This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
File:                     6wr0cxLfFL-ROszd3wzcPTwV6mA.mft (raw, json)
Hash identifier:          SZn+z+XxbYeMaHjwsuBHSabMmy8/CgDLpksszMZ0xYE=
Subject key identifier:   9F:5B:F6:00:E8:31:97:FB:94:7B:D7:08:CD:97:7D:39:CC:A3:54:AF
Authority key identifier: EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60
Certificate issuer:       /CN=A91BF119/serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
Manifest number:          01D0
Signing time:             Sun 07 Dec 2025 01:18:41 +0000
Manifest this update:     Sun 07 Dec 2025 01:18:41 +0000
Manifest next update:     Sun 14 Dec 2025 01:18:41 +0000
Files and hashes:         1: 6wr0cxLfFL-ROszd3wzcPTwV6mA.crl (hash: FDGVdwBg9HNVFxFQbI1xf2pTmjpI3cT+biswFpAtaGM=)
                          2: F08468EC092811EEA1BB7E73C4F9AE02.roa (hash: MXFdujZ+nAPECH8UBuQy5IelDh540oVpA1herCcQ+54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl
                          rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF119, serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
        Validity
            Not Before: Dec  7 01:18:41 2025 GMT
            Not After : Dec 14 01:18:41 2025 GMT
        Subject: CN=6934d5f1-2faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:b7:f7:18:9a:a3:36:38:66:0d:89:ed:06:
                    17:f0:02:d7:ae:58:44:38:33:bd:36:25:c6:f2:01:
                    57:af:99:0c:c8:3e:5b:d0:df:b5:00:1a:2c:06:27:
                    1c:bc:23:2f:a7:57:cc:f7:ae:93:d1:72:15:b9:36:
                    c8:81:a9:0f:51:bb:92:d0:60:bd:cf:d3:1d:85:6e:
                    69:98:c1:b2:14:46:b0:a0:6f:66:5d:fe:68:c9:c0:
                    e4:59:b1:13:4c:e0:cb:a9:12:7b:20:e0:6f:07:34:
                    30:64:db:ce:56:bf:cb:ba:aa:82:62:78:d0:5a:8b:
                    2c:97:1e:32:63:6e:ec:bf:aa:ab:68:86:4a:cd:46:
                    2e:9e:bd:54:7a:26:13:71:9c:82:78:57:05:4d:d5:
                    40:29:04:98:10:d7:7a:e3:82:2b:23:5f:4a:dd:28:
                    42:b2:2c:fb:3d:49:be:14:92:c4:43:58:28:f9:dd:
                    80:04:a3:6a:94:ac:57:b0:af:79:15:da:f7:89:61:
                    f0:63:44:1b:4c:d3:6b:ab:1a:d6:80:af:be:d5:1e:
                    b2:0d:b0:74:6d:19:ee:31:a1:9e:51:ce:62:54:f1:
                    4d:01:8e:48:2a:7a:fa:d9:3a:9b:5a:bd:cb:be:40:
                    c0:35:d7:9b:fa:38:a0:0f:5f:86:c7:55:da:5a:9b:
                    25:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:F6:00:E8:31:97:FB:94:7B:D7:08:CD:97:7D:39:CC:A3:54:AF
            X509v3 Authority Key Identifier:
