This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
File:                     6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft (raw, json)
Hash identifier:          ryKnuAQR5bi5mYfHx3k6p9X7LveXlHgu+6FtIJqMkP4=
Subject key identifier:   E3:E2:B3:C9:56:19:60:27:87:34:45:82:F2:A0:73:48:84:30:06:00
Authority key identifier: E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68
Certificate issuer:       /CN=A919BC3B/serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
Manifest number:          0114
Signing time:             Fri 19 Dec 2025 04:01:55 +0000
Manifest this update:     Fri 19 Dec 2025 04:01:54 +0000
Manifest next update:     Fri 26 Dec 2025 04:01:54 +0000
Files and hashes:         1: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl (hash: ZARIbddRyxIvGnGQVXilZqMJzJHzlo2FIIsrz+bM7gc=)
                          2: 2C00BB1239EF11EFB6EE4687C4F9AE02.roa (hash: zJmy/7bWwOw3097+xOhmcdnCp+p0bjqozGeHRbB5Gck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl
                          rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BC3B, serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68
        Validity
            Not Before: Dec 19 04:01:54 2025 GMT
            Not After : Dec 26 04:01:54 2025 GMT
        Subject: CN=6944ce32-dff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:57:9a:08:27:d8:06:6c:64:d5:69:52:7d:
                    48:03:26:d3:64:df:c4:49:22:09:41:40:14:50:eb:
                    14:1b:2d:24:fe:23:a0:92:58:78:6d:40:c7:5c:02:
                    df:90:9d:3f:be:fa:00:ad:b4:30:04:28:15:e6:e2:
                    82:28:1e:32:c6:b7:ca:48:27:9c:61:8a:95:13:f3:
                    6b:b4:d3:95:20:a5:a3:f0:6c:3d:8b:78:c0:7a:98:
                    f5:de:9f:73:93:9c:b6:c3:ca:3e:02:92:6e:73:27:
                    a8:39:4a:24:f9:5d:84:a0:e3:84:6b:b0:20:30:31:
                    c5:58:2e:08:3f:0d:f6:13:7a:7f:a7:0d:50:1f:31:
                    d0:5b:c6:0d:aa:f6:5a:55:38:eb:11:2f:14:83:a2:
                    6a:05:c8:92:96:f2:b1:f7:40:29:32:77:b5:c9:ba:
                    b5:a6:7d:85:0e:fe:e3:a7:05:38:35:58:34:7f:cd:
                    d9:f5:c3:9d:2c:e3:8d:6b:38:cd:8d:01:02:d6:cb:
                    8e:ff:d0:63:72:5c:71:f8:c5:8e:b7:f6:97:50:4c:
                    49:96:8b:ca:c4:54:65:d2:23:66:b1:2d:64:03:ff:
                    26:96:24:87:f6:ea:4d:f0:bb:b1:f0:82:93:8b:42:
                    17:64:38:e1:ad:34:ea:a3:c4:d1:29:3d:9d:44:58:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E2:B3:C9:56:19:60:27:87:34:45:82:F2:A0:73:48:84:30:06:00
            X509v3 Authority Key Identifier:
                keyid:E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8c:ec:63:6d:98:19:a9:1a:55:d8:97:06:17:3b:94:f0:70:
         23:e7:60:e7:96:90:86:ec:82:41:82:9f:58:29:de:61:8c:54:
         33:71:31:d0:a5:54:23:be:64:6d:bb:9c:23:92:1c:a6:16:a1:
         e8:68:b2:79:64:2f:57:81:8e:5f:d9:61:e3:be:44:8d:8a:c2:
         b3:1e:a1:73:8a:87:5e:f5:59:5e:3e:dd:e9:11:2f:dd:9d:a2:
         eb:6d:40:38:2c:7d:f0:61:c4:c7:8c:7a:db:25:ec:e2:32:b3:
         08:29:09:b2:2d:e9:de:28:76:2c:0d:b4:ab:cc:a4:c2:69:53:
         ac:4b:cc:c7:c0:a3:82:57:11:61:d0:84:76:8b:f1:0b:4d:a1:
         7d:08:b7:d5:87:54:1d:3e:28:13:b9:e0:7b:60:9d:d7:97:48:
         5d:b8:fb:75:28:8b:96:cb:45:5f:7b:15:de:94:3d:30:65:e9:
         2c:09:79:a6:02:21:91:05:aa:5e:9f:07:ad:af:ff:6a:6d:02:
         06:44:10:91:b9:ff:05:d5:ba:60:c2:6d:26:55:b5:db:e5:15:
         08:7c:c3:b4:cb:8b:7d:31:63:23:4a:5d:0b:ae:26:05:ef:30:
         c7:c7:0c:5e:98:26:11:32:a6:b4:6c:60:32:93:d1:ac:32:d0:
         f9:6e:4f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:33 2025 by rpki-client