This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
File:                     6YYS7upK5w0ftbZSS5adR0Lc6BA.mft (raw, json)
Hash identifier:          TcPDyRGrrcP1vijucskuR0zBR5vFyc3jv46FKmkWYOY=
Subject key identifier:   19:A1:F0:48:E9:65:56:1C:40:5F:29:68:43:04:93:8B:5C:80:F6:A1
Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
Certificate issuer:       /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
Manifest number:          01C5
Signing time:             Sun 21 Dec 2025 02:15:28 +0000
Manifest this update:     Sun 21 Dec 2025 02:15:28 +0000
Manifest next update:     Sun 28 Dec 2025 02:15:28 +0000
Files and hashes:         1: 6YYS7upK5w0ftbZSS5adR0Lc6BA.crl (hash: 0B7UTRDefu91Sk0eX9oLn+3NbUXGDRfAwTiq9575YqI=)
                          2: E58351049F2011EE8D92FF5EC4F9AE02.roa (hash: pE9Ctw9QKRS8QgMh/STn9x6A8pM1YmpBJFnciqO1iE4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl
                          rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DB99, serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
        Validity
            Not Before: Dec 21 02:15:28 2025 GMT
            Not After : Dec 28 02:15:28 2025 GMT
        Subject: CN=69475840-2d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:9e:92:c3:2a:fb:59:e2:c7:9b:1d:d0:0b:
                    5a:9d:7a:2c:c2:df:78:96:2b:ef:76:bc:2c:ea:4b:
                    bc:ea:f3:c7:bf:a7:ad:15:c3:ab:cb:94:bb:a8:e8:
                    ea:43:9c:ea:0f:33:15:5a:0c:2d:1c:85:7d:ac:c9:
                    64:97:7e:70:5a:71:5f:12:71:34:af:7f:2b:80:4b:
                    aa:0d:f5:5d:59:d6:f0:c9:33:eb:b4:01:4f:71:02:
                    8c:43:f0:6d:b4:1c:a6:89:bc:15:46:32:25:d0:80:
                    2c:b0:7d:83:8a:15:d9:ca:ae:bc:27:8d:46:aa:6a:
                    5b:f9:c3:01:c6:f4:74:09:bb:65:e5:b7:cc:35:e7:
                    8b:05:bd:5d:b0:b5:7f:8d:2b:ae:e5:b1:99:7b:93:
                    06:c6:54:d1:e9:88:74:ee:d4:27:dd:68:6b:5e:75:
                    e6:fd:41:05:42:2a:ae:83:bd:0a:ac:0a:f7:61:1d:
                    9f:bc:ff:89:6e:33:6b:8f:d7:6b:60:ce:a6:d7:c9:
                    b8:03:31:98:da:1c:a7:32:5f:ab:e7:46:30:80:22:
                    b5:7c:7b:b8:88:61:c4:49:f7:ec:da:77:43:87:48:
                    a8:6f:83:cb:65:d5:99:f5:19:20:05:14:e4:b0:a5:
                    8d:52:74:3b:d7:15:e5:64:9b:0e:2d:a5:53:15:e6:
                    89:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A1:F0:48:E9:65:56:1C:40:5F:29:68:43:04:93:8B:5C:80:F6:A1
            X509v3 Authority Key Identifier:
                keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b3:d5:e9:cd:3e:ec:aa:8c:50:a0:0c:d9:e9:45:41:e4:53:
         d8:6a:0c:89:cf:6e:4b:09:cc:57:f3:9c:1c:1f:3d:d6:49:47:
         70:23:19:f0:6a:d8:cf:f0:1d:17:f9:1a:2b:50:f3:43:e4:05:
         54:84:04:14:80:ac:31:b9:b9:96:04:97:08:fc:d7:9a:c6:cc:
         b3:61:a3:ec:f7:f0:3a:fc:7c:08:0c:45:41:0f:f8:69:29:21:
         58:f1:30:f9:eb:3e:5f:86:df:9d:de:cc:8b:2a:46:70:a8:95:
         70:9f:61:af:57:0b:85:f1:d5:2a:c9:5b:3d:95:94:4b:2f:0e:
         99:8e:bb:de:b5:e6:43:03:01:29:d7:27:b3:3d:55:8b:a1:df:
         22:76:68:a0:e5:2c:0a:b1:da:eb:cb:78:ab:3e:04:e5:bc:77:
         9b:c0:43:83:7f:e6:f8:2c:b3:a5:5d:2b:c0:fe:1c:24:02:1c:
         be:7a:ff:99:a0:d4:af:69:ea:62:d6:91:1e:21:72:2e:c3:6a:
         d6:dc:eb:bd:80:c7:d0:66:fa:3d:a8:e5:44:48:f4:d0:38:06:
         70:39:35:35:25:7d:d1:bf:27:75:6e:bc:4a:65:59:eb:fd:ca:
         92:49:90:4a:22:5f:49:30:ce:4b:a7:64:90:b7:6b:59:af:11:
         5c:ea:32:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRCOTkxMTAvBgNVBAUTKEU5ODYxMkVFRUE0QUU3MEQxRkI1QjY1MjRCOTY5RDQ3
NDJEQ0U4MTAwHhcNMjUxMjIxMDIxNTI4WhcNMjUxMjI4MDIxNTI4WjAYMRYwFAYD
VQQDDA02OTQ3NTg0MC0yZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAroeeksMq+1nix5sd0AtanXoswt94livvdrws6ku86vPHv6etFcOry5S7qOjq
Q5zqDzMVWgwtHIV9rMlkl35wWnFfEnE0r38rgEuqDfVdWdbwyTPrtAFPcQKMQ/Bt
tBymibwVRjIl0IAssH2DihXZyq68J41Gqmpb+cMBxvR0Cbtl5bfMNeeLBb1dsLV/
jSuu5bGZe5MGxlTR6Yh07tQn3WhrXnXm/UEFQiqug70KrAr3YR2fvP+JbjNrj9dr
YM6m18m4AzGY2hynMl+r50YwgCK1fHu4iGHESffs2ndDh0iob4PLZdWZ9RkgBRTk
sKWNUnQ71xXlZJsOLaVTFeaJGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmh8Ejp
ZVYcQF8paEMEk4tcgPahMB8GA1UdIwQYMBaAFOmGEu7qSucNH7W2UkuWnUdC3OgQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5OS9CQzY1OUJDNjMx
QjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3MGZ0YlpTUzVhZFIwTGM2
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZZWVM3dXBLNXcwZnRiWlNTNWFkUjBMYzZCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REI5OS9CQzY1OUJDNjMxQjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3
MGZ0YlpTUzVhZFIwTGM2QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHs9XpzT7sqoxQoAzZ6UVB5FPYagyJz25LCcxX85wcHz3WSUdwIxnw
atjP8B0X+RorUPND5AVUhAQUgKwxubmWBJcI/NeaxsyzYaPs9/A6/HwIDEVBD/hp
KSFY8TD56z5fht+d3syLKkZwqJVwn2GvVwuF8dUqyVs9lZRLLw6ZjrveteZDAwEp
1yezPVWLod8idmig5SwKsdrry3irPgTlvHebwEODf+b4LLOlXSvA/hwkAhy+ev+Z
oNSvaepi1pEeIXIuw2rW3Ou9gMfQZvo9qOVESPTQOAZwOTU1JX3Rvyd1brxKZVnr
/cqSSZBKIl9JMM5Lp2SQt2tZrxFc6jK1
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:23:49 2025 by rpki-client