This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
File:                     6IBLfhBNZXbwyNxIKlG142eqH3c.mft (raw, json)
Hash identifier:          fl3xuPd3Uwf9NdJ0/sDj2iMMBpm6kFFoXCQnOIrEXGY=
Subject key identifier:   1D:9C:CE:5B:A9:B5:A3:26:38:D9:BD:39:3A:F0:16:69:5D:5F:52:4F
Authority key identifier: E8:80:4B:7E:10:4D:65:76:F0:C8:DC:48:2A:51:B5:E3:67:AA:1F:77
Certificate issuer:       /CN=A915392C/serialNumber=E8804B7E104D6576F0C8DC482A51B5E367AA1F77
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
Manifest number:          0102
Signing time:             Fri 19 Dec 2025 04:12:32 +0000
Manifest this update:     Fri 19 Dec 2025 04:12:31 +0000
Manifest next update:     Fri 26 Dec 2025 04:12:31 +0000
Files and hashes:         1: 6IBLfhBNZXbwyNxIKlG142eqH3c.crl (hash: 7jVMdvuQvNaP3+ZyXkKChH9DvFy1uJ7LtSLWp8DmztY=)
                          2: 2920764254CC11EF84CA4F17C4F9AE02.roa (hash: IrFxxAlGnVb5beRabO7QO6Z5Pnh09uDax8gaWrx9WwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.crl
                          rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915392C, serialNumber=E8804B7E104D6576F0C8DC482A51B5E367AA1F77
        Validity
            Not Before: Dec 19 04:12:31 2025 GMT
            Not After : Dec 26 04:12:31 2025 GMT
        Subject: CN=6944d0b0-6526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bb:2f:72:68:fb:c2:a7:9a:6c:e0:a6:03:82:
                    e9:f1:4d:13:cc:68:94:37:9f:4c:46:44:50:44:38:
                    0f:56:a7:99:34:63:e8:f9:65:9b:0c:54:80:2b:d0:
                    8e:fc:93:1c:5a:e8:cf:73:28:04:dc:92:ff:d1:64:
                    c7:55:28:1e:0e:d2:93:50:fe:81:d2:86:57:67:0f:
                    2d:3b:ed:a6:a4:b7:07:c3:f7:69:c6:cd:c8:66:4d:
                    15:58:a7:3a:83:e1:f5:f3:48:fe:de:30:c9:8e:73:
                    7a:09:1e:c7:44:b4:95:fb:a6:d6:56:8a:bd:b0:5d:
                    0a:82:cc:54:ed:4c:c3:b5:aa:c2:09:08:99:e5:f5:
                    69:1c:2a:e5:2d:e6:5e:ff:a1:40:97:21:a2:e3:09:
                    2a:8e:52:44:6b:91:39:1a:93:74:c1:85:67:dd:80:
                    07:83:53:03:b9:e9:3a:dd:15:ed:fa:23:0c:47:a3:
                    3f:b6:5d:81:f7:0b:9e:df:c7:5d:ca:46:a0:aa:e9:
                    41:a5:90:50:ca:5f:2a:b8:2c:fa:01:6b:f5:ad:f8:
                    ea:c1:2a:51:c8:73:13:e2:99:95:93:a3:19:c1:86:
                    a8:20:1f:6e:c6:e2:8a:4d:83:64:1d:ed:0f:1e:10:
                    93:f4:ae:18:26:97:8f:9f:56:9c:2f:62:39:fd:2d:
                    b7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9C:CE:5B:A9:B5:A3:26:38:D9:BD:39:3A:F0:16:69:5D:5F:52:4F
            X509v3 Authority Key Identifier:
                keyid:E8:80:4B:7E:10:4D:65:76:F0:C8:DC:48:2A:51:B5:E3:67:AA:1F:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0d:80:c6:64:41:96:3e:b4:20:ab:dd:d4:6e:8c:af:fc:8e:
         d4:39:0d:d6:0f:6e:67:aa:21:32:15:38:26:64:a9:3d:db:d8:
         94:dd:72:1c:4a:33:c8:35:73:0e:e9:b3:68:ef:9b:39:34:52:
         93:37:d3:a4:54:c2:6a:f9:0a:94:fe:d1:23:a2:e9:b7:e0:01:
         68:b5:8c:44:ed:6e:50:25:53:9b:e1:00:f4:15:74:5d:6b:f4:
         53:e7:c1:49:c5:8b:99:3e:48:88:08:31:4f:7b:0d:c4:3f:66:
         ce:cd:bd:df:8a:46:bc:15:f5:1a:35:99:9c:cc:6a:27:92:87:
         55:16:53:09:41:50:dc:63:82:a1:ae:63:04:c8:96:00:4b:0b:
         1c:ad:63:93:e0:62:8c:15:60:27:66:4e:ef:7a:ed:b9:6c:03:
         c0:11:09:63:80:c0:1a:cb:c0:fa:e2:a7:bd:74:cc:e7:52:2f:
         7d:61:ed:29:7b:0f:2b:2c:f5:a5:2e:fd:64:a0:42:36:2b:af:
         b9:14:7a:d4:6a:40:bd:5d:84:0f:7b:6a:ff:4d:17:39:37:5a:
         a2:29:5a:13:c2:44:bb:d9:f4:50:61:92:4f:34:2e:39:5f:98:
         e0:b6:b7:1a:58:d0:9b:05:d9:b7:87:47:0a:41:df:e6:cf:82:
         f1:78:27:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:14:14 2025 by rpki-client