This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
File:                     6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json)
Hash identifier:          kFEfeSqKnd76S6Jbs1sEckqwF1I0+m02hTPZM4Kv+jU=
Subject key identifier:   77:FF:F0:F3:45:C5:E1:54:B8:3B:B5:67:64:E8:58:ED:19:6A:F9:13
Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
Certificate issuer:       /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
Certificate serial:       03F3
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
Manifest number:          03F0
Signing time:             Tue 30 Dec 2025 23:39:24 +0000
Manifest this update:     Tue 30 Dec 2025 23:39:23 +0000
Manifest next update:     Tue 06 Jan 2026 23:39:23 +0000
Files and hashes:         1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: RuNQKxCkK2MDdUw8XhgFt/qT8ylPnUpcTWlNyPVSs1A=)
                          2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: c/Zvm427kENiAideE2yc17TlzEqhW1utfEK6NB9dveM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl
                          rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 23:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011 (0x3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0432, serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
        Validity
            Not Before: Dec 30 23:39:23 2025 GMT
            Not After : Jan  6 23:39:23 2026 GMT
        Subject: CN=695462ac-15d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:dd:af:7a:80:0f:ac:77:6c:67:ae:b3:f7:
                    83:e8:ae:5d:dc:4a:c3:0c:ec:3d:a8:82:90:54:02:
                    9a:a7:96:a6:fe:7f:28:d7:92:38:8a:ff:bb:df:84:
                    f2:af:fc:e4:45:df:9f:e6:45:21:8b:37:de:6e:cc:
                    46:00:94:ef:b1:84:e7:eb:c6:9d:50:87:2d:ba:70:
                    ef:44:be:39:93:d5:6a:6f:ba:ae:b4:e1:90:55:0e:
                    6d:5e:81:39:ae:03:f2:df:5d:30:48:17:87:57:a6:
                    f4:c6:6f:85:f8:6b:1b:a9:e3:63:53:02:8d:6b:20:
                    e8:77:f1:03:e4:04:38:6b:cc:6f:c3:ac:e8:1d:81:
                    15:46:e2:6b:b3:4e:0d:ad:fe:23:20:7f:53:6f:b3:
                    ff:d4:ee:bf:8e:23:e7:d7:35:30:7f:be:1b:da:39:
                    6a:c8:cc:ba:a2:58:7c:5d:1e:be:fc:6e:45:68:67:
                    1e:89:39:5e:d8:61:ba:cd:46:41:39:8d:f9:4f:7e:
                    f4:a6:ae:c0:21:e2:ce:92:18:ef:31:60:1c:5a:7b:
                    19:c0:e4:2f:95:34:9a:f1:b4:5d:db:4d:0f:fa:88:
                    80:c4:3f:c0:d2:86:c3:8e:28:56:ea:b0:26:a9:f9:
                    09:6b:9d:7c:6e:ae:af:10:51:0b:0e:52:ef:5b:0e:
                    bc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FF:F0:F3:45:C5:E1:54:B8:3B:B5:67:64:E8:58:ED:19:6A:F9:13
            X509v3 Authority Key Identifier:
                keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:95:e8:3b:f4:67:16:2a:a6:ee:6f:a7:a5:72:5c:8f:5c:9c:
         9c:e5:e6:26:e4:3c:63:01:de:f4:36:6c:6b:8f:88:fc:ab:30:
         7e:56:30:62:a9:68:fd:d6:80:94:d5:43:99:49:41:3c:33:37:
         73:0b:7f:54:00:4b:ca:4d:a8:2e:89:dc:5b:8c:b3:9e:53:ac:
         b2:b7:6c:0b:dd:3b:63:b0:38:ae:de:a5:5c:bc:74:cb:14:14:
         40:2b:4d:1b:ec:55:b7:ea:be:4a:a1:ac:81:c6:4b:47:04:b4:
         02:28:a2:cc:44:97:f8:ab:a8:6b:96:c3:5d:65:e6:dc:37:08:
         66:68:0f:65:65:de:c8:87:fa:de:21:4b:d6:a6:d0:a6:43:15:
         6b:3c:fe:50:ee:53:91:dc:21:8d:4d:25:de:09:38:ec:b8:4d:
         6b:d7:73:85:eb:21:20:78:05:18:ee:8f:c3:29:6b:b1:26:46:
         b4:8f:bb:63:f8:a0:8d:d1:98:c7:63:83:4f:de:d7:95:f4:2d:
         2c:b6:cb:c9:d9:97:0d:ef:0d:1f:86:9e:39:2a:f0:a7:fe:49:
         27:e4:da:32:10:f3:de:36:ee:00:97:e9:8f:b3:57:cc:7d:8f:
         ff:a3:86:ad:66:55:cc:7c:3c:78:7b:64:f9:85:aa:17:b9:49:
         2f:c9:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:21:26 2025 by rpki-client