This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
File:                     6HvQXvddUFllr1CWfUKLtf_-HME.mft (raw, json)
Hash identifier:          fFg97GQpbXoV19/M+c4ziKE1sDNZyLGIAjgnBM0X+pY=
Subject key identifier:   11:86:5E:62:BF:B4:40:F4:24:D7:04:3D:98:CB:CE:52:90:E2:06:0C
Authority key identifier: E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1
Certificate issuer:       /CN=A9112327/serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1
Certificate serial:       09EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
Manifest number:          09E5
Signing time:             Wed 24 Dec 2025 19:23:48 +0000
Manifest this update:     Wed 24 Dec 2025 19:23:47 +0000
Manifest next update:     Wed 31 Dec 2025 19:23:47 +0000
Files and hashes:         1: 6HvQXvddUFllr1CWfUKLtf_-HME.crl (hash: ErVN4+3636whGZVO4ldjrxLQM5rT8k1Gwl7EgyjrG7Q=)
                          2: 03643212905F11EA94823C28C4F9AE02.roa (hash: HOv6woKgZ16Bnc6yr+WXy4C1GAOaPia/dFqUxc6c7eU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl
                          rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 19:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2540 (0x9ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112327, serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1
        Validity
            Not Before: Dec 24 19:23:47 2025 GMT
            Not After : Dec 31 19:23:47 2025 GMT
        Subject: CN=694c3dc3-fe45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:9e:fd:3f:61:8f:4d:5f:9e:f6:2f:0a:b8:
                    16:20:eb:1c:94:28:d5:e6:5d:cd:c4:96:0e:f4:3b:
                    98:27:ab:70:14:44:7a:09:2c:87:c0:6f:cf:81:a7:
                    5b:6f:4f:23:df:00:de:1d:fa:1d:71:98:92:e7:e6:
                    a6:01:ae:ad:00:44:64:7c:44:a8:6e:81:ff:ea:14:
                    80:e6:ab:e8:f9:7f:ba:e5:02:52:35:5f:fe:52:b3:
                    55:4c:94:50:b4:14:c3:36:ea:ed:b4:be:7c:cb:43:
                    52:f0:5b:28:b7:d9:2a:87:25:6f:1b:88:62:f3:0f:
                    70:9d:6b:93:61:ed:69:f2:82:6c:95:90:00:5f:0d:
                    53:0a:27:30:78:3d:cf:0d:f6:e0:2b:64:82:b6:82:
                    80:66:55:9b:90:3a:b5:d1:ad:71:fd:2c:64:ba:92:
                    7e:6a:07:20:98:cc:0b:17:d0:1c:92:f2:c5:03:3e:
                    8c:da:f1:22:d8:c5:63:d0:c5:d9:52:9b:09:ea:d7:
                    2d:83:0d:21:55:c1:dd:b7:38:b8:cf:d5:c1:4a:2c:
                    79:43:7e:70:47:e3:8b:c1:08:ec:8f:2f:23:70:6f:
                    c3:6a:81:0b:14:cf:09:6b:c8:0e:e1:c9:f7:af:4f:
                    60:88:d3:38:b9:de:b9:63:84:f6:29:24:ca:9b:ae:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:86:5E:62:BF:B4:40:F4:24:D7:04:3D:98:CB:CE:52:90:E2:06:0C
            X509v3 Authority Key Identifier:
                keyid:E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e6:02:84:60:28:e7:8a:eb:19:4c:19:6b:94:d6:25:64:47:
         c6:35:a6:d3:d4:d5:1c:44:80:92:da:8b:24:f7:c3:98:82:4f:
         f5:7e:98:8b:d6:f4:fa:1a:0c:30:a3:30:ad:35:99:3b:2c:ea:
         df:68:9c:a2:32:e5:37:e9:db:b3:ca:1d:47:32:27:6b:ff:fc:
         32:88:77:1a:e5:df:6b:6b:20:69:c4:88:fc:87:ae:51:2f:95:
         6e:74:a2:ea:37:49:de:a7:01:81:6c:ce:ee:a9:0d:eb:ce:f2:
         b6:97:57:af:1f:1d:b4:26:e8:5c:10:b4:e1:9f:5f:89:3a:8d:
         dc:bd:96:9f:26:ca:52:2f:af:7d:e2:35:3e:85:e1:6e:25:8d:
         8c:19:9e:c6:eb:cd:b4:c1:74:b2:a9:df:28:7f:b8:b8:ad:d7:
         8a:2d:82:c5:3f:2e:57:0f:f1:77:93:d8:f8:32:11:ab:ce:34:
         e9:3d:6e:4e:fa:16:8f:7d:23:a6:49:16:36:73:0e:1a:cf:7a:
         dd:35:09:ac:ce:8f:ec:23:57:0b:e9:27:da:8f:4b:d6:24:b3:
         76:41:cb:1d:2f:11:7c:06:41:3d:df:6a:7e:1d:c9:76:85:fc:
         93:26:4e:4e:a3:e0:45:1e:53:25:9d:96:51:ff:6f:b5:95:7a:
         e2:85:fa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:39:35 2025 by rpki-client