This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
File:                     ahpG6ANoiAaY7zBCQgW5d5voseA.mft (raw, json)
Hash identifier:          Xo4VHMHHcVAuDs3k3p0ZnJlJ8xaa4htHrjEj8p7LfnU=
Subject key identifier:   01:BD:2F:F7:D6:FE:BC:02:B7:81:5B:9C:B9:41:04:D3:A9:40:AA:10
Authority key identifier: 6A:1A:46:E8:03:68:88:06:98:EF:30:42:42:05:B9:77:9B:E8:B1:E0
Certificate issuer:       /CN=A91442DE/serialNumber=6A1A46E80368880698EF30424205B9779BE8B1E0
Certificate serial:       0653
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
Manifest number:          064E
Signing time:             Sat 20 Dec 2025 21:57:51 +0000
Manifest this update:     Sat 20 Dec 2025 21:57:51 +0000
Manifest next update:     Sat 27 Dec 2025 21:57:51 +0000
Files and hashes:         1: ahpG6ANoiAaY7zBCQgW5d5voseA.crl (hash: rQxvLh5VTbdT9onB+zfCEPVFDn+wTWnGgOX7jzu+sXA=)
                          2: 0D5812C4B2E711EB8A61B44EC4F9AE02.roa (hash: x6RJn5oQmyrZkTIL+jnIDh/DG4GNtduzvhq+KZOjCjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.crl
                          rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1619 (0x653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91442DE, serialNumber=6A1A46E80368880698EF30424205B9779BE8B1E0
        Validity
            Not Before: Dec 20 21:57:51 2025 GMT
            Not After : Dec 27 21:57:51 2025 GMT
        Subject: CN=69471bdf-6602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:2d:12:85:06:f1:e6:ae:7c:a5:1a:e6:81:
                    05:8d:f6:b6:53:9a:78:d1:80:10:53:32:75:4c:c6:
                    22:03:3c:de:01:83:20:21:9f:79:12:f6:c1:3e:2d:
                    a0:0a:ab:c7:47:15:1b:f4:bf:9e:3f:21:87:ab:47:
                    60:dc:4a:5b:06:9d:be:ff:96:59:39:de:f4:e9:c3:
                    6c:0c:83:9a:aa:d8:17:a2:ec:ce:d3:01:3f:9b:04:
                    57:01:bd:61:0c:5d:8f:44:84:8f:0e:11:e9:b4:59:
                    49:fa:09:93:f3:51:41:a9:23:aa:4f:96:6a:f1:e4:
                    7b:b1:fe:8a:81:eb:17:c2:d3:40:d7:18:b9:a5:af:
                    c2:d5:98:26:57:39:6d:7f:9c:d8:37:31:a7:78:37:
                    0c:7c:12:2b:20:56:e7:4c:d2:0c:b2:07:82:b4:81:
                    b4:60:16:ae:a7:6a:48:dd:a2:d8:16:eb:a9:79:70:
                    d8:76:29:ea:c1:07:2d:41:67:ab:f8:11:d9:ad:2e:
                    07:ea:e2:a6:a4:4c:a5:4f:60:cc:c3:96:5a:fb:ac:
                    43:c4:35:7e:61:31:87:7f:36:59:34:e5:95:49:52:
                    97:ec:48:be:0d:02:ee:48:16:b1:ad:f3:b2:92:1e:
                    04:e1:5a:83:59:ea:5d:31:bc:05:e2:4b:e3:6a:b9:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BD:2F:F7:D6:FE:BC:02:B7:81:5B:9C:B9:41:04:D3:A9:40:AA:10
            X509v3 Authority Key Identifier:
                keyid:6A:1A:46:E8:03:68:88:06:98:EF:30:42:42:05:B9:77:9B:E8:B1:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahpG6ANoiAaY7zBCQgW5d5voseA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442DE/52043414B23A11EB9074774AC4F9AE02/ahpG6ANoiAaY7zBCQgW5d5voseA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d1:e4:c8:7b:3a:e4:b0:4e:8b:1d:e9:84:db:fc:89:35:36:
         1e:04:32:d2:82:5f:a9:2f:14:86:34:0a:ec:2f:15:a6:cd:83:
         2e:da:d7:b1:cd:97:0f:ac:82:34:03:38:0d:15:f0:50:c6:14:
         2e:7e:80:df:b7:e0:0e:ce:18:61:fa:09:04:16:9e:a0:fe:f4:
         56:cf:7d:b0:c5:26:59:e7:e6:25:5b:c8:e0:a7:76:a0:01:59:
         a1:99:a4:01:35:a5:88:cc:af:98:5b:29:5c:d1:0d:6a:21:d2:
         79:a2:25:84:3e:8c:e8:02:ed:59:2f:9d:ba:6e:94:93:c0:6d:
         9e:8f:ba:62:3e:47:ae:22:f4:27:cd:2a:4e:38:fb:9b:6a:46:
         8f:4a:9a:ef:ee:73:03:d8:a4:d1:18:92:eb:78:bc:b2:ac:16:
         d1:f3:da:74:3b:f0:89:0b:f6:b0:6d:82:26:d4:7d:72:fc:04:
         99:e6:8a:56:52:5d:5f:63:bd:93:11:a5:e6:28:d3:d9:6b:46:
         fa:15:55:1a:03:1c:01:ee:81:4d:e8:ac:d9:1b:0d:c6:87:0b:
         b9:ac:fd:72:4e:a2:22:a2:75:44:11:86:0a:ae:9b:bd:64:75:
         ee:98:b5:a3:b1:aa:93:d4:4e:f2:ed:5e:58:fe:b1:cd:7b:17:
         bf:6d:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:09:54 2025 by rpki-client