This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
File:                     6VE3HeTcsQAlSE0vFP3NosZFW5E.mft (raw, json)
Hash identifier:          pGb8wkg4RfbVhikKsviJsLZeTablPUrTlbVA05x3+Co=
Subject key identifier:   50:7C:1B:71:54:00:77:20:4E:DE:8C:63:EA:F9:40:22:BA:00:C8:90
Authority key identifier: E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91
Certificate issuer:       /CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91
Certificate serial:       07CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
Manifest number:          07C3
Signing time:             Wed 24 Dec 2025 20:42:34 +0000
Manifest this update:     Wed 24 Dec 2025 20:42:33 +0000
Manifest next update:     Wed 31 Dec 2025 20:42:33 +0000
Files and hashes:         1: 6VE3HeTcsQAlSE0vFP3NosZFW5E.crl (hash: TSJKG991aKHj41j+NnKJWWKbkpwF58kgfWJ2A8hSqkw=)
                          2: A3E98D0E22A911EB96014E82C4F9AE02.roa (hash: U4wBCZUawWY0aygfRe0tLOK9t09mOsA+sFaJMAhACbA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl
                          rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 20:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1997 (0x7cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195FCB, serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91
        Validity
            Not Before: Dec 24 20:42:33 2025 GMT
            Not After : Dec 31 20:42:33 2025 GMT
        Subject: CN=694c503a-63ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:b1:94:e2:76:44:74:21:5b:f4:25:f0:a9:
                    6b:90:81:33:0c:fd:fd:4a:17:90:cc:64:f9:fd:1d:
                    39:9b:7e:a0:65:cd:d5:c3:b6:3a:09:3c:ef:0d:52:
                    28:3d:2a:b1:3b:95:fb:b0:90:aa:d9:84:ba:cd:d0:
                    8b:8a:e6:53:61:4d:25:32:94:b6:9c:ee:af:35:a7:
                    a3:8d:45:12:b5:1d:31:18:66:78:2d:17:d2:a0:8e:
                    65:b6:4f:d0:b9:b4:85:04:be:7c:af:58:2b:1f:7e:
                    84:7b:52:f1:93:8a:0f:90:51:3c:32:ef:1b:76:27:
                    c0:ba:59:c0:0f:c6:b2:61:dc:b2:aa:c8:41:91:0b:
                    50:88:ed:75:50:60:f9:9f:ec:24:4b:ec:da:59:64:
                    c9:5a:16:69:1f:c2:83:49:85:1c:56:02:78:21:de:
                    e0:ef:06:06:9f:9f:15:91:64:05:2e:6d:93:5c:83:
                    6f:2d:f5:0d:b8:da:94:e4:24:39:7b:69:7d:3c:4c:
                    e4:8e:64:1d:1c:db:af:3b:4c:1c:22:6e:e1:56:f2:
                    67:64:27:e6:ef:f6:76:86:4b:72:c3:2b:24:94:dd:
                    56:e6:e9:10:aa:81:ad:1b:f7:02:1c:0c:7c:0f:18:
                    73:1e:43:d9:bb:8c:06:71:61:66:bd:9f:2b:42:a1:
                    23:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7C:1B:71:54:00:77:20:4E:DE:8C:63:EA:F9:40:22:BA:00:C8:90
            X509v3 Authority Key Identifier:
                keyid:E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:14:ea:ea:7e:21:a5:4f:83:e6:ab:72:7e:b3:0e:6e:d7:f5:
         a7:1e:69:66:0b:e7:ba:80:04:f7:ed:fb:5f:b0:4f:08:c1:fc:
         21:17:4e:6a:6f:3d:e3:4a:28:91:04:be:09:12:9e:3a:bc:1c:
         d8:0d:49:e7:76:98:96:33:5b:fb:41:01:a4:84:e5:0c:e8:b6:
         74:05:a6:bb:7b:de:24:88:5f:7a:ff:c6:f3:1b:9c:9f:f1:f7:
         ed:c4:b2:eb:ab:da:cc:27:b4:8b:04:07:56:ae:ce:fd:42:38:
         bf:36:c7:73:07:c8:8d:04:cd:ef:d7:39:c4:4c:83:56:61:59:
         52:34:72:e3:67:23:d5:c8:a5:54:4c:a9:c3:43:a0:76:97:1d:
         b4:db:28:99:c8:4b:eb:a4:62:2c:14:32:0c:b8:8a:ef:c3:37:
         38:ed:7d:d6:9f:65:e8:3f:88:5b:dd:f7:ae:ba:88:c6:91:01:
         6c:0a:85:1f:7f:68:4f:87:a4:24:66:3a:ec:80:e8:f5:b8:dc:
         94:e9:f1:02:ae:12:61:3d:9f:2b:84:70:8f:cc:ca:20:4a:bb:
         dc:a2:0b:f5:4a:70:00:c3:60:fa:39:00:45:ac:86:7f:da:f4:
         80:16:44:6a:16:25:22:40:11:26:f6:2f:74:bb:7e:c0:0f:6d:
         e5:eb:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 03:54:51 2025 by rpki-client