This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
File:                     6bYAyebdjO7JchldY0nImDj3Rb4.mft (raw, json)
Hash identifier:          8QUTH3zXbPJaXacnv9F8MvZZmUp7Z6nw/AA4TaZdZlE=
Subject key identifier:   6F:95:73:F5:FE:6E:F0:8D:28:D0:2A:3E:68:1F:D5:30:0F:40:85:4B
Authority key identifier: E9:B6:00:C9:E6:DD:8C:EE:C9:72:19:5D:63:49:C8:98:38:F7:45:BE
Certificate issuer:       /CN=A9117257/serialNumber=E9B600C9E6DD8CEEC972195D6349C89838F745BE
Certificate serial:       01F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
Manifest number:          01E1
Signing time:             Tue 30 Dec 2025 10:52:32 +0000
Manifest this update:     Tue 30 Dec 2025 10:52:32 +0000
Manifest next update:     Tue 06 Jan 2026 10:52:32 +0000
Files and hashes:         1: 6bYAyebdjO7JchldY0nImDj3Rb4.crl (hash: p/HeqVcWp5R3SBeUhG2pyOHq4u5lI2nQHCSDceS8ZT0=)
                          2: 7138FC520BBE11F0B8594F31C4F9AE02.roa (hash: jpNuNdu2QleRdRw+2Vwgv3Axf5tDqHuqhdfOEdsZxUs=)
                          3: B38B0F188C8511EF8E80211BC4F9AE02.roa (hash: PtbLVUOnJNkoi8KvQTAiyARz3OXKFtHD7Am5CVafI/U=)
                          4: B09305FACED711F0A1339C83C4F9AE02.roa (hash: QXbozYfql3zf0npdws1N3orSmKNu/Aqt6/GVn0LZhfc=)
                          5: A257B948E56D11F0BFC731FA3E6F56BC.roa (hash: nFxacFKilQpZ/teATUTUTKOc2E4uLhS3+/GyQmioO3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.crl
                          rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 10:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117257, serialNumber=E9B600C9E6DD8CEEC972195D6349C89838F745BE
        Validity
            Not Before: Dec 30 10:52:32 2025 GMT
            Not After : Jan  6 10:52:32 2026 GMT
        Subject: CN=6953aef0-4460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:7d:5d:90:a7:7c:de:c4:f3:ec:3d:33:72:
                    64:16:67:67:e8:e3:16:c5:1f:e7:3b:0e:52:72:39:
                    92:8c:dd:e4:f2:4e:20:73:9e:66:75:b2:1b:87:3a:
                    32:df:07:42:81:79:98:bb:9f:64:1c:df:92:06:5c:
                    12:c7:ec:32:f4:30:1f:53:9c:5a:7a:7f:b3:42:e3:
                    7f:bc:88:2c:ed:b9:ed:d3:04:22:50:73:c0:47:79:
                    a1:48:af:4a:6b:12:8a:14:b3:53:5a:e5:65:16:3b:
                    4a:d2:5f:c8:5d:e5:b2:19:e8:c7:0f:34:aa:7c:9b:
                    d0:0e:6b:b7:dc:39:ad:21:b3:c6:b5:81:e1:a8:65:
                    6d:7c:2a:27:4a:ac:58:10:98:da:d2:0f:67:67:04:
                    47:47:ec:86:9f:47:ab:2f:ef:5e:8f:3c:a1:57:59:
                    1d:73:97:a4:63:d9:e1:46:a8:7c:46:d5:3b:f5:e8:
                    5e:1f:b6:13:b2:be:88:58:fa:3f:b5:81:3a:28:cd:
                    95:d2:ee:81:45:c7:fc:63:c6:5d:3d:95:0c:ec:9f:
                    82:00:aa:3a:ef:c3:18:25:d8:0c:1f:c8:eb:c7:68:
                    d1:3f:31:74:d3:f0:0a:ba:49:3b:a2:69:17:32:77:
                    cc:d0:e1:56:02:7c:fc:8a:25:d9:e7:b6:f3:91:09:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:95:73:F5:FE:6E:F0:8D:28:D0:2A:3E:68:1F:D5:30:0F:40:85:4B
            X509v3 Authority Key Identifier:
                keyid:E9:B6:00:C9:E6:DD:8C:EE:C9:72:19:5D:63:49:C8:98:38:F7:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:8a:1a:9d:c3:2f:64:26:4b:c6:61:e5:58:76:a8:05:35:00:
         fe:ad:be:ad:09:4a:89:ba:77:ad:e4:b7:79:7f:81:b9:ab:21:
         b4:49:0a:f2:af:c2:20:8b:58:95:c8:f7:be:27:b5:0b:94:6d:
         cc:b4:e3:c3:f6:f9:59:ed:07:c5:ec:95:e7:81:69:61:93:de:
         29:ce:cb:81:61:a7:2d:60:58:89:c8:4f:17:21:10:1e:34:14:
         50:9d:61:1c:92:31:2c:20:aa:5c:18:bd:2a:37:e0:3b:d8:59:
         9e:62:d7:21:20:02:c8:48:12:56:35:0a:f1:c7:df:4f:1a:c8:
         aa:9b:46:7a:0d:05:87:11:be:1f:0a:92:f6:94:24:59:70:4f:
         7a:c2:ed:93:5e:ae:d6:fb:53:55:04:45:2d:53:ea:e7:b3:1b:
         eb:bd:ee:fa:2d:2e:28:39:4f:5d:ba:2e:31:2b:ca:c4:f7:86:
         05:89:9b:69:fd:9b:93:42:16:07:26:42:c6:f2:57:ba:13:79:
         10:43:16:0a:ae:28:4b:20:55:6a:30:31:d6:1a:19:58:2a:ac:
         6a:f7:c0:54:a3:e6:ec:6a:4d:0a:4d:dd:f3:40:93:ca:21:6f:
         62:47:f1:d1:86:da:f2:60:07:b4:81:9d:f9:fd:00:c5:f8:e0:
         e2:2a:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:03:11 2025 by rpki-client