This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
File:                     h6VQYbdfHcLFxbuH0omOgzB9hw8.mft (raw, json)
Hash identifier:          ksk4NGXyt4DknSLcxTkUDrwNEpHkHFqXe7de1uImKPY=
Subject key identifier:   83:F5:81:0E:1D:EB:60:EB:48:C3:68:23:2C:57:5D:6F:78:46:09:8F
Authority key identifier: 87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F
Certificate issuer:       /CN=A91DD42F/serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F
Certificate serial:       07B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
Manifest number:          07A6
Signing time:             Sat 06 Dec 2025 20:29:40 +0000
Manifest this update:     Sat 06 Dec 2025 20:29:39 +0000
Manifest next update:     Sat 13 Dec 2025 20:29:39 +0000
Files and hashes:         1: h6VQYbdfHcLFxbuH0omOgzB9hw8.crl (hash: GOhg3l3N/Z3AFEWDVIkt+T0wvmWxJOZ8HvWhvjvf7GM=)
                          2: E20C4942DC7D11EDA2F7B651C4F9AE02.roa (hash: zk34LWbv4bQiMskRqGHmUZeHGe9ThXpt5J1yxmeAi1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl
                          rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1974 (0x7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD42F, serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F
        Validity
            Not Before: Dec  6 20:29:39 2025 GMT
            Not After : Dec 13 20:29:39 2025 GMT
        Subject: CN=69349234-e38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:ea:c5:4a:20:f6:bc:02:e6:2b:1f:bd:41:
                    65:c2:d2:07:50:7d:57:05:f4:72:ff:e6:e2:19:1b:
                    d6:35:64:b9:1a:ef:30:72:ed:0e:e1:1d:7f:b6:09:
                    6f:90:64:8e:5d:6e:0d:9a:8f:c8:2d:05:ba:a2:4c:
                    e0:07:81:22:e2:29:7c:02:09:0a:98:37:16:21:39:
                    10:fe:f1:fc:ea:87:9e:1d:85:2b:59:3b:a5:e5:26:
                    5f:26:82:f7:c6:f9:b6:95:7f:2d:5e:fc:80:eb:3f:
                    42:9b:71:fa:a4:3f:50:12:39:03:88:99:bb:6c:8b:
                    0e:f4:15:51:89:24:d7:e7:10:0d:3d:2c:2f:0c:6e:
                    40:5f:ef:41:a9:fd:64:32:23:89:8b:dc:49:aa:48:
                    20:9a:00:7c:aa:05:3d:e3:7c:23:6b:b7:29:1f:65:
                    b5:f0:5e:58:55:2c:85:66:0e:e5:f4:5a:10:28:60:
                    87:81:cd:ed:4f:f3:6e:e0:d4:d1:8f:97:d3:08:66:
                    96:fb:cd:6c:b8:ba:9e:0e:4b:28:08:8c:21:af:32:
                    90:91:a6:f5:42:e2:1f:91:10:56:e7:72:06:30:3f:
                    3c:7b:75:08:c5:bf:3c:06:ce:34:f4:fa:cb:64:13:
                    d0:95:f9:a4:b6:70:05:d1:45:66:54:9f:3f:5b:6c:
                    9b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F5:81:0E:1D:EB:60:EB:48:C3:68:23:2C:57:5D:6F:78:46:09:8F
            X509v3 Authority Key Identifier:
                keyid:87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e2:f9:80:88:b9:69:b5:ca:b3:48:39:c6:5a:98:87:13:d9:
         a3:d1:20:53:37:97:b3:0b:b6:70:99:23:90:f1:25:1d:47:79:
         73:94:8c:26:d8:87:8b:87:c1:0d:4a:e1:5b:e9:98:e4:b8:f9:
         bf:74:dc:05:7a:0f:b5:1f:ec:df:a6:d0:fc:d9:74:b6:cd:cd:
         53:05:57:21:42:42:a2:60:e6:22:5d:b1:27:eb:f3:5e:a0:4b:
         42:cb:87:91:b2:3d:7c:d2:d1:71:17:ef:67:83:17:57:34:22:
         e4:15:d2:3f:6f:b9:fa:23:68:af:57:85:94:0a:d2:68:61:11:
         dc:5f:39:40:21:b1:3f:d6:3f:51:56:cd:c4:b8:c0:f2:a5:ee:
         6d:25:ae:7f:65:da:b2:1f:59:40:56:c5:af:ea:fd:6c:f5:71:
         9d:46:e7:65:7e:76:dd:73:ec:5c:3a:47:d1:eb:c8:16:44:cf:
         58:9b:5a:6c:79:cc:73:f3:0a:7c:fd:06:03:8a:17:31:de:3c:
         04:c4:38:0a:31:5e:c8:d3:9f:90:73:7a:be:86:cd:53:53:a3:
         53:fa:f6:41:42:db:ac:0c:a3:2f:a4:aa:ab:9f:39:fd:11:50:
         ef:2c:d4:ba:a9:7d:5c:39:9c:25:82:57:be:13:74:ec:5c:2b:
         f4:10:32:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:56:36 2025 by rpki-client