This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft
File:                     6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft (raw, json)
Hash identifier:          w13xHbTwC1CcMCFt80l8dtd0JhEqdmrHmOLvlR4Wf2Y=
Subject key identifier:   7C:57:A2:13:07:67:EC:AE:E3:0E:EE:C3:12:DD:7F:2E:1A:06:D3:2F
Authority key identifier: EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64
Certificate issuer:       /CN=A91AB3E4/serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164
Certificate serial:       0AAE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft
Manifest number:          0AA7
Signing time:             Sat 20 Dec 2025 19:01:56 +0000
Manifest this update:     Sat 20 Dec 2025 19:01:55 +0000
Manifest next update:     Sat 27 Dec 2025 19:01:55 +0000
Files and hashes:         1: 6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl (hash: D3R5ULuzeaQsV2/0bA1iiPirZOrmJ96nF70JP/HqsJk=)
                          2: 685E441A69BC11EA97D4FE67C4F9AE02.roa (hash: J+JZoSjojOqJ1AwA5T/9H8nf3jJIVy6YAPw444KE/KA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 19:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2734 (0xaae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB3E4, serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164
        Validity
            Not Before: Dec 20 19:01:55 2025 GMT
            Not After : Dec 27 19:01:55 2025 GMT
        Subject: CN=6946f2a4-1538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:c9:7d:9e:90:5d:a4:9e:d9:5e:0d:4a:56:
                    ce:51:41:d0:27:6e:bb:ee:de:eb:56:ab:88:bd:f5:
                    7d:3e:f1:cd:75:96:1b:18:fd:07:bd:1e:3b:bf:8e:
                    74:2d:75:f9:fb:9d:1d:33:d4:44:32:20:ef:0a:9e:
                    ea:9d:66:4e:d0:61:5a:12:5d:71:e6:c8:0e:ae:9b:
                    1c:69:e2:d3:29:d2:73:ef:4e:40:bf:c7:06:de:67:
                    11:6c:d8:4d:bc:ee:28:3b:fe:74:6a:d4:80:4e:7b:
                    4e:38:8e:0c:6f:86:79:0b:33:22:83:0e:74:91:1f:
                    9f:3c:e6:3c:f9:2b:8d:73:13:93:22:3e:21:5a:89:
                    34:9e:a9:81:eb:01:8b:d7:bd:9b:47:f3:ad:43:98:
                    8c:db:74:8c:5c:35:67:d9:47:e9:be:68:8a:58:fe:
                    a6:aa:77:e3:c3:5b:32:ff:42:0c:39:61:6b:9a:44:
                    0c:b9:7c:12:7a:e5:ed:88:14:27:28:69:15:c1:f2:
                    d4:1d:15:e3:12:ae:49:69:06:ed:08:9c:80:50:c0:
                    53:18:1d:41:27:39:18:49:5b:ff:fe:b6:37:aa:46:
                    a3:03:33:e7:d1:d6:1f:a1:9a:34:95:00:15:ff:99:
                    1c:1f:7d:aa:78:24:f4:2c:65:c5:cc:a6:78:ec:21:
                    c8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:57:A2:13:07:67:EC:AE:E3:0E:EE:C3:12:DD:7F:2E:1A:06:D3:2F
            X509v3 Authority Key Identifier:
                keyid:EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cb:c2:93:84:b7:02:12:04:ad:0a:a1:5b:eb:c5:b7:aa:12:
         7b:a2:38:fc:78:ed:f1:98:de:2d:44:68:fa:f2:d6:4f:6b:21:
         82:f1:19:d7:62:26:61:89:66:17:72:33:0b:02:36:1e:f1:63:
         11:ea:d9:0f:61:03:df:e2:2a:9e:5e:7a:65:e8:f1:d7:1b:90:
         8e:8a:9c:88:aa:b0:bf:58:99:e2:c3:28:2e:34:08:18:71:04:
         f9:1c:19:b0:7a:1f:e2:56:a4:c8:53:72:92:13:64:70:d8:91:
         95:23:27:f8:23:b3:f2:9b:4c:30:66:c2:b2:15:f5:44:07:03:
         5f:08:db:4c:a1:a0:85:07:46:b0:e1:4d:de:4d:10:d0:fa:aa:
         99:a2:41:22:20:c4:ef:f3:39:9c:0b:ca:21:f5:17:92:83:53:
         f5:33:a4:ce:a0:03:61:a5:07:70:ef:2b:98:94:23:e6:de:d1:
         07:57:f5:7d:7d:30:d8:c8:2f:b8:00:67:03:e8:a3:cd:dd:5d:
         99:d7:15:96:3f:24:72:a1:dd:db:f3:bd:af:6e:cb:bf:28:72:
         39:23:d2:2f:12:85:93:79:c7:14:f0:b3:d4:db:98:ee:cc:8f:
         18:af:26:c4:06:b9:43:2b:3c:24:ee:59:4b:06:2b:c7:85:4c:
         50:19:a8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:09:56 2025 by rpki-client