This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
File:                     8630DB364752FB672480309F11531C73BFEDD599.mft (raw, json)
Hash identifier:          epf47b5qbQCBCEZ8wMI2uTSiL0t1DlLOn0IC5BIXRYE=
Subject key identifier:   60:D7:BA:CF:36:3E:FE:80:CD:95:13:01:10:C0:D5:72:C0:8E:A4:CD
Authority key identifier: 86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
Certificate issuer:       /CN=A916FC1D0000/serialNumber=8630DB364752FB672480309F11531C73BFEDD599
Certificate serial:       0C793461CAA2AD4AADE0DB856A92E607E4228CED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
Manifest number:          6A
Signing time:             Fri 05 Dec 2025 12:43:49 +0000
Manifest this update:     Fri 05 Dec 2025 12:38:49 +0000
Manifest next update:     Sat 06 Dec 2025 14:00:49 +0000
Files and hashes:         1: 34392e3231332e36322e302f32342d3234203d3e20323133363035.roa (hash: O+O3ngvT2eRgjWysCEGH5MTbHUuNdWckcsQv0KzXeTs=)
                          2: 34392e3231332e36332e302f32342d3234203d3e20313534313535.roa (hash: lxmJhnE/3u/mEMAudnAPfckbhfAAPLZoqr3Lo3NuO8c=)
                          3: AS154185.asa (hash: xW7GnBx56SfJdYNlrU/w1PbVhWMkbLQHK0Zou3F050g=)
                          4: 8630DB364752FB672480309F11531C73BFEDD599.crl (hash: W17lmujhBr9T58X9qk/8rUvmCQPQb/ewRt9naCGPEDQ=)
                          5: 34392e3231332e36322e302f32342d3234203d3e20323130343430.roa (hash: iyW/ljRQsKCO9JHAhgKUjRKGu4Bwdq2FqesU5BPiDEE=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl
                          rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:79:34:61:ca:a2:ad:4a:ad:e0:db:85:6a:92:e6:07:e4:22:8c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FC1D0000, serialNumber=8630DB364752FB672480309F11531C73BFEDD599
        Validity
            Not Before: Dec  5 12:38:49 2025 GMT
            Not After : Dec  6 14:00:49 2025 GMT
        Subject: CN=60D7BACF363EFE80CD95130110C0D572C08EA4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7e:a4:5e:5b:85:a6:75:7d:97:8a:da:bf:21:
                    f2:75:d1:2e:f8:fa:04:56:24:f8:f0:6c:a6:97:d4:
                    3b:8d:3e:87:c3:9d:e7:ea:98:e7:72:55:c3:07:fd:
                    46:6a:47:1d:a2:a1:45:1e:9f:95:74:84:97:94:b5:
                    41:9e:50:06:e0:cf:8e:96:3d:a4:8d:23:c5:e4:7f:
                    9c:46:ee:d7:df:cf:97:47:ec:cc:60:b1:5a:4c:f7:
                    59:e6:f0:e1:61:0b:ff:60:a4:89:22:43:01:53:fc:
                    ea:4b:22:99:21:39:bc:48:76:63:67:4e:ce:4a:55:
                    7d:03:b1:3d:7c:a8:d2:ef:b3:88:73:6e:0b:d8:ca:
                    c1:5e:e6:7b:a6:40:0b:26:1a:02:d0:a6:be:cc:f9:
                    54:ff:62:b2:c7:42:78:d1:20:48:09:5f:09:46:0e:
                    75:a0:8c:ea:4e:26:97:0b:35:f9:90:b1:e4:a1:88:
                    e4:07:46:fa:ab:b3:b8:c7:b6:95:52:ee:d0:52:db:
                    c0:95:ec:43:0d:52:03:f8:4b:af:3f:0c:37:fe:67:
                    2f:dd:83:32:69:63:ea:99:43:9c:b3:b4:a4:18:be:
                    8f:31:cc:86:85:b9:ec:af:34:27:0f:1e:3b:86:f8:
                    2e:66:5b:19:8d:a0:5b:a6:e7:b5:64:89:f8:32:3b:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D7:BA:CF:36:3E:FE:80:CD:95:13:01:10:C0:D5:72:C0:8E:A4:CD
            X509v3 Authority Key Identifier:
                keyid:86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b5:9c:90:08:69:f8:ac:49:1e:15:6e:59:98:d0:0c:5c:1d:
         80:94:7c:4a:ad:8f:cc:04:e7:82:96:4d:10:f7:e7:3a:5e:da:
         f3:54:e4:e1:00:ae:d7:b9:8f:eb:c7:db:ca:c0:03:00:65:16:
         f6:93:87:bc:4b:a6:e1:26:66:be:cd:b8:24:e7:de:26:b7:4f:
         ca:14:41:83:b3:97:8d:96:5f:66:7b:4a:b9:a4:a7:0c:08:54:
         86:b4:fe:c4:ab:30:14:42:1b:3c:57:1f:b8:ce:c8:fd:44:6b:
         69:fe:63:35:7a:ee:00:08:19:10:72:8d:01:71:b9:a5:f3:a8:
         44:10:05:23:08:f6:29:28:42:fe:5f:f9:aa:b2:dd:11:bf:a7:
         53:6c:28:04:d5:bd:29:16:68:ed:8a:88:60:de:b0:5e:58:c2:
         a8:65:b5:8f:85:be:b9:32:e9:d8:8f:ea:75:c5:e5:82:f4:02:
         05:60:96:3f:f3:1b:b4:fb:45:26:ca:97:8e:2c:40:df:50:eb:
         8b:1e:02:1a:b9:3f:c7:e3:98:c2:83:fa:67:3b:a8:da:c7:ec:
         0c:da:ae:fe:4f:61:d4:79:75:73:5a:4b:61:b4:6a:d7:0d:25:
         62:f5:04:77:d4:99:92:e9:49:20:9e:ec:23:00:96:7a:03:95:
         b0:93:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:52:27 2025 by rpki-client