This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
File:                     6tZGNV11k2y5Pta623kKh_4VN0o.mft (raw, json)
Hash identifier:          fai5YoV9RHV367rrR0Ptm+QGSUOvbkM4BVplXxLeu9M=
Subject key identifier:   91:BB:65:5E:FC:9C:5E:D8:13:9F:0D:45:FB:5E:34:0A:4B:EF:81:17
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Certificate issuer:       /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
Manifest number:          0169
Signing time:             Fri 19 Dec 2025 03:10:10 +0000
Manifest this update:     Fri 19 Dec 2025 03:10:10 +0000
Manifest next update:     Fri 26 Dec 2025 03:10:10 +0000
Files and hashes:         1: 6tZGNV11k2y5Pta623kKh_4VN0o.crl (hash: Ol/87SbyIqAMLNIUcT7KZyRXOfTqqPNlgPR6ZEZWxe8=)
                          2: 836FCA52168411EFB6BDB96BC4F9AE02.roa (hash: TAOed49FFqoRHgKFy+Jz2KuJalrMPjm52i7KeouMhd0=)
                          3: DCE2A830EC3A11EE8CC3B820C4F9AE02.roa (hash: wVAgrqCE/Wj+Oq7c+aZ97qsJSVe62sCRsRf4hdQIDT4=)
                          4: DD555A9CEC3A11EE8CC3B820C4F9AE02.roa (hash: IYbwvT3qmzwsASPi9gEwkFkjfys+ZxVpssJBjkvN+uw=)
                          5: 85F80AF6EC3011EE92FDDE25C4F9AE02.roa (hash: tLt6JDfDub8DNFZW2G3EMTsxDiFDr62JlgmUF1Jhoi8=)
                          6: DC3455AAEC3A11EE8CC3B820C4F9AE02.roa (hash: lkljamiAGuWTdMNk035Kt/plV9Fx0R6Faku03HPbg7U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
        Validity
            Not Before: Dec 19 03:10:10 2025 GMT
            Not After : Dec 26 03:10:10 2025 GMT
        Subject: CN=6944c212-1204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7a:95:f7:e4:30:89:31:97:a4:39:43:34:5f:
                    6d:02:78:61:2a:16:54:08:63:f6:4f:e8:3e:20:72:
                    0f:f9:f6:26:3e:09:0a:4e:06:18:fe:d1:30:2d:37:
                    e6:a1:54:88:81:d5:25:04:d5:ef:4f:5a:34:9e:ba:
                    4a:16:1d:69:f9:f1:f0:5b:a1:e2:3d:b4:84:e2:29:
                    03:6c:f8:e1:b6:1c:33:5f:41:a0:37:49:d6:99:65:
                    8d:04:16:03:bd:25:35:82:89:af:0b:d7:86:33:59:
                    ce:ee:17:a2:a6:3f:cc:ff:b6:c5:36:0b:d8:65:b2:
                    ac:69:18:cc:66:6c:3b:dd:22:12:cf:4b:19:26:cd:
                    2d:6b:ec:15:74:7b:e1:17:19:b5:f5:c9:aa:7c:1f:
                    4c:d8:96:4f:98:b1:03:f5:41:5e:05:a1:45:33:21:
                    97:e1:46:1d:35:28:c1:dc:4a:0d:64:b3:bb:05:f8:
                    38:52:6e:05:85:b5:a1:a5:99:71:77:8b:84:68:8d:
                    83:03:96:80:33:8f:7e:e6:43:ab:9c:d7:5c:78:c6:
                    14:ff:a4:4b:e1:f5:2d:a6:20:af:a8:79:71:56:d5:
                    2f:f7:55:a3:e7:09:d1:3d:6c:26:66:9e:b8:34:0c:
                    e8:2f:6b:5e:c8:aa:8e:d3:ae:12:24:cd:59:70:f9:
                    3c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BB:65:5E:FC:9C:5E:D8:13:9F:0D:45:FB:5E:34:0A:4B:EF:81:17
            X509v3 Authority Key Identifier:
                keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a7:71:1f:b6:bb:d5:a6:f7:d3:15:84:54:71:5b:21:41:b5:
         7d:a1:36:1a:f1:da:cb:3c:06:68:c8:20:f5:f3:da:d1:21:3b:
         ce:25:75:b5:1c:93:13:89:e5:84:f7:66:63:4c:c0:34:20:89:
         08:d0:93:e1:be:ff:c7:63:8a:c0:2b:79:67:11:57:ab:5e:04:
         d2:ef:43:71:df:e0:29:2c:32:e8:ce:74:9e:5c:d6:b2:0c:30:
         ff:c0:89:d5:9b:71:38:6b:cf:26:88:ef:2f:66:b9:e8:ae:9b:
         3d:54:48:5b:c9:4c:4e:06:44:86:0a:ba:5c:ac:62:de:7a:a9:
         a3:d2:0a:97:ea:a9:d2:04:2a:63:be:c3:32:90:1b:86:c1:6b:
         17:40:3b:8d:f8:ea:0b:0f:12:a1:11:ce:0e:da:9d:3f:ca:6f:
         b2:38:a6:16:0c:ba:1c:cb:68:c6:3c:c7:c5:28:12:9a:7f:5f:
         47:a1:76:77:39:f3:8a:9d:bd:2a:0e:77:d6:0c:17:ac:40:63:
         dd:1a:0e:cc:ce:65:30:f6:ca:7c:c6:e0:9d:54:67:fe:0f:d5:
         b0:15:2f:f5:ff:8e:d5:bf:bb:13:82:ed:20:8f:fb:f5:f8:d3:
         42:d2:3c:ec:55:a8:80:90:5d:a8:e9:fc:1c:69:08:f6:8a:ff:
         53:30:b5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:27:33 2025 by rpki-client