This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
File:                     -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json)
Hash identifier:          XGlraE+D6zrQ+Y+SFlDvoJjdM0glVHYp2PtmKDdDIxg=
Subject key identifier:   D9:B1:D2:01:46:2E:82:8C:EA:D4:1A:2F:24:E1:62:25:11:65:2A:AC
Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54
Certificate issuer:       /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
Manifest number:          D6
Signing time:             Fri 05 Dec 2025 03:38:42 +0000
Manifest this update:     Fri 05 Dec 2025 03:38:41 +0000
Manifest next update:     Fri 12 Dec 2025 03:38:41 +0000
Files and hashes:         1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: /fR6fAD+0HkmChgsuG3Q/3WFFLOyOQ92sV252NdM2Tw=)
                          2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: 3RkfId18fIAWdqGmzWtf6xa9nYpeGDo6ResxGTznSso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7709, serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
        Validity
            Not Before: Dec  5 03:38:41 2025 GMT
            Not After : Dec 12 03:38:41 2025 GMT
        Subject: CN=693253c2-85c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:9d:6c:1d:c7:4d:0b:f5:74:75:1a:b4:4e:
                    84:f2:3b:3e:fe:5b:96:e2:ee:2f:04:80:f3:e8:ee:
                    2f:ad:c9:31:f9:75:c9:83:09:64:6c:80:a0:26:f3:
                    9b:6b:25:68:d7:fd:6c:55:7d:40:af:b0:ff:3f:d9:
                    81:25:65:33:20:c5:17:36:86:f1:31:33:99:81:5d:
                    c9:5a:dc:23:1b:25:a1:97:81:de:f9:0d:34:59:77:
                    82:2b:23:74:f4:c3:6b:d0:87:d5:5f:64:68:0c:1b:
                    0a:de:ee:36:fb:76:8d:34:ef:25:85:76:58:05:71:
                    44:6e:99:99:91:79:2b:87:ff:05:a4:25:72:3b:1d:
                    f3:0d:2c:6f:b8:f9:6f:f4:eb:77:c9:4d:e6:a4:88:
                    57:df:3c:0a:ca:83:14:8c:97:c1:32:5f:6e:c0:98:
                    51:72:a4:91:7a:1d:0f:dd:c4:89:ec:99:1d:cc:4e:
                    c3:74:74:a5:b1:66:28:e2:b6:11:b3:fc:f6:5f:fc:
                    47:d8:3e:19:ca:04:b3:df:0b:fc:ea:8e:be:7b:e2:
                    3d:33:e8:aa:cb:00:e2:08:1f:87:86:75:70:a3:14:
                    c9:e7:d0:61:44:2c:9a:b5:68:df:5c:1b:f6:ff:cb:
                    3d:ac:75:33:f8:4c:d9:53:4d:50:ba:a2:61:68:56:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B1:D2:01:46:2E:82:8C:EA:D4:1A:2F:24:E1:62:25:11:65:2A:AC
            X509v3 Authority Key Identifier:
                keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:9f:ac:b6:c2:62:45:41:80:25:65:1b:c7:91:8f:ff:ae:
         4c:ec:7f:e2:5a:07:d8:95:bf:f8:50:c1:1b:71:54:e8:f8:af:
         1f:7e:b4:57:55:73:c7:6b:72:f8:e9:d6:74:18:1d:11:04:0b:
         09:ce:c0:c2:b3:9e:ae:79:d5:84:f9:7a:20:75:43:67:e6:3e:
         76:ba:5e:53:8d:46:45:0b:2b:31:73:bd:b2:93:d5:ae:b3:03:
         0b:d1:af:cd:28:a4:d2:64:30:3a:15:37:99:30:c5:45:0b:2a:
         3e:57:ea:a6:c7:2a:a0:8d:7f:0c:ad:78:0b:e4:cd:2b:35:26:
         8b:c7:c6:7f:9a:73:c3:04:79:73:eb:c1:6f:cc:04:00:1b:d7:
         5e:59:ce:81:da:da:0f:b7:5f:7f:38:da:e0:77:92:40:a8:d2:
         5b:40:8d:68:1b:f5:c1:5b:19:70:31:78:a6:09:9c:4e:86:09:
         de:12:be:de:ae:07:a1:ca:9d:6f:54:e5:a8:c9:23:e9:c2:c4:
         f5:27:e7:ec:6c:7a:f0:bf:25:97:e1:90:25:44:6c:46:c9:72:
         f0:5b:e5:a0:5e:4e:d3:3e:5e:19:01:e7:48:04:f8:15:eb:e4:
         6f:da:b8:a3:82:bc:e3:3a:24:60:4d:4b:84:bc:4b:bc:bb:58:
         e5:2e:af:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:07 2025 by rpki-client