This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
File:                     6sqCrlKk_xgNM2F5-DlQpasLx7M.mft (raw, json)
Hash identifier:          9Bh/+8tjS3HOgzKt3okJHAwNVQYOB+QnSNVN0n2oWJM=
Subject key identifier:   A7:54:6D:35:2F:75:1C:F8:EF:16:FE:FA:E4:00:01:DC:60:3A:10:55
Authority key identifier: EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3
Certificate issuer:       /CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
Manifest number:          013F
Signing time:             Fri 19 Dec 2025 03:32:10 +0000
Manifest this update:     Fri 19 Dec 2025 03:32:10 +0000
Manifest next update:     Fri 26 Dec 2025 03:32:10 +0000
Files and hashes:         1: 6sqCrlKk_xgNM2F5-DlQpasLx7M.crl (hash: K2j6IZTZ2dLFIQVSIFbZ7EWZ6NF9vMdlj9eW8XFTj3g=)
                          2: C2A2E774EEC311EE8832C93AC4F9AE02.roa (hash: ms7snh2IzeS7RUyS63vDyik3Jw03vBKHQY1xlDWMLMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl
                          rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91486D3, serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3
        Validity
            Not Before: Dec 19 03:32:10 2025 GMT
            Not After : Dec 26 03:32:10 2025 GMT
        Subject: CN=6944c73a-2118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ed:44:2d:20:b0:e3:57:a5:47:58:a9:b0:84:
                    5e:07:38:21:6a:23:6f:54:3a:c4:31:9c:6f:a6:0a:
                    9e:20:85:63:70:1c:4b:30:df:d6:50:ce:18:99:ea:
                    8c:68:6a:bc:e1:e3:5a:3a:7e:0e:13:d4:c0:c3:18:
                    b5:65:7e:15:f5:f9:f7:6b:64:04:6b:85:7e:f4:e0:
                    0d:ad:bb:61:fb:25:03:5e:4d:f5:05:68:af:4e:83:
                    d9:6a:98:8c:b7:fa:3a:a5:d6:0d:ff:93:f6:cb:ab:
                    59:5c:0f:31:c4:49:ad:71:0c:34:cb:a2:e0:4f:03:
                    c8:76:68:6a:1b:27:3a:8d:96:3d:52:1d:0c:a9:1c:
                    c0:dd:43:8e:0b:6c:f2:33:f3:02:68:dd:3d:70:b9:
                    3a:0c:11:a6:d2:86:98:75:74:74:41:e3:56:8c:90:
                    ee:25:68:95:50:fe:ad:3e:52:c0:04:ef:7d:1a:7a:
                    50:32:d8:d7:e5:97:62:85:63:b9:f0:01:e7:fe:f9:
                    e6:45:b2:66:8f:a0:65:5a:41:a4:70:08:3a:af:9c:
                    86:bd:43:11:b0:c0:93:94:40:fc:a2:ca:3b:e8:04:
                    63:3d:ed:2d:32:87:17:a8:08:cf:00:3b:1f:40:e2:
                    ab:c1:e9:6f:fa:b9:d0:04:cb:a2:52:b9:72:07:75:
                    d2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:54:6D:35:2F:75:1C:F8:EF:16:FE:FA:E4:00:01:DC:60:3A:10:55
            X509v3 Authority Key Identifier:
                keyid:EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d0:5f:8c:4c:9b:42:56:f0:70:0f:f1:b2:9c:2c:bb:71:6d:
         4d:c5:d0:c1:ce:6a:31:b9:ef:ea:a2:da:b7:78:c4:6a:09:a4:
         c8:28:fe:83:f0:4b:09:fb:d0:0d:02:ed:5a:86:bc:94:46:77:
         8d:5d:d5:f1:c7:93:a5:34:f2:b2:0f:b0:fa:29:11:75:ba:25:
         30:4a:76:32:99:3f:11:21:77:b7:36:54:22:1d:93:64:a0:ad:
         12:69:81:f8:3d:6f:88:52:a1:1b:1f:16:b9:7f:d8:8c:c2:07:
         82:90:3e:27:70:a9:62:ee:fb:90:4d:85:69:56:da:33:3f:e1:
         b1:93:20:99:75:08:a6:6d:a3:ee:6a:3b:29:09:d1:ef:70:d8:
         f1:e1:4b:d0:e5:6b:c4:2b:cc:ef:d5:c2:f6:88:9e:62:94:07:
         f9:34:f2:e0:5c:e4:8e:5d:2e:38:12:12:b5:2a:22:b7:5b:06:
         bb:0e:d6:e6:9a:e5:73:a2:c6:3a:1b:66:1c:5e:dd:df:a7:3b:
         f9:4d:6a:19:a9:ff:81:2f:3f:ab:8f:b1:3a:a8:a9:21:ae:aa:
         8b:2e:a0:81:42:06:3f:fb:c0:3c:2d:38:70:5b:b9:bc:d9:21:
         f4:0d:9e:dd:5c:24:99:4e:c7:1e:2d:d2:e0:d4:26:77:2c:b0:
         12:ef:e7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:21 2025 by rpki-client