This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
File:                     sEu6HxjA5wgx81T3RV7hXTIpQbM.mft (raw, json)
Hash identifier:          T0h39gL9nt4EHBYRVmaznRUQmqXurYuBb3ZnBhzL4yk=
Subject key identifier:   56:C6:66:DD:FF:27:83:6E:53:32:76:E4:41:D7:67:76:26:5C:41:23
Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
Certificate issuer:       /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
Certificate serial:       06EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
Manifest number:          06E0
Signing time:             Sat 20 Dec 2025 21:21:48 +0000
Manifest this update:     Sat 20 Dec 2025 21:21:48 +0000
Manifest next update:     Sat 27 Dec 2025 21:21:48 +0000
Files and hashes:         1: sEu6HxjA5wgx81T3RV7hXTIpQbM.crl (hash: PYgEsQFhuqABiqsNhlSWJkaleszZ7xEG4di1oHljdf8=)
                          2: DA33C49E08E211ED8B10721AC4F9AE02.roa (hash: zgRU+P4on5aXmZrrpnxUigxzSC5YeVSm8pI31wcNWhY=)
                          3: 710DB204831D11ECA37CC12EC4F9AE02.roa (hash: Z5ha/v9GqKizxbd45/FrP2BFLgwBNOYXevkcvzeQ5FQ=)
                          4: 2E9F8D4A08F911ED8F90BA78C4F9AE02.roa (hash: NxEcxn/akrW+vm2Z/ZPAl6UxKcvJlhSrSKjiAprfZig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl
                          rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774 (0x6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73FD, serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
        Validity
            Not Before: Dec 20 21:21:48 2025 GMT
            Not After : Dec 27 21:21:48 2025 GMT
        Subject: CN=6947136c-db7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:23:9b:bc:bc:d3:52:4b:8d:84:61:e7:ef:
                    ae:e9:96:3a:64:5b:10:11:ea:c6:5b:bd:bb:fb:4e:
                    b3:77:fc:e0:c6:52:73:62:63:8e:d5:a4:23:a6:79:
                    51:ab:e3:48:1d:cf:ac:66:07:6f:44:d5:f0:ca:34:
                    50:3b:82:07:f0:f5:70:d5:57:d9:b0:5b:0d:61:58:
                    65:36:c9:49:63:e8:23:c3:c4:e1:74:d2:b1:3f:6a:
                    77:27:9c:68:56:e2:91:d3:0b:a0:ba:86:cf:7f:a3:
                    6b:fa:b2:6d:3a:0d:b3:b0:60:cb:bd:fc:29:f3:13:
                    b3:7a:28:03:98:03:f0:15:97:9c:da:81:86:f6:e4:
                    5d:e7:bc:05:9e:29:62:96:9c:34:e2:7c:3c:0c:e4:
                    2e:14:1b:0e:ea:02:ed:c1:64:c8:44:34:c8:3f:e2:
                    da:c2:9d:48:4b:c7:89:48:63:1a:69:70:58:46:e0:
                    b0:5e:fb:c5:04:74:80:c0:2b:28:3f:f5:e2:89:56:
                    30:07:fd:77:d7:63:41:df:30:a6:49:39:99:9c:c3:
                    33:92:ad:b4:76:e3:43:68:b7:2c:15:52:7f:a0:3b:
                    e9:3c:15:d5:9b:d6:02:47:03:4c:eb:12:4c:15:47:
