This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
File:                     xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json)
Hash identifier:          4Xnr5jfCGYUNewr5KWCD8w1H7nHzVh7OaOn1Yf+1Cpw=
Subject key identifier:   C3:6E:57:EF:B1:CA:2C:E0:99:F6:0C:32:37:8C:5B:35:E3:C4:C0:3E
Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE
Certificate issuer:       /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
Certificate serial:       1364
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
Manifest number:          135A
Signing time:             Sun 28 Dec 2025 16:44:05 +0000
Manifest this update:     Sun 28 Dec 2025 16:44:04 +0000
Manifest next update:     Sun 04 Jan 2026 16:44:04 +0000
Files and hashes:         1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: aDJ0D92zHeDtcD2fusLdarN0Qq8BsD+yzGDnwoQSJGA=)
                          2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: 0tM/V7nX9hi4ETzuWiBmb9YtIWsrgFEIcg6fokAj5jY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl
                          rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 16:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4964 (0x1364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161EA6, serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
        Validity
            Not Before: Dec 28 16:44:04 2025 GMT
            Not After : Jan  4 16:44:04 2026 GMT
        Subject: CN=69515e55-0d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:80:f1:ae:ea:a8:ce:d2:eb:b9:72:a7:f5:
                    48:70:de:13:19:fc:d8:84:9f:06:b0:8e:c7:c3:46:
                    22:d1:f9:75:22:6f:73:d2:49:b0:8d:fb:35:32:f9:
                    17:0f:a2:7f:fd:3b:a4:09:1f:5e:0b:f9:ba:cd:c7:
                    24:68:68:c6:fc:4d:06:c7:f8:25:40:8f:a9:67:3f:
                    54:65:69:cb:94:9c:d8:87:3a:ba:28:73:c6:cb:5d:
                    f6:2b:e3:dc:39:9a:e9:df:98:cc:42:77:48:4a:50:
                    23:8b:01:ac:c3:9d:b9:51:76:73:78:7b:ba:9a:01:
                    5a:8b:1a:c1:57:85:60:c7:91:a6:fe:f6:0f:75:91:
                    96:f5:ee:e8:ab:0b:42:ff:ef:0d:59:99:17:f1:8d:
                    a3:22:9b:34:a5:71:2d:86:01:a0:4f:2d:bb:2a:cf:
                    2d:3b:8e:5a:7e:02:c0:27:cf:0d:61:a5:1b:c7:6a:
                    d8:60:b9:1a:93:8f:05:b5:de:fa:19:ae:89:d5:17:
                    79:b0:69:e7:71:5c:e5:cb:76:f0:fb:f4:28:bc:f8:
                    83:40:9c:35:9a:66:e8:99:b8:97:90:10:6a:f5:78:
                    58:66:c8:f2:3e:2c:2f:d3:4b:86:d9:35:40:fd:e4:
                    c4:53:58:5a:b6:b9:b4:47:52:94:84:12:e9:25:92:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6E:57:EF:B1:CA:2C:E0:99:F6:0C:32:37:8C:5B:35:E3:C4:C0:3E
            X509v3 Authority Key Identifier:
                keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6e:d3:dd:29:ef:08:fa:cf:ab:f7:64:29:2d:2c:a6:2c:3b:
         c0:19:a5:fd:34:08:4b:e4:38:42:37:53:3a:17:32:2e:87:35:
         c3:85:49:1b:30:9c:ab:6b:b1:70:14:27:ed:a5:7e:f4:b3:03:
         bd:4a:56:ec:30:7b:8c:be:0c:31:95:a9:2e:6b:26:1f:c0:f8:
         e1:c7:37:91:43:6f:b8:ae:ac:5f:15:b8:61:20:57:f5:40:95:
         ac:88:4d:8a:2f:55:05:33:ad:9e:4a:9d:a1:58:4e:2c:50:ea:
         33:f1:a8:fe:24:5f:16:25:50:76:eb:82:5f:7e:2a:64:ab:6b:
         68:20:ed:35:bb:0d:54:10:8e:05:44:82:32:58:18:79:76:d1:
         2b:e8:34:43:38:b5:91:fe:aa:fd:14:07:04:21:26:9b:3e:d0:
         fd:a9:a2:76:f9:c8:c7:96:1f:4c:43:29:8e:fe:c6:a0:c0:11:
         56:73:ed:31:7b:64:5e:9f:dc:7b:81:e2:f5:84:9e:a7:ad:dc:
         bb:97:f1:be:30:a3:18:3a:85:28:14:a5:4a:61:24:39:99:72:
         c9:96:f3:76:bc:63:4e:e3:3d:1e:54:fa:73:be:72:ec:c7:35:
         22:04:b9:d1:49:05:30:a7:e8:73:8b:65:8a:8d:6e:bf:8c:8c:
         0d:fd:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:14:20 2025 by rpki-client