5B:A5:AE:61:B5:C4:F7:BE:6C:26:FE:2E:9F:5D:49:1B:AC
            X509v3 Authority Key Identifier:
                keyid:E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:96:4f:3f:94:02:78:17:77:26:43:b7:9c:a8:8e:d0:cc:97:
         f1:e3:ee:13:23:7b:85:34:f3:8d:93:c0:5b:f4:9e:28:f4:ed:
         76:ff:93:a3:10:7b:ae:69:30:13:0b:8d:ba:12:78:a0:98:72:
         ba:3f:3f:48:1b:c9:97:03:7a:e0:35:74:bb:cc:33:7c:8d:dc:
         7e:df:bd:bd:fb:0f:fe:d0:68:10:ed:bc:23:da:4d:a5:81:7c:
         91:5f:de:cd:61:01:0c:94:04:14:42:9f:4c:ce:d8:88:d4:dc:
         f1:a5:29:8e:3d:1f:ae:3b:64:34:67:ff:3b:90:56:0f:e0:72:
         e0:ef:89:36:83:47:e7:8c:9a:56:6f:6e:32:01:e3:d1:0c:61:
         a4:66:d2:85:86:e3:8f:a5:e8:2d:98:b4:38:88:68:8f:32:ad:
         67:f0:95:f9:9b:8d:82:81:e3:3f:18:a2:18:9a:01:b2:e5:6f:
         51:11:32:57:3b:ef:f4:87:f7:cc:90:e4:64:20:cb:86:96:02:
         df:cc:56:96:fe:bb:4d:66:64:ef:f7:78:09:c7:93:3c:df:a7:
         33:bb:09:e6:86:43:d8:a3:aa:ae:11:56:f3:77:b2:56:d9:17:
         82:43:25:d6:2d:41:cd:ca:68:fd:a8:a6:08:3d:d8:e5:fd:ab:
         23:ab:98:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:00 2025 by rpki-client