This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
File:                     mP6mxE_1MoSDXoHQcN_BggttUOk.mft (raw, json)
Hash identifier:          NZc7zwaF4vqe0SzxiMeWNkMDpEy8zt1vMG6hQvAW1A4=
Subject key identifier:   62:59:42:EB:02:B0:59:77:0F:B7:8A:39:48:0B:AB:63:B1:FF:C3:4A
Authority key identifier: 98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9
Certificate issuer:       /CN=A912F6E3/serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
Manifest number:          CD
Signing time:             Thu 01 Jan 2026 05:23:19 +0000
Manifest this update:     Thu 01 Jan 2026 05:23:18 +0000
Manifest next update:     Thu 08 Jan 2026 05:23:18 +0000
Files and hashes:         1: mP6mxE_1MoSDXoHQcN_BggttUOk.crl (hash: SiasqHAvP2ZnXzfEyiMJrysnc1BUjhpOt2eTn+fQcRo=)
                          2: C241D8CCE1DD11EF9D21BB10C4F9AE02.roa (hash: aOaJVSoayyWp8EmwajlM6cWFw4ReqENsLISzvhYiTKc=)
                          3: B21566C0EE5911EF87651F0AC4F9AE02.roa (hash: wUwv5nKPByd5iXm4Rp1wHIbyB56bV0LiIzKOApqPsGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl
                          rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 05:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F6E3, serialNumber=98FEA6C44FF53284835E81D070DFC1820B6D50E9
        Validity
            Not Before: Jan  1 05:23:18 2026 GMT
            Not After : Jan  8 05:23:18 2026 GMT
        Subject: CN=695604c7-6308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:db:fe:5c:3c:f2:7f:aa:fa:20:44:64:d1:
                    54:2b:77:61:8d:7a:38:91:ca:5e:96:cd:3e:b6:84:
                    a2:92:d3:41:e1:11:a7:57:20:dd:3e:6d:37:06:12:
                    80:09:5f:79:98:1e:04:6b:db:99:8f:cb:98:8a:1d:
                    d9:91:aa:c9:b0:1f:8c:08:63:bf:04:00:be:ef:ab:
                    a0:78:98:e1:8a:23:34:e3:92:22:2e:92:ad:bd:ec:
                    5f:e0:42:86:03:9d:01:ac:87:9b:2e:25:3e:81:92:
                    94:cd:f4:ed:87:ba:31:86:43:ec:ca:45:97:43:0b:
                    63:b6:1d:81:56:99:62:87:70:3c:b8:b4:46:ef:1b:
                    ae:18:84:2c:aa:e1:9e:9a:73:60:4f:f0:15:43:03:
                    f4:7e:f8:52:3c:8f:ca:c2:d8:4c:e2:3f:8a:ea:48:
                    68:fe:ca:a5:29:52:44:b7:ea:91:2d:8b:79:9d:e2:
                    48:aa:0d:a3:35:77:ba:42:38:a1:61:b0:ec:31:8c:
                    99:08:84:c7:2b:dc:2a:18:fa:cf:94:a3:f7:08:95:
                    96:a9:a3:6e:49:de:4d:75:32:9d:26:6d:fb:79:7a:
                    03:9a:fd:62:5c:18:76:b4:5f:ae:65:af:94:2d:fe:
                    3e:ba:07:d5:b1:40:fd:dd:39:91:ff:9a:5a:f2:60:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:59:42:EB:02:B0:59:77:0F:B7:8A:39:48:0B:AB:63:B1:FF:C3:4A
            X509v3 Authority Key Identifier:
                keyid:98:FE:A6:C4:4F:F5:32:84:83:5E:81:D0:70:DF:C1:82:0B:6D:50:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mP6mxE_1MoSDXoHQcN_BggttUOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/EA5381DEB5DD11EF97D9FA34C4F9AE02/mP6mxE_1MoSDXoHQcN_BggttUOk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4b:e3:7a:aa:f1:6f:20:d7:df:c0:23:ff:35:35:d4:40:36:
         d0:1e:28:e3:80:61:cc:72:82:88:68:0a:fe:3c:00:5a:9b:25:
         2d:00:15:4e:44:e4:a3:07:6a:ba:98:51:21:91:93:ef:d9:1b:
         8c:ea:70:2b:81:e0:dc:d1:4e:d4:ff:35:7d:aa:ff:3d:eb:05:
         3b:07:7b:c1:1a:c9:81:c1:bc:43:b1:b7:ea:a3:4f:13:df:e9:
         83:9e:ea:68:14:df:ef:60:41:d4:dc:c1:f8:40:cf:f7:99:d4:
         12:04:ed:a6:14:e9:fe:26:53:fa:fb:91:21:0e:41:36:13:e2:
         a4:d1:f2:00:a4:03:bb:d6:77:0d:88:fe:c0:0a:bc:62:36:14:
         88:1a:28:c7:c3:ab:95:60:31:b8:16:98:2a:0d:5d:ca:c0:68:
         71:30:a9:3a:7b:af:0c:a5:8e:40:26:73:89:73:a4:33:58:2a:
         50:25:c1:d8:7e:51:15:a3:af:db:6b:26:65:0c:ba:4f:24:48:
         e8:9a:e9:34:55:be:9d:ce:c9:b0:f7:e5:c8:d8:d3:a2:ab:53:
         d0:b3:d9:11:0d:8f:e1:b9:83:1e:4f:82:5c:7f:77:32:d0:b4:
         56:65:91:ba:0c:df:ee:8f:b0:ed:ce:07:f0:10:9f:24:60:8e:
         c1:a2:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 14:27:20 2026 by rpki-client