This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File:                     6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier:          JjS4AHGfNHuIRdJgvxBl9yqKG5V3GESbQ735zevzZOk=
Subject key identifier:   79:89:8D:4A:97:99:EB:46:EB:06:9D:34:DD:BA:B0:91:A7:24:2E:52
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer:       /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial:       0B1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number:          0B05
Signing time:             Tue 30 Dec 2025 18:53:29 +0000
Manifest this update:     Tue 30 Dec 2025 18:53:28 +0000
Manifest next update:     Tue 06 Jan 2026 18:53:28 +0000
Files and hashes:         1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: 8h/1D4VPlCEBAaU8nzokNGT+G6KvUqtXHmmMSMdQXUM=)
                          2: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YdPahH5dD4zuJY8bYiwVpnXjRlbDVfqoQdod66sRqWI=)
                          3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: xk3hG5cT6tov5WpRqBgw1GYiI5TquI6c93azZDBwgS8=)
                          4: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: BMLck7ad8d48GKkf5hIYa+BMluvYHrRfqqVkHmYs2MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
                          rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 18:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2842 (0xb1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
        Validity
            Not Before: Dec 30 18:53:28 2025 GMT
            Not After : Jan  6 18:53:28 2026 GMT
        Subject: CN=69541fa9-496b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:7e:b2:35:a4:57:51:c6:d9:62:a2:48:a7:
                    89:20:6c:d8:06:a3:13:88:ef:72:69:6f:a0:97:a3:
                    7b:2a:96:d0:6d:2d:b4:ab:a0:b0:d1:95:21:48:d7:
                    29:c2:24:94:41:d8:b3:73:89:de:85:47:04:79:bf:
                    50:da:9f:56:29:c0:db:5e:f3:74:9d:cb:e0:cc:cf:
                    19:52:8b:fb:94:98:ac:07:ac:90:0e:9c:d2:ab:99:
                    a5:dd:47:03:6e:c5:85:1b:8c:85:eb:d9:97:9d:8c:
                    c3:44:40:39:b9:35:36:7a:ef:8d:f4:2c:78:e5:25:
                    58:42:87:cd:27:fb:48:6e:3a:9e:83:97:e9:78:a1:
                    fd:19:21:5f:c3:34:87:3d:e8:50:4c:00:6b:9a:f9:
                    58:b2:64:15:58:70:14:d1:a7:38:72:a3:d7:62:f7:
                    db:b0:19:a6:82:53:8a:45:08:a2:a1:5d:08:7d:1e:
                    43:a2:cd:fe:12:ca:97:93:a0:11:42:49:b1:73:43:
                    99:e0:59:cd:7a:7d:83:12:9e:ad:5b:96:96:48:c0:
                    30:05:61:22:1e:1a:59:d9:f1:79:43:59:b8:a2:58:
                    e9:9e:9d:5e:ce:a5:e0:1c:68:07:e1:35:87:3a:ba:
                    a1:48:a9:11:55:3c:a6:2c:bf:ac:50:ba:08:c5:88:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:89:8D:4A:97:99:EB:46:EB:06:9D:34:DD:BA:B0:91:A7:24:2E:52
            X509v3 Authority Key Identifier:
                keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a9:87:8b:82:2c:8a:f4:cf:06:cd:f3:24:83:31:36:52:f6:
         71:6e:02:2f:c1:51:4a:39:59:61:d1:82:3d:06:65:35:17:0c:
         8e:b6:b7:56:91:32:89:ef:61:9c:2f:4b:0c:3b:14:af:8c:0f:
         89:0c:85:a1:ee:80:eb:52:f9:26:5f:4f:75:41:59:7f:db:07:
         57:ad:b7:5d:69:91:cc:fb:83:e8:4a:be:89:a6:ab:0c:36:ad:
         86:e4:57:33:27:1f:1d:7e:27:0e:e2:ce:52:0f:6e:ab:6a:3e:
         c2:0e:ff:36:cf:e6:df:eb:e3:83:6e:ce:e6:ac:63:a0:87:67:
         10:8c:ec:ee:f9:60:3d:ec:c2:ad:59:aa:8b:0d:d5:5a:eb:ad:
         8a:ab:b7:01:45:db:5d:64:4b:8c:56:d0:b6:44:ad:1a:c2:9e:
         9b:49:fc:2a:f7:08:e0:88:fe:6e:b0:e3:b1:d5:88:da:29:78:
         15:d0:ff:3e:bb:a8:e6:79:f4:21:b3:6a:d8:58:21:37:e9:54:
         28:ac:e0:6c:9a:2c:59:6a:fc:4b:71:4b:de:23:f8:82:d0:0e:
         61:e7:cb:09:e4:77:bf:d6:b2:fa:6c:9c:dd:ad:87:ab:6c:ea:
         ba:e0:79:77:e5:06:49:df:2b:d7:36:17:95:5b:c4:34:30:f3:
         e3:c2:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 04:18:41 2025 by rpki-client