This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
File:                     --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json)
Hash identifier:          vIC507CdmGFqXaiCDwkORvEsPdFYiC4mqTWIrmrsvB8=
Subject key identifier:   03:BD:C3:81:DD:BC:4A:E6:AD:09:71:A5:74:75:14:63:25:6B:40:DE
Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7
Certificate issuer:       /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
Manifest number:          EF
Signing time:             Fri 19 Dec 2025 04:27:13 +0000
Manifest this update:     Fri 19 Dec 2025 04:27:12 +0000
Manifest next update:     Fri 26 Dec 2025 04:27:12 +0000
Files and hashes:         1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: 24zfNeg7JJG5K02vEux9H5Qb95z4M4DTivzsFip7gcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl
                          rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
        Validity
            Not Before: Dec 19 04:27:12 2025 GMT
            Not After : Dec 26 04:27:12 2025 GMT
        Subject: CN=6944d421-0f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:9b:1b:3e:06:de:36:a0:00:0e:b8:b8:3e:
                    be:39:e4:e1:bc:ab:f1:a5:b2:9e:50:24:75:32:6a:
                    b1:c8:b9:6c:a2:0b:fe:76:ab:c9:7e:bd:e0:a0:86:
                    8a:d9:af:92:8a:88:8c:f8:65:bb:cf:58:57:72:ff:
                    d4:85:68:60:38:dc:20:12:7e:e9:54:87:9b:90:e5:
                    b8:64:ba:f1:cf:76:44:5c:30:a2:b7:c6:21:ff:fe:
                    b7:b6:e7:d6:eb:33:0e:c5:60:9d:15:f7:9a:e2:d2:
                    79:18:93:66:dc:0c:d9:dd:e2:48:6f:f4:a7:56:1f:
                    a5:39:bc:de:2a:bd:b3:9d:32:1f:46:0c:93:e0:24:
                    e4:9e:e0:01:d7:fd:83:87:ac:11:ee:a5:59:aa:8f:
                    33:f9:10:00:4f:95:6f:62:ea:0b:3f:4a:31:e2:e6:
                    94:24:84:95:9e:f7:ec:74:0c:7d:4a:22:1b:fc:88:
                    79:0d:ae:14:5c:9c:d8:b7:ef:a0:c7:ee:42:05:b4:
                    3e:6f:c9:0d:31:e1:27:59:f7:a8:7b:ad:96:c5:5b:
                    f0:fe:6d:01:fc:70:d3:ee:6e:b0:a7:ba:82:c8:58:
                    1e:02:d4:98:24:7b:3a:24:82:d9:a1:15:41:b3:27:
                    1a:40:2b:0c:d0:be:ed:d6:8a:11:ca:ef:f0:a3:50:
                    c9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BD:C3:81:DD:BC:4A:E6:AD:09:71:A5:74:75:14:63:25:6B:40:DE
            X509v3 Authority Key Identifier:
                keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:a0:40:9d:ee:c9:36:21:44:43:58:8a:ed:a8:77:8f:fc:
         29:69:7f:ce:ce:8d:34:78:75:e0:55:71:65:22:74:84:09:d4:
         2f:30:0c:e8:85:6e:be:5c:a3:f1:60:50:e4:cf:61:05:6c:03:
         1d:f1:bc:51:4d:3e:4c:17:5f:2a:19:48:ce:02:99:1e:fa:ef:
         9d:01:e9:b9:80:e1:a4:05:64:5c:0a:f3:49:fe:25:ac:7c:0b:
         29:a8:24:26:f4:13:32:bd:81:37:ba:9b:3a:c7:c3:8a:e5:1e:
         79:f6:9d:a9:84:85:83:74:f4:52:a0:ae:00:92:92:11:c4:b2:
         be:88:b5:6e:c1:9e:42:bc:65:4a:52:8b:31:43:77:bf:61:3e:
         9f:30:57:d3:73:5a:dd:20:4e:dc:01:31:64:f3:52:8d:86:24:
         cc:3a:7b:18:73:25:77:e8:2c:c1:ed:a3:e2:45:f3:33:4a:03:
         32:15:9d:23:e6:b1:e1:67:8c:d0:ee:af:c6:91:e7:c8:c4:4e:
         03:6d:2b:86:2b:bd:60:4d:26:80:95:73:84:7d:e5:97:2d:5d:
         c8:6b:33:5d:61:d0:b6:87:71:0f:21:ff:b0:d8:ad:51:fe:f9:
         a3:37:3e:99:40:7d:69:e9:73:28:c3:fc:4d:ea:2d:1b:f0:23:
         08:73:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:53:30 2025 by rpki-client