This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
File:                     6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json)
Hash identifier:          w7O4IT317za3ADp1VpMvrn6QQi01HfogN9B9C+lS9Hs=
Subject key identifier:   8C:B0:EB:4B:56:13:61:81:B9:53:54:B5:57:DD:94:E6:4C:9A:7E:58
Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
Certificate issuer:       /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
Manifest number:          0121
Signing time:             Sun 07 Dec 2025 03:03:12 +0000
Manifest this update:     Sun 07 Dec 2025 03:03:11 +0000
Manifest next update:     Sun 14 Dec 2025 03:03:11 +0000
Files and hashes:         1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: BkcgocCFbO8OXLjQCZZfAf+nM0SVNNsWAQuXifxR4pw=)
                          2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=)
                          3: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: l5eDg1NtuwC6/S6spgtl7+l3t055Pm1B+3DrcaZ20+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
                          rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
        Validity
            Not Before: Dec  7 03:03:11 2025 GMT
            Not After : Dec 14 03:03:11 2025 GMT
        Subject: CN=6934ee70-7ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:89:af:51:27:75:cc:b6:9f:78:3b:dd:df:
                    37:50:bf:d8:66:a6:b9:63:f4:08:17:67:be:d0:b5:
                    d9:05:c2:4b:b9:db:88:68:02:2b:15:24:66:ba:df:
                    31:9b:95:d5:9f:69:3b:69:d5:38:85:7c:85:32:b4:
                    f8:82:08:a4:1b:a0:b4:8c:9e:d0:07:bf:ad:77:55:
                    eb:fe:53:e3:ec:6a:98:79:a2:22:08:f5:cf:0a:ec:
                    05:15:fc:ef:a1:20:8d:e4:6f:4e:b5:47:58:d3:79:
                    ab:77:0d:ef:db:6a:45:cc:a2:28:d6:d7:5d:ee:3f:
                    33:51:13:92:83:12:a5:6b:de:81:2c:52:05:16:8f:
                    b0:38:73:fb:a8:7f:7e:f3:44:a5:d0:b6:03:d0:b8:
                    ff:2d:d4:35:5b:6f:84:20:d6:5f:34:1b:0c:af:30:
                    88:e3:a1:f1:1f:c6:c4:8b:7b:82:3c:bc:b1:d2:cb:
                    d6:35:ab:a8:b3:5f:5a:10:49:a5:5a:f9:6e:c7:a5:
                    4b:b3:4e:95:ae:8c:3e:ae:7a:df:7f:b7:9d:3c:ae:
                    71:7c:74:7b:a6:a8:58:6d:4e:68:d1:97:c9:71:c7:
                    5c:ff:27:86:64:19:8d:28:bc:1e:b6:d1:b0:e5:69:
                    9d:8e:f2:b0:95:57:aa:01:86:18:f6:52:96:97:ac:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B0:EB:4B:56:13:61:81:B9:53:54:B5:57:DD:94:E6:4C:9A:7E:58
            X509v3 Authority Key Identifier:
                keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:05:07:c4:91:00:43:d7:0f:56:af:6e:b1:d4:3e:ab:ee:19:
         73:37:7c:f9:d7:b6:5c:99:db:30:57:21:a8:14:f1:17:ff:68:
         e9:4a:67:2a:51:16:1c:33:ef:af:28:65:5c:01:d2:11:65:1e:
         0b:1a:f9:e3:91:06:f7:ff:c9:8a:4c:7f:f0:c4:46:36:15:f9:
         ba:d1:ea:10:3c:89:fa:b7:e8:61:ec:89:06:5c:64:7d:13:79:
         94:95:f3:d5:f1:50:ae:6e:74:c3:e0:1d:aa:42:bf:15:0a:a8:
         11:83:b5:20:9c:cd:e0:12:9f:06:34:0a:cd:2a:4c:99:c8:18:
         42:5d:cc:3d:2a:08:b9:6a:37:e4:5b:36:94:88:ae:fb:13:b9:
         72:af:3a:14:a0:7b:ca:f7:ff:4b:32:5e:f3:85:79:c0:d2:fc:
         b1:47:42:08:1d:51:16:7d:1b:84:57:14:97:07:60:6f:52:1c:
         de:57:08:90:27:c5:67:15:58:d6:d2:63:f6:80:27:43:5c:ab:
         ed:8a:2d:c8:bb:61:2c:a6:8e:63:e8:e7:cf:ce:c3:ac:85:0d:
         c0:38:0d:06:f2:7c:0f:c2:88:cd:c6:54:96:54:43:2b:4d:a1:
         19:25:71:f0:e4:32:24:03:71:f4:9d:a7:0f:3e:e4:49:b6:bc:
         d6:d6:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:54:14 2025 by rpki-client