This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
File:                     6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json)
Hash identifier:          4JUv473vDI0zu6hUpCtOvIeRa0TlvCq1eIDKq1KQhVA=
Subject key identifier:   BA:EF:9C:10:34:26:F9:E1:DC:A6:36:1A:C5:29:5F:C6:3B:DF:21:1F
Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E
Certificate issuer:       /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E
Certificate serial:       0D01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
Manifest number:          0CED
Signing time:             Sat 20 Dec 2025 17:48:02 +0000
Manifest this update:     Sat 20 Dec 2025 17:48:01 +0000
Manifest next update:     Sat 27 Dec 2025 17:48:01 +0000
Files and hashes:         1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: sog68uG+bRFMQ0nvBjhKIS0ourMF2+6xwK9ZFSOrym8=)
                          2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: j94Y9byA6hrJjWvSwlJFmsvrVOzYBezuSr8IKFG6YL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl
                          rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3329 (0xd01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB87C, serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E
        Validity
            Not Before: Dec 20 17:48:01 2025 GMT
            Not After : Dec 27 17:48:01 2025 GMT
        Subject: CN=6946e151-c221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:52:f2:b3:89:43:60:69:11:7e:4f:ed:3e:
                    29:b7:2f:c5:e2:f2:46:bb:99:a3:aa:9c:bf:5c:22:
                    43:7f:90:54:83:ce:cc:f6:aa:31:c9:b8:0c:74:f3:
                    56:12:fc:6d:88:35:f3:e9:b5:1c:c8:3b:e5:32:28:
                    45:78:18:48:08:af:f6:73:15:70:b0:28:0f:e1:4c:
                    9f:89:3b:14:60:5b:d6:13:39:c3:d9:bb:ed:7d:c2:
                    56:0c:d4:e8:79:80:e2:b9:c8:1a:3c:93:61:d6:be:
                    03:6e:75:fa:8a:18:f5:11:ec:92:9e:ce:c8:8d:bf:
                    cb:9d:e1:8a:2d:93:2e:fd:25:2e:73:38:94:ac:26:
                    76:83:ad:ce:dc:54:19:d3:8f:03:7a:6f:35:95:c0:
                    57:d3:bc:ee:ee:49:13:c2:f4:c2:e2:c1:ea:0e:1a:
                    5c:39:36:fb:30:7c:e9:ad:14:b8:4f:01:e8:5b:72:
                    2b:dd:d0:fa:96:c5:08:f0:33:6e:c8:99:6c:39:38:
                    1d:fb:c5:14:17:71:a9:4b:d1:4d:4a:15:f9:0d:c9:
                    d7:b7:e8:33:e5:98:8d:8c:b4:c2:e9:51:e9:35:50:
                    20:2e:64:ad:be:5c:ca:0e:30:02:ce:b3:ec:e4:2d:
                    57:04:3e:80:d8:8f:dc:fc:63:75:5d:d5:0d:f2:74:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EF:9C:10:34:26:F9:E1:DC:A6:36:1A:C5:29:5F:C6:3B:DF:21:1F
            X509v3 Authority Key Identifier:
                keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6b:05:91:a4:37:93:2d:ae:29:12:0c:9c:f7:45:a1:30:78:
         19:7c:a8:40:ba:e0:e2:2e:f9:64:e6:6e:f4:0f:0c:60:11:88:
         0e:1f:19:58:e6:63:03:1a:f7:eb:7d:5e:e5:07:8f:1a:1f:16:
         fc:2b:e9:f8:74:1f:7e:b0:6b:46:69:77:f7:cb:44:64:10:b6:
         1a:04:b6:ba:e2:72:e9:53:ce:d6:06:ff:8b:51:ed:f4:41:09:
         aa:fd:3e:1e:c4:48:53:bd:e5:1a:b6:47:b1:f8:76:00:e5:c4:
         ea:2c:4b:2e:63:95:d2:00:db:f2:68:c1:5e:cd:87:08:a3:c1:
         c5:cc:b6:4a:10:50:9b:f6:f8:75:c2:6c:b5:1f:be:af:25:eb:
         2a:b3:09:ad:24:eb:1b:d4:fd:93:87:6f:ac:75:7e:d8:42:be:
         ce:bf:1c:a5:98:25:0c:2d:0b:61:23:d4:8d:1b:31:45:d7:d1:
         b0:a5:3b:93:a9:1a:94:c3:30:90:2a:43:0e:a4:e7:73:5f:cd:
         6a:d2:3e:77:af:39:77:c1:65:30:9e:d9:7a:8a:02:50:4d:d2:
         d6:5f:01:d5:93:cd:2a:18:3d:46:ad:8c:8f:63:1f:6d:a9:53:
         74:11:aa:92:12:8f:70:c7:60:d9:6e:32:b8:a6:b5:92:16:89:
         45:22:89:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:30:42 2025 by rpki-client