This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft
File:                     6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft (raw, json)
Hash identifier:          ZAJBPnOr5evrLIOckl/rpyoAmS3m6LpQrCmMqsEf+lo=
Subject key identifier:   F3:5C:0D:D0:BC:60:77:F2:AD:BB:C4:65:4E:EF:67:2B:AC:8E:5A:E2
Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8
Certificate issuer:       /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8
Certificate serial:       061A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft
Manifest number:          0610
Signing time:             Tue 30 Dec 2025 22:06:45 +0000
Manifest this update:     Tue 30 Dec 2025 22:06:44 +0000
Manifest next update:     Tue 06 Jan 2026 22:06:44 +0000
Files and hashes:         1: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl (hash: 0EHRfs7VkUhbToIIBMsH+bRX5uPDQ97nOy8Zx0I6KWw=)
                          2: 7EFC59BA5D0511EEB1F12C3BC4F9AE02.roa (hash: 2cmkD42QcbCRoSMZu579s8sayLfnS2VTqmE89GasVfM=)
                          3: 6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (hash: wVYga0/tD85l8FSG82PbnxhnB2SkjvEdIkkyzqmMiv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 22:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C39, serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8
        Validity
            Not Before: Dec 30 22:06:44 2025 GMT
            Not After : Jan  6 22:06:44 2026 GMT
        Subject: CN=69544cf5-25d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:ec:59:27:0a:42:91:f9:2c:81:01:c8:49:
                    66:16:34:a7:4e:d0:75:2a:8b:70:5b:c7:01:69:82:
                    9b:b4:76:de:87:1c:a4:60:42:b2:03:b0:f8:2f:8a:
                    0d:66:15:88:11:4f:27:f4:ba:24:64:43:b3:3f:e5:
                    a8:4e:48:6f:4a:ab:b4:ce:8e:1a:72:74:f7:50:64:
                    60:fe:5f:b5:db:76:2f:c0:c9:05:46:71:5b:c6:83:
                    ca:a9:d4:35:2d:fd:b5:33:4f:79:6d:c2:2d:0f:dd:
                    d3:ee:5e:d7:3e:42:e4:3d:b0:44:af:14:4f:84:4b:
                    52:d8:28:c9:8d:bd:13:22:08:0b:b2:f9:e4:c1:b5:
                    67:86:3c:5d:b5:9e:d8:b8:4d:cc:7a:93:64:a2:06:
                    a4:d2:56:78:8b:95:9c:dc:1d:fb:20:a7:ab:59:68:
                    c3:6d:0d:01:20:d0:35:ab:88:57:5c:b8:01:7a:8c:
                    cc:66:0d:64:57:b2:e0:f1:6d:2d:a6:6f:2e:2a:16:
                    4a:47:b2:90:6e:99:50:ae:2e:c1:d0:86:2c:c4:58:
                    fa:b3:f5:d4:04:bd:d6:ad:35:4e:d5:24:38:1d:5f:
                    b8:c9:12:00:e4:fa:3f:f9:a4:cd:a5:73:93:30:f7:
                    28:d1:d2:a5:4f:f6:84:a0:7d:0c:d5:79:6f:3b:15:
                    39:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5C:0D:D0:BC:60:77:F2:AD:BB:C4:65:4E:EF:67:2B:AC:8E:5A:E2
            X509v3 Authority Key Identifier:
                keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:76:49:51:ed:1d:da:d2:27:cb:f4:4b:a7:9d:ee:57:8c:
         35:f3:1d:75:59:ea:f4:6e:5c:6d:44:76:ae:bb:65:5a:0a:42:
         5a:9b:ed:58:84:f8:68:27:e4:ee:6a:fa:9d:a7:cd:d4:16:bb:
         29:3a:4d:e1:b6:3a:92:3d:eb:1e:9f:1f:02:2e:cd:db:a8:54:
         25:09:8e:ff:a2:3d:3e:31:e8:96:39:35:24:06:72:f8:55:b7:
         dd:a8:cb:8c:92:e2:d7:cd:b5:0c:ce:22:2f:a8:8e:bd:2c:0b:
         9a:dc:b6:b6:47:43:2b:7a:18:7c:38:82:5e:c9:12:a9:31:35:
         ae:14:97:a2:dc:df:ad:bc:79:ce:42:ea:f1:88:17:80:c2:e5:
         fb:df:85:f9:ab:6c:f7:30:39:61:8d:9d:49:72:19:e0:46:d4:
         73:33:ec:6b:6f:57:a9:71:c4:15:60:88:a9:c5:5e:5e:c2:0c:
         7e:8b:53:6f:de:11:db:3d:d4:a2:4c:99:82:8c:60:6f:3f:52:
         f0:bc:6a:2b:98:94:cd:d3:f7:00:a2:95:85:88:6e:82:0d:6f:
         e9:50:61:37:76:04:06:f2:43:5d:06:a0:d5:4d:a1:50:c8:dc:
         5c:64:d1:d0:80:c4:a0:a4:d9:a0:1c:8a:86:77:85:65:c7:18:
         b3:ab:79:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZDMzkxMTAvBgNVBAUTKEVBMjZEMzIzODMxQ0RBMUEzODRFOTFFMEZFMzg5MURC
MENFQjJFQzgwHhcNMjUxMjMwMjIwNjQ0WhcNMjYwMTA2MjIwNjQ0WjAYMRYwFAYD
VQQDDA02OTU0NGNmNS0yNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw5TsWScKQpH5LIEByElmFjSnTtB1KotwW8cBaYKbtHbehxykYEKyA7D4L4oN
ZhWIEU8n9LokZEOzP+WoTkhvSqu0zo4acnT3UGRg/l+123YvwMkFRnFbxoPKqdQ