This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
File:                     RC6qL6yoXGzvgcRKZaY36GftNTQ.mft (raw, json)
Hash identifier:          cZKiP+IBMFtuDn9OHVriC5E7Sx17X/hZiYctn8X3yg8=
Subject key identifier:   76:9A:E0:67:9F:E0:36:2B:CA:A0:BD:5A:BE:55:BE:E0:8B:E9:D3:E2
Authority key identifier: 44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34
Certificate issuer:       /CN=A9145E01/serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
Manifest number:          0B
Signing time:             Fri 19 Dec 2025 06:57:37 +0000
Manifest this update:     Fri 19 Dec 2025 06:57:37 +0000
Manifest next update:     Fri 26 Dec 2025 06:57:37 +0000
Files and hashes:         1: RC6qL6yoXGzvgcRKZaY36GftNTQ.crl (hash: HziiJ7LesoYi8gTgWXnmsuzWOlkuOVakezvv7a72Bc4=)
                          2: 042373B2CF5A11F08A42EF16C4F9AE02.roa (hash: EggkpcVOgI9lqzWLNGUO4SNdA0AExjaPLsB6eR+b1dk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E01, serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534
        Validity
            Not Before: Dec 19 06:57:37 2025 GMT
            Not After : Dec 26 06:57:37 2025 GMT
        Subject: CN=6944f761-4c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:1d:39:1c:93:53:02:64:d2:15:52:25:cb:
                    e3:8a:c4:35:c6:e7:d0:69:d7:62:8b:7d:0a:16:65:
                    95:64:00:8a:e1:c7:34:52:34:7e:02:22:e3:99:0b:
                    44:9b:a3:77:1c:c3:a7:e7:50:65:e0:b3:ed:bc:ae:
                    eb:9a:3c:f9:34:e3:fa:d6:8e:13:3a:c4:4e:ff:02:
                    c7:99:ad:15:21:f3:c7:b8:77:ea:d9:28:7d:c6:cc:
                    ef:48:f6:bf:da:ff:c0:0e:9e:b7:e8:f7:b7:9a:78:
                    e0:3b:47:69:8e:37:a5:a1:38:79:ca:ed:f4:91:1c:
                    9d:3a:9f:56:77:03:3c:4d:f2:74:2d:ce:db:fb:cd:
                    2d:91:68:ca:bd:d0:8f:a7:29:f9:80:0e:06:a0:c8:
                    06:94:1e:e2:0d:25:3c:11:ef:33:68:cd:37:6a:18:
                    44:bc:52:68:be:3b:61:bc:84:95:77:25:fa:9a:59:
                    d9:f5:d3:d7:25:07:f5:c8:12:ed:a7:50:99:ac:c9:
                    cf:d1:76:4d:1a:88:86:32:ec:ba:0c:67:f9:72:a2:
                    32:51:37:52:47:2a:fa:a4:a4:03:16:7b:42:d3:05:
                    8f:76:8f:5d:ad:8e:65:6e:08:c9:4c:97:72:de:66:
                    4a:64:0a:b7:e7:d4:a8:ba:ee:ed:52:c5:1c:e5:5c:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9A:E0:67:9F:E0:36:2B:CA:A0:BD:5A:BE:55:BE:E0:8B:E9:D3:E2
            X509v3 Authority Key Identifier:
                keyid:44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:55:cc:27:4f:53:50:a6:4a:bd:25:cf:fe:c0:f9:43:13:57:
         7b:59:96:5b:69:3a:40:2d:07:17:98:24:7b:3a:a7:db:be:af:
         1d:17:b3:6e:39:1c:7f:92:5a:a6:e5:83:d2:52:66:fc:1e:dc:
         da:30:b7:4b:06:95:f8:77:2a:bb:4a:31:31:32:4b:09:e8:45:
         73:58:8d:88:22:18:e4:dd:d8:68:34:7e:d4:3c:38:a3:03:64:
         cf:26:a8:e9:a6:9d:26:b9:b2:7a:90:41:fa:bd:5f:8b:ae:f6:
         66:b8:3a:5a:bc:4e:0c:8e:b1:b3:e6:53:50:27:3b:75:69:df:
         35:43:ba:8a:91:1f:a0:14:09:12:a6:04:4e:bb:15:cb:8d:a2:
         c3:29:fb:31:f9:48:e5:38:20:11:0b:ae:fa:11:97:d7:b6:05:
         48:8a:b1:c8:e4:71:51:85:68:ed:b9:14:c7:02:df:73:f5:23:
         64:b6:7f:0a:5c:8e:e2:a0:af:6e:10:26:28:ba:4a:bf:3a:68:
         81:ff:a1:a6:71:be:a9:25:cf:ba:7d:45:ce:fc:33:5b:85:94:
         72:85:ff:15:a5:09:26:28:34:f7:39:37:46:66:78:33:c8:8d:
         9b:91:12:02:5c:c1:87:19:30:da:c4:e6:df:41:6a:76:9f:b9:
         cf:31:e7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:02:47 2025 by rpki-client