This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
File:                     6AKchCosGw6rjSFi239_RN4ccCg.mft (raw, json)
Hash identifier:          Z/x9WjPnxaHGyllX7dCXvlDsDHDURHbL8NACgF5O6G4=
Subject key identifier:   72:B8:4E:AE:C6:92:2F:30:D9:E0:A6:EB:52:2C:49:45:39:28:AE:F3
Authority key identifier: E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28
Certificate issuer:       /CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
Manifest number:          01B7
Signing time:             Fri 05 Dec 2025 01:19:14 +0000
Manifest this update:     Fri 05 Dec 2025 01:19:14 +0000
Manifest next update:     Fri 12 Dec 2025 01:19:14 +0000
Files and hashes:         1: 6AKchCosGw6rjSFi239_RN4ccCg.crl (hash: JJ4692xyd6D/epg8rQM2sC26stW7cRXM9NfF9UMlzFo=)
                          2: 63884D122F5911EE8D896A87C4F9AE02.roa (hash: 4AwkRBSah0q0zkuKlGnrqVF3ZLdqCQgqioJ/w/eqAGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl
                          rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C355, serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028
        Validity
            Not Before: Dec  5 01:19:14 2025 GMT
            Not After : Dec 12 01:19:14 2025 GMT
        Subject: CN=69323312-391a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:a6:19:64:b9:4c:44:33:9f:e4:c8:ec:34:
                    fc:7a:fe:eb:45:62:a4:33:93:b8:54:40:8f:64:e7:
                    e1:2e:fa:d0:a9:52:07:4a:98:9d:4a:51:4d:9b:f3:
                    3a:ac:e7:0f:2f:90:14:49:7a:9e:ad:b7:95:4c:e2:
                    56:51:e1:c7:16:8d:10:02:f6:d9:f3:b0:1a:6a:eb:
                    44:14:a5:eb:bc:88:1c:d9:d4:fd:85:a0:f3:7d:0d:
                    e7:00:28:dc:81:53:bd:d5:b6:b4:31:12:5f:77:e1:
                    2d:1f:b3:9d:60:78:83:a6:0f:14:d2:f9:27:78:cb:
                    82:0f:e0:16:be:f5:4f:0b:fd:28:f6:cd:b5:c2:e3:
                    07:df:47:83:bc:cc:42:81:28:fe:90:aa:a0:d7:53:
                    01:95:36:09:96:67:bd:a1:5e:09:1b:89:f2:8f:cd:
                    ad:09:6e:c6:a4:9f:0f:75:8c:b8:25:e9:d0:4a:ec:
                    93:1e:fb:44:83:4f:71:39:cf:b2:ed:f5:7b:61:a6:
                    3b:ad:b9:a2:38:dd:b2:e4:86:62:95:fb:7d:17:53:
                    b4:22:f2:59:ea:34:bc:8d:02:0e:ee:6e:a9:0a:7f:
                    16:e6:2e:c5:12:7f:67:e3:26:bb:04:85:5f:df:7c:
                    fa:04:0b:cd:e9:7a:a8:ed:28:2e:04:cc:1e:6b:61:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B8:4E:AE:C6:92:2F:30:D9:E0:A6:EB:52:2C:49:45:39:28:AE:F3
            X509v3 Authority Key Identifier:
                keyid:E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f7:6c:16:1a:46:7d:f3:ca:f5:84:ee:ce:83:de:24:20:a6:
         90:48:bf:61:42:f2:8a:40:d6:61:d3:30:79:3b:30:50:24:e5:
         00:b6:bb:37:82:b5:b4:84:59:09:72:86:2e:cb:c5:13:75:3b:
         b3:3c:64:b7:95:15:8f:b1:de:5d:52:cc:30:35:2b:f0:93:a7:
         79:ed:ab:06:7a:94:0c:d4:f8:d9:21:e7:cf:34:83:fa:7f:36:
         31:89:ac:be:c5:17:29:9c:7c:07:eb:30:cd:a8:03:db:55:92:
         83:e0:6e:88:ad:d8:5c:5c:a3:5c:4b:b9:e0:f4:ac:24:8e:c2:
         e4:ab:54:c3:36:0f:d0:c2:25:0a:b9:f5:45:2c:e5:97:cf:a3:
         59:90:c0:ca:42:d3:62:61:a4:7f:b4:00:f2:eb:ae:c5:5a:4e:
         19:eb:e2:66:14:a1:12:04:92:bd:ee:04:d2:ca:22:bf:bf:58:
         0f:67:f6:9b:34:74:90:ab:d3:22:cd:18:5c:5d:c2:ab:57:02:
         af:ca:22:b0:15:c5:52:a7:6e:9b:9d:16:47:ee:e4:87:0f:26:
         aa:cc:98:c4:52:43:a7:46:81:50:db:0a:7e:b9:dc:8f:00:f2:
         43:96:ca:62:cf:30:ee:f9:dc:2b:db:ea:c7:33:68:b2:90:d5:
         8e:db:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:24:58 2025 by rpki-client