This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
File:                     6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft (raw, json)
Hash identifier:          ZwZLnh/pHKC//Dk3pOXviaRZ2C5xV2yo7Ia7TUY1tW4=
Subject key identifier:   5D:F4:B3:65:B0:4E:DD:05:DE:C6:65:F8:D0:6F:16:4C:CA:24:9E:76
Authority key identifier: E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41
Certificate issuer:       /CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
Manifest number:          0249
Signing time:             Sun 07 Dec 2025 00:18:05 +0000
Manifest this update:     Sun 07 Dec 2025 00:18:04 +0000
Manifest next update:     Sun 14 Dec 2025 00:18:04 +0000
Files and hashes:         1: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl (hash: Tm/UcXrb2KyJ7LuJBT/db0s9o8KCQSf25ZluawrcrHw=)
                          2: FE79EA9A543C11ED972CDD2FC4F9AE02.roa (hash: gieWtrbcC8o5T2SuJsxAI3RuUs6fTQrcS9Bv8fXH6YA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl
                          rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7FB1, serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541
        Validity
            Not Before: Dec  7 00:18:04 2025 GMT
            Not After : Dec 14 00:18:04 2025 GMT
        Subject: CN=6934c7bd-dd03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:50:bf:60:04:7e:bc:50:64:dd:10:73:f7:
                    c0:8a:8e:01:b7:1b:bd:b3:c9:2b:5d:65:c7:4e:94:
                    49:93:b2:4b:62:aa:8d:f3:e9:62:9e:27:06:6e:21:
                    83:da:56:25:fe:c9:1a:f6:75:10:9a:50:c5:07:74:
                    ba:5e:91:9c:3c:e2:a0:87:e7:dc:c5:7d:09:f7:68:
                    64:3e:3c:0e:9f:b2:a5:2a:44:36:df:e2:cc:be:fe:
                    d3:51:d4:73:97:48:d2:d8:06:61:c7:da:7c:ba:7c:
                    d9:76:de:6d:79:ae:8d:e3:d6:3d:64:cb:e2:09:c5:
                    19:53:26:1f:d1:e5:0a:ac:f1:86:da:ba:6d:f6:8f:
                    65:78:15:43:4f:c1:29:80:7b:ee:fe:92:11:e7:8e:
                    eb:84:19:40:12:f0:fd:ab:3d:b9:dc:99:d8:53:a9:
                    bf:41:bc:e4:0c:40:4b:40:18:92:ed:59:3c:ba:5d:
                    f3:5c:92:2b:83:d0:44:a5:18:26:37:48:26:32:dc:
                    e3:19:32:83:68:41:93:5c:58:9c:a7:68:46:70:c4:
                    e6:1a:64:78:52:02:e3:7d:b5:c7:84:1d:8a:8a:61:
                    7e:e1:96:da:7d:ce:b5:d7:1a:72:88:8c:0c:41:fb:
                    40:e7:51:90:94:23:08:35:93:95:fd:0b:10:3d:e9:
                    e7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F4:B3:65:B0:4E:DD:05:DE:C6:65:F8:D0:6F:16:4C:CA:24:9E:76
            X509v3 Authority Key Identifier:
                keyid:E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c6:97:9e:b8:94:89:ae:94:7c:19:0c:5e:66:03:65:e0:8c:
         db:62:60:cd:7b:a0:7f:45:4e:c4:44:1c:f5:05:c6:79:11:2e:
         b7:1a:d3:6d:f7:ee:fe:4f:12:29:59:35:58:c6:a3:a0:26:05:
         c9:e0:08:25:3f:e7:cb:e9:cd:54:4e:95:24:e5:7d:a7:7c:14:
         e8:61:cd:c6:6d:8f:70:64:af:30:c6:35:27:3c:1b:f2:42:6d:
         fd:07:45:a1:e7:9f:61:a1:48:ee:96:b4:62:ea:2e:e5:cf:b7:
         43:1f:89:b0:29:6b:fa:d7:d3:4d:3b:a7:16:e5:09:d7:c5:ec:
         51:0b:42:fa:b9:98:38:32:99:3d:af:fb:45:4e:d3:2e:2c:bc:
         ff:67:9f:0d:9c:ff:8f:10:27:d7:df:c7:64:04:fa:ea:d2:49:
         c9:6d:21:c8:fa:8f:e8:55:76:a6:68:a1:f6:78:08:ab:af:3e:
         5e:aa:27:a0:ba:ad:4c:27:bc:a2:0a:a5:9c:8e:11:cd:84:50:
         c2:e3:fe:20:1b:8e:31:76:f2:ea:9e:44:5a:42:4e:14:a9:c5:
         03:d8:51:98:03:06:c8:ab:c8:01:7c:ed:fc:58:8e:84:02:b9:
         04:65:68:36:82:5b:53:6a:5c:1f:1f:28:a3:17:87:d7:e1:31:
         2a:8f:41:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:30:22 2025 by rpki-client