This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
File:                     6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json)
Hash identifier:          +dr+kOj+bMcVpsCzYmwt0LSRiI2AwyNjxTwazBB2OMw=
Subject key identifier:   D5:71:C9:C8:99:51:15:16:BD:CD:CE:E0:74:6F:FD:F9:70:EE:A4:61
Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE
Certificate issuer:       /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
Certificate serial:       11A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
Manifest number:          1195
Signing time:             Wed 24 Dec 2025 16:57:37 +0000
Manifest this update:     Wed 24 Dec 2025 16:57:37 +0000
Manifest next update:     Wed 31 Dec 2025 16:57:37 +0000
Files and hashes:         1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: T4HaPtV7of1aCT1qb5F8tEuRRSe2pHcZ1ymoWt+Srs0=)
                          2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: VAzSuvDMIX7CvCig+o9VQChq5efkdgttCnjgseDhgh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl
                          rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 16:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4515 (0x11a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
        Validity
            Not Before: Dec 24 16:57:37 2025 GMT
            Not After : Dec 31 16:57:37 2025 GMT
        Subject: CN=694c1b81-6d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:9a:d5:4e:77:5f:66:5e:15:c1:c8:45:41:
                    01:f7:8e:10:be:2d:54:1a:17:ab:2d:69:97:e2:61:
                    4f:12:94:d9:bc:d5:b7:d6:b7:b3:32:31:58:c1:ed:
                    98:82:61:ba:d1:7a:b9:70:77:02:21:1e:e1:8e:75:
                    9c:4c:03:5d:d7:05:f4:b7:b5:b1:76:84:ff:1c:5a:
                    f7:ff:38:c1:14:af:ec:a3:3f:bc:ce:cc:9a:76:d1:
                    e4:b9:d0:f6:e5:80:17:24:bb:23:e4:e2:83:48:07:
                    86:62:c4:62:cd:d5:9d:b3:e6:95:d3:29:82:c5:23:
                    7f:5b:f9:a2:56:f2:c9:69:00:43:ba:ef:ae:14:92:
                    bf:fe:71:59:4f:9c:34:e8:76:ce:76:23:93:0c:67:
                    01:2b:87:85:21:56:f9:cf:59:02:56:f2:45:1a:ad:
                    7e:cc:79:24:7e:ac:f6:2a:09:58:41:0c:27:08:e6:
                    f7:bc:a4:17:db:1b:0e:61:de:e4:b5:a1:59:ec:40:
                    53:53:53:a0:51:17:5e:ab:ae:82:54:21:8b:f1:25:
                    c9:40:4f:76:6a:3f:bd:7b:cd:f8:20:d5:7e:bb:07:
                    50:69:0a:ec:c0:ab:04:20:e8:93:5c:b8:82:67:3f:
                    50:ad:b5:b6:c5:24:e1:b4:ca:85:c3:a6:bd:35:95:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:71:C9:C8:99:51:15:16:BD:CD:CE:E0:74:6F:FD:F9:70:EE:A4:61
            X509v3 Authority Key Identifier:
                keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8c:c0:8c:2d:35:fd:a6:fe:ff:cb:20:f6:29:37:59:91:2c:
         5e:dd:09:eb:45:72:78:c4:a8:4f:a8:d8:23:57:0a:61:4f:ec:
         3d:46:99:d7:63:7f:cf:58:2b:05:0b:88:45:a3:0b:9d:c2:f5:
         b6:1f:35:17:62:1e:51:52:ad:c1:97:1b:8f:14:f3:f2:5e:c4:
         c2:4a:07:f1:96:a2:b6:72:8b:d9:ab:59:79:d4:f3:c8:68:1d:
         20:75:6a:b9:d9:63:e2:bc:65:6a:ac:ed:65:f9:07:ad:96:37:
         b6:2d:35:cf:57:90:03:e4:e5:2c:b8:f1:cb:f7:c2:ed:f0:d6:
         7d:87:d5:07:4c:a8:3f:71:63:c1:17:b8:6d:5b:63:b2:42:98:
         0b:91:51:30:a8:50:b9:47:a5:ab:bb:65:91:bf:31:a2:3e:aa:
         c3:81:1f:ce:1c:9f:34:cc:fe:fa:b7:4b:04:f2:df:2f:25:8e:
         df:a5:fe:15:7e:bf:65:e1:d9:72:47:69:31:59:8d:9e:15:aa:
         88:35:f6:cb:46:04:4e:3e:08:a3:fe:aa:bb:0c:6b:ee:a2:d5:
         1c:ce:59:3a:c4:da:1e:3d:ea:5d:d8:ca:8f:40:cc:c6:ac:e3:
         a6:b0:81:14:aa:e5:aa:67:0a:6e:24:89:39:65:e0:3a:f3:6d:
         a6:ef:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 19:40:31 2025 by rpki-client