                keyid:EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6a:76:81:3d:12:62:5e:d1:3d:d3:d3:0b:2c:7a:4a:ae:f8:
         91:af:c8:5f:52:89:66:78:5e:32:43:db:5f:31:f1:b9:6a:30:
         89:25:f2:b9:c4:b3:21:5d:8b:a6:b0:49:bd:fe:21:1e:9d:f7:
         fd:30:66:97:f6:85:ad:0a:4c:4e:a2:6d:49:38:70:58:3c:79:
         2d:dc:44:2d:17:3f:eb:cd:f3:4a:95:fb:fc:76:c0:70:d1:e5:
         13:a1:8c:7e:9f:83:b8:5c:20:36:e5:9e:38:2a:03:be:8d:99:
         0b:c3:a3:00:42:00:63:ea:17:bb:fa:d3:92:43:67:d9:de:bd:
         89:21:28:0c:ce:af:00:6b:50:aa:fd:d4:e3:0d:a3:bc:a6:00:
         0f:e0:e3:bc:ba:3f:fa:28:4b:24:f9:b9:a5:ef:7a:de:77:d1:
         df:f9:fd:a3:40:db:90:c3:38:3e:ad:0a:85:3d:7d:3e:6c:8f:
         da:e8:61:d5:f6:d2:a4:25:01:30:d1:e5:bb:cc:73:5d:11:42:
         0c:4c:47:e7:c8:2a:dd:5a:c1:9f:80:7a:0b:ec:80:9b:8f:5d:
         be:6b:21:9d:91:52:7c:5e:60:74:8f:25:b0:78:ac:9b:8a:f7:
         a5:85:f7:bc:cf:44:9b:71:46:51:0b:f6:86:51:90:bc:8d:83:
         98:39:83:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYxMTkxMTAvBgNVBAUTKEVCMEFGNDczMTJERjE0QkY5MTNBQ0NERERGMENEQzNE
M0MxNUVBNjAwHhcNMjUxMjA3MDExODQxWhcNMjUxMjE0MDExODQxWjAYMRYwFAYD
VQQDEw02OTM0ZDVmMS0yZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz6W39xiaozY4Zg2J7QYX8ALXrlhEODO9NiXG8gFXr5kMyD5b0N+1ABosBicc
vCMvp1fM966T0XIVuTbIgakPUbuS0GC9z9MdhW5pmMGyFEawoG9mXf5oycDkWbET
TODLqRJ7IOBvBzQwZNvOVr/LuqqCYnjQWosslx4yY27sv6qraIZKzUYunr1UeiYT
cZyCeFcFTdVAKQSYENd644IrI19K3ShCsiz7PUm+FJLEQ1go+d2ABKNqlKxXsK95
Fdr3iWHwY0QbTNNrqxrWgK++1R6yDbB0bRnuMaGeUc5iVPFNAY5IKnr62TqbWr3L
vkDANdeb+jigD1+Gx1XaWpslDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9b9gDo
MZf7lHvXCM2XfTnMo1SvMB8GA1UdIwQYMBaAFOsK9HMS3xS/kTrM3d8M3D08Fepg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjExOS85NEEyOTczNDA5
MjIxMUVFQjk3NzA2NkNDNEY5QUUwMi82d3IwY3hMZkZMLVJPc3pkM3d6Y1BUd1Y2
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ3cjBjeExmRkwtUk9zemQzd3pjUFR3VjZtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjExOS85NEEyOTczNDA5MjIxMUVFQjk3NzA2NkNDNEY5QUUwMi82d3IwY3hMZkZM
LVJPc3pkM3d6Y1BUd1Y2bUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQanaBPRJiXtE909MLLHpKrviRr8hfUolmeF4yQ9tfMfG5ajCJJfK5
xLMhXYumsEm9/iEenff9MGaX9oWtCkxOom1JOHBYPHkt3EQtFz/rzfNKlfv8dsBw
0eUToYx+n4O4XCA25Z44KgO+jZkLw6MAQgBj6he7+tOSQ2fZ3r2JISgMzq8Aa1Cq
/dTjDaO8pgAP4OO8uj/6KEsk+bml73red9Hf+f2jQNuQwzg+rQqFPX0+bI/a6GHV
9tKkJQEw0eW7zHNdEUIMTEfnyCrdWsGfgHoL7ICbj12+ayGdkVJ8XmB0jyWweKyb
ivelhfe8z0SbcUZRC/aGUZC8jYOYOYOA
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:40:48 2025 by rpki-client