This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft
File:                     6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft (raw, json)
Hash identifier:          0KAGnbbIGcmLYmj4bETMwRrX7r+2jZ2IpEHpFBZcXlM=
Subject key identifier:   D0:D3:59:D8:A8:10:83:AD:BB:B3:49:41:55:01:48:CF:F4:9A:AC:90
Authority key identifier: EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64
Certificate issuer:       /CN=A91AB3E4/serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164
Certificate serial:       0AA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft
Manifest number:          0A9F
Signing time:             Thu 04 Dec 2025 18:51:09 +0000
Manifest this update:     Thu 04 Dec 2025 18:51:08 +0000
Manifest next update:     Thu 11 Dec 2025 18:51:08 +0000
Files and hashes:         1: 6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl (hash: P96xnwr4pgmk2eadC2lDiLqtoI0Do8dOTye4FeP0Ks8=)
                          2: 685E441A69BC11EA97D4FE67C4F9AE02.roa (hash: J+JZoSjojOqJ1AwA5T/9H8nf3jJIVy6YAPw444KE/KA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2726 (0xaa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB3E4, serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164
        Validity
            Not Before: Dec  4 18:51:08 2025 GMT
            Not After : Dec 11 18:51:08 2025 GMT
        Subject: CN=6931d81c-cb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:bc:51:c2:ed:4b:35:71:9d:92:56:fb:0d:
                    0d:32:86:b2:f3:03:4f:d1:5c:ff:e5:0a:5a:b4:b3:
                    30:09:a6:e1:8a:5f:2d:fb:d0:d8:66:47:7e:fa:47:
                    34:af:5c:ff:28:e3:6c:4c:9b:d3:e8:ad:5a:91:dc:
                    cd:3d:88:37:2a:06:12:fa:68:de:68:57:79:0d:14:
                    c2:8b:a7:b9:a5:4b:75:ec:f0:0b:fe:47:08:f9:3d:
                    57:47:ea:92:77:7a:84:0f:06:35:b1:fb:d1:18:74:
                    38:66:48:3d:d2:7b:a5:33:e5:6a:dc:7d:b0:46:11:
                    dd:f2:fd:79:57:d9:1c:58:8b:6a:69:f3:f8:48:c6:
                    6c:35:b5:80:83:76:2d:dd:ea:5b:6d:84:b9:ac:e1:
                    c5:93:e8:0a:02:08:42:41:48:df:0a:6e:65:e2:b4:
                    11:85:fe:33:b5:50:51:8b:ac:15:c3:ae:9b:ba:bd:
                    b0:96:f0:38:89:ae:7c:e8:0e:29:db:af:7d:51:36:
                    3d:6c:e3:1f:4a:b5:7a:48:c9:0e:f0:37:7b:33:f1:
                    9c:fc:10:3f:e0:0e:9d:51:69:e8:af:ab:76:f8:84:
                    c5:a4:93:a2:3a:aa:86:21:bd:b4:c1:4f:8d:08:50:
                    11:f0:f2:d7:2b:6e:83:d0:d3:f3:ef:ab:1c:48:e2:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D3:59:D8:A8:10:83:AD:BB:B3:49:41:55:01:48:CF:F4:9A:AC:90
            X509v3 Authority Key Identifier:
                keyid:EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4d:df:17:b9:55:4e:d1:d7:ef:d2:fa:88:ab:4d:2c:59:68:
         38:4e:b5:0d:50:f4:d5:f9:17:cc:f1:71:f5:a4:18:4e:85:fa:
         ce:f3:c7:c6:eb:b2:22:6e:0d:63:0a:22:2f:03:3e:b2:64:1f:
         d8:cc:59:2a:bf:42:cf:f9:9a:f6:69:b7:ae:02:53:06:0f:6c:
         2a:37:a1:20:a8:47:6e:50:f9:ac:35:b4:a0:9a:f8:51:56:f2:
         b3:ba:24:65:ac:a9:59:5e:0c:de:4c:e6:09:2c:2d:99:96:4d:
         c2:85:9b:79:0f:a8:6a:8b:19:4f:ff:77:0e:69:51:b4:de:e6:
         21:30:d9:e4:3d:17:7a:5e:f6:52:3c:22:8f:06:22:6e:12:90:
         80:89:a9:85:02:a0:10:d7:89:17:0c:88:99:32:7d:63:e5:b1:
         43:73:c1:ac:2f:fa:8e:bc:18:9d:e0:d3:38:8b:47:8e:02:d7:
         fc:c1:98:57:2b:a6:46:e4:38:9e:9f:59:98:63:d6:7a:bc:31:
         d0:c1:f3:4c:db:d7:15:65:e3:c0:b4:87:66:d7:12:57:4a:ff:
         2b:f6:e6:98:f3:e3:ad:cd:0d:8d:35:18:3a:a1:00:f6:3c:21:
         7f:4f:e8:87:25:1f:aa:02:42:4d:8b:b2:98:39:62:3b:a8:2f:
         e7:f8:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:20 2025 by rpki-client