This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
File:                     --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json)
Hash identifier:          8dtY4nk4U92g4pI9PKSeSAPuVMMDqVg5rWFnwfNax9M=
Subject key identifier:   24:CA:49:C0:8C:0F:B0:D7:8C:BA:28:9D:F1:09:6B:90:94:CB:16:A6
Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7
Certificate issuer:       /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
Manifest number:          F0
Signing time:             Sun 21 Dec 2025 04:28:24 +0000
Manifest this update:     Sun 21 Dec 2025 04:28:23 +0000
Manifest next update:     Sun 28 Dec 2025 04:28:23 +0000
Files and hashes:         1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: C7BZICUtjTTqze2BrE6D9cpuOlan2kIcz163j0QRDHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl
                          rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
        Validity
            Not Before: Dec 21 04:28:23 2025 GMT
            Not After : Dec 28 04:28:23 2025 GMT
        Subject: CN=69477768-e7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:84:37:a9:f4:9a:fe:5d:84:ff:cf:e6:0f:
                    bf:8f:10:73:29:08:11:d8:45:bd:5c:22:47:85:fc:
                    5c:80:b5:98:db:1c:7b:12:25:f2:80:ee:8f:2a:b6:
                    d0:fc:8d:49:bd:b1:ef:08:5e:92:97:77:a7:47:bb:
                    69:d0:52:38:0e:6d:ec:0b:b8:9c:63:38:e8:c4:cc:
                    59:ad:34:aa:42:9d:1a:34:4b:09:5a:a1:c4:3c:0b:
                    e6:1b:73:cb:ce:96:3a:2b:b0:f4:05:3a:e6:16:32:
                    5f:a0:5e:ef:71:cf:aa:b4:e3:61:16:47:aa:9a:91:
                    ba:d6:f5:00:90:58:ab:a2:3c:84:4d:37:19:8b:fe:
                    2b:b2:b1:4c:1c:d6:24:ae:7b:b9:5b:10:45:f7:18:
                    4f:2f:33:49:ba:68:38:ce:a4:a2:b9:82:0c:ca:09:
                    8f:86:fa:b4:45:d5:bf:45:c0:3c:ae:1a:b9:92:8e:
                    77:0a:d6:33:45:a2:4e:89:ad:c3:07:d0:c3:5b:8e:
                    1c:4c:68:98:ed:b5:83:1f:11:f9:d6:21:67:28:59:
                    a4:09:27:ab:1d:c1:25:00:4b:8e:5a:f9:b9:5c:2a:
                    db:55:bc:9e:0e:de:0d:50:6c:13:62:95:60:64:cb:
                    0e:ae:af:c0:4a:28:92:80:d7:10:24:90:01:d9:89:
                    ca:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CA:49:C0:8C:0F:B0:D7:8C:BA:28:9D:F1:09:6B:90:94:CB:16:A6
            X509v3 Authority Key Identifier:
                keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:06:b3:59:40:d3:48:fc:04:cb:1d:e0:78:c8:0c:f5:50:47:
         b8:b2:78:f0:ae:34:92:9d:c1:6b:10:09:ae:f1:34:fd:0a:3c:
         f1:1e:82:8a:09:9d:d9:3a:f0:ee:96:15:a8:f7:b1:2a:9d:af:
         35:aa:ad:5c:75:23:73:84:c5:74:11:29:92:ae:dd:0e:6a:15:
         23:df:a5:6d:6a:bb:1d:ba:95:5c:52:bd:c5:d0:8a:7c:e8:92:
         fd:64:29:49:63:b0:53:e8:83:8b:c5:ba:34:b6:ba:d8:bc:c3:
         19:da:19:c7:09:ac:18:5d:2a:9d:a7:90:52:65:f3:d3:a5:68:
         90:fd:c3:ed:e7:cc:27:7e:51:de:62:8c:2e:ce:32:99:12:d9:
         c4:19:d0:64:cf:e1:13:5a:ae:52:c5:54:fa:7b:c2:0c:de:6c:
         8b:62:46:23:0a:37:2f:00:fa:5a:c9:3f:bd:07:b6:4b:fe:1d:
         5d:1d:b5:7b:8d:7c:71:cc:5e:30:e3:fb:25:c7:93:4b:f8:03:
         41:a2:a5:88:24:5f:c2:e3:a9:d9:ea:61:40:46:47:e5:20:a7:
         ef:bf:19:7a:b1:16:6a:2d:a0:4f:21:ee:17:25:81:22:68:37:
         70:a4:ff:d4:7f:fe:aa:84:89:51:90:ce:4c:47:2b:0b:13:06:
         ba:33:a4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:13:04 2025 by rpki-client