                    03:a4:8a:ce:ee:a9:ce:ec:60:45:7b:d5:ad:26:9c:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C6:66:DD:FF:27:83:6E:53:32:76:E4:41:D7:67:76:26:5C:41:23
            X509v3 Authority Key Identifier:
                keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:23:a5:60:1a:ed:d8:a3:54:54:e6:de:eb:b3:36:2d:91:
         25:d8:91:94:ea:b6:45:5b:6f:7d:d2:19:1a:10:c6:a9:5c:f8:
         ef:70:f0:da:ce:fa:ee:ab:f8:6a:9d:0e:35:d2:cc:f9:11:b3:
         00:cc:5e:6e:ce:39:f4:f3:10:46:d6:7e:ab:c5:00:b3:a4:e7:
         89:8b:7c:86:7a:9d:b4:e9:ee:56:60:c7:e3:c3:ce:44:a8:36:
         1f:12:ba:d4:d0:ee:6c:e4:30:3a:42:fc:f3:b4:b1:70:66:83:
         39:8b:b5:35:6a:dc:93:6b:ef:57:d0:b8:ad:19:79:92:60:0d:
         02:cc:a5:28:5b:21:1e:75:17:85:09:d4:07:9e:49:9b:46:4a:
         6c:43:ac:ae:99:16:8f:e2:36:c7:1f:f3:3b:b0:31:c0:09:a5:
         ee:4b:ca:68:bb:6f:5d:40:3c:ce:78:98:df:54:cc:3a:3e:e7:
         5a:d0:b5:6d:c0:81:60:f0:ae:54:c9:7f:5b:27:65:64:46:69:
         fc:70:e3:71:b5:68:a1:4f:23:08:fa:48:c3:17:f7:de:c0:a0:
         7b:59:52:c9:be:67:df:b6:b3:13:57:5b:2e:09:43:ec:cc:a4:
         b0:b4:59:2c:12:4b:34:11:a1:46:ad:26:b9:56:c7:ce:4d:b0:
         4c:4e:18:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDczRkQxMTAvBgNVBAUTKEIwNEJCQTFGMThDMEU3MDgzMUYzNTRGNzQ1NUVFMTVE
MzIyOTQxQjMwHhcNMjUxMjIwMjEyMTQ4WhcNMjUxMjI3MjEyMTQ4WjAYMRYwFAYD
VQQDDA02OTQ3MTM2Yy1kYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvbAjm7y801JLjYRh5++u6ZY6ZFsQEerGW727+06zd/zgxlJzYmOO1aQjpnlR
q+NIHc+sZgdvRNXwyjRQO4IH8PVw1VfZsFsNYVhlNslJY+gjw8ThdNKxP2p3J5xo
VuKR0wuguobPf6Nr+rJtOg2zsGDLvfwp8xOzeigDmAPwFZec2oGG9uRd57wFnili
lpw04nw8DOQuFBsO6gLtwWTIRDTIP+Lawp1IS8eJSGMaaXBYRuCwXvvFBHSAwCso
P/XiiVYwB/1312NB3zCmSTmZnMMzkq20duNDaLcsFVJ/oDvpPBXVm9YCRwNM6xJM
FUcDpIrO7qnO7GBFe9WtJpxtAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbGZt3/
J4NuUzJ25EHXZ3YmXEEjMB8GA1UdIwQYMBaAFLBLuh8YwOcIMfNU90Ve4V0yKUGz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNGRC9EQ0IyNUI5NjdC
NDMxMUVCODM1MzM2NjZDNEY5QUUwMi9zRXU2SHhqQTV3Z3g4MVQzUlY3aFhUSXBR
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NFdTZIeGpBNXdneDgxVDNSVjdoWFRJcFFiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzNGRC9EQ0IyNUI5NjdCNDMxMUVCODM1MzM2NjZDNEY5QUUwMi9zRXU2SHhqQTV3
Z3g4MVQzUlY3aFhUSXBRYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCiziOlYBrt2KNUVObe67M2LZEl2JGU6rZFW2990hkaEMapXPjvcPDa
zvruq/hqnQ410sz5EbMAzF5uzjn08xBG1n6rxQCzpOeJi3yGep206e5WYMfjw85E
qDYfErrU0O5s5DA6QvzztLFwZoM5i7U1atyTa+9X0LitGXmSYA0CzKUoWyEedReF
CdQHnkmbRkpsQ6yumRaP4jbHH/M7sDHACaXuS8pou29dQDzOeJjfVMw6Puda0LVt
wIFg8K5UyX9bJ2VkRmn8cONxtWihTyMI+kjDF/fewKB7WVLJvmfftrMTV1suCUPs
zKSwtFksEks0EaFGrSa5VsfOTbBMThgI
-----END CERTIFICATE-----
Generated at Sun Dec 21 01:13:01 2025 by rpki-client