This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
File:                     n6-DQWde9DiWQZk2JUJXLIkoVAw.mft (raw, json)
Hash identifier:          t4v8MbC7AalN+fwMzEbi2KzgPXp7OQP/xkTBoKmPhEo=
Subject key identifier:   24:35:54:DE:B6:FF:15:9F:3E:5B:A9:93:3F:D6:54:E4:DC:2C:6C:C3
Authority key identifier: 9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C
Certificate issuer:       /CN=A91B517C/serialNumber=9FAF8341675EF438964199362542572C8928540C
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
Manifest number:          014E
Signing time:             Fri 05 Dec 2025 02:26:40 +0000
Manifest this update:     Fri 05 Dec 2025 02:26:39 +0000
Manifest next update:     Fri 12 Dec 2025 02:26:39 +0000
Files and hashes:         1: n6-DQWde9DiWQZk2JUJXLIkoVAw.crl (hash: d6mx29x75CXKrWnKV3E2xqNZYtePr226DUPEmho5DUk=)
                          2: 86019882E2A311EEA6A97425C4F9AE02.roa (hash: yaqGJ55mUP3MHEApA47X+44ZI9rv9+pSI8dIE6Q7v10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl
                          rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B517C, serialNumber=9FAF8341675EF438964199362542572C8928540C
        Validity
            Not Before: Dec  5 02:26:39 2025 GMT
            Not After : Dec 12 02:26:39 2025 GMT
        Subject: CN=693242df-6019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:23:71:82:94:5e:aa:e6:4d:de:4f:3b:93:
                    05:77:a6:9d:65:a1:fd:3b:bc:c3:a3:43:4d:b1:2b:
                    d5:1d:f9:67:bf:5f:69:67:6e:3e:34:d6:e1:57:ee:
                    6e:f9:cf:48:ec:70:74:f5:ed:bc:6e:08:d6:0d:d1:
                    2a:ef:dc:da:93:3b:af:b4:dd:07:b9:00:3c:e0:bd:
                    3a:bf:2e:2c:4c:44:e9:f5:2d:0e:50:cc:ba:83:8f:
                    95:31:84:e6:25:aa:7e:0c:71:12:20:39:8a:7d:c1:
                    fd:bd:62:2b:7d:92:5b:0c:4d:d6:f1:f7:96:d2:39:
                    3d:48:70:bc:48:dc:1d:6a:7d:8e:e4:27:66:fa:fc:
                    7e:b7:97:be:9b:3a:7f:31:86:01:8f:af:d4:3c:4a:
                    ae:be:3a:f9:63:d6:42:94:69:22:c3:9e:1c:fd:67:
                    8f:f1:60:db:f0:7a:e7:9a:7a:b4:83:18:ac:ec:65:
                    fd:90:fa:e4:99:cd:58:67:85:c5:f2:1e:13:de:95:
                    70:fc:62:ab:d3:32:0a:e5:16:07:dc:03:b7:ab:c6:
                    d5:f0:43:bb:85:66:8f:75:bc:a2:4a:92:87:43:30:
                    54:5d:15:d4:54:26:69:8e:4b:6f:90:95:4e:9b:30:
                    6a:01:7c:e1:a7:c0:de:84:2b:94:99:75:46:90:85:
                    11:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:35:54:DE:B6:FF:15:9F:3E:5B:A9:93:3F:D6:54:E4:DC:2C:6C:C3
            X509v3 Authority Key Identifier:
                keyid:9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:61:59:e5:b1:a3:42:86:d1:dc:db:75:66:4f:74:f8:2b:86:
         96:06:9e:7b:d9:af:50:f2:8d:3c:86:66:8c:86:dd:41:36:d4:
         a2:4d:44:ee:ef:43:a6:79:74:27:f2:c3:87:31:d2:07:7f:ba:
         79:79:8a:99:80:e0:0a:b6:e4:b3:ee:62:90:e5:22:9f:0d:ad:
         af:e3:60:c2:ae:7c:31:e0:b4:91:c0:10:a6:17:e5:d8:99:34:
         c7:c7:c5:fe:37:c8:ae:64:c2:f2:30:84:1a:40:3f:95:4d:ef:
         be:40:64:bb:28:a0:b0:96:0a:66:7c:39:16:2a:ad:57:ff:35:
         1e:c0:9d:7e:e0:ce:ac:99:12:96:5a:71:4e:ba:7c:11:63:ed:
         ee:c6:cc:b5:70:8a:09:31:2b:fd:ba:18:11:7a:cd:36:a9:40:
         63:6b:60:c4:fd:27:12:71:5e:99:0d:69:6a:db:a6:a7:2f:f8:
         62:4d:6e:2b:bb:5b:2f:67:5d:18:fa:a9:0d:0e:ab:6c:a8:f5:
         19:1c:98:62:34:e5:50:08:33:a4:44:d2:78:b4:0d:59:af:5e:
         9d:14:33:d6:03:d8:61:e9:51:7b:e1:c8:34:eb:ce:cd:60:1b:
         81:9d:70:6a:31:22:ab:79:46:0e:3f:84:16:e3:be:6d:25:ab:
         c7:5b:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:27:49 2025 by rpki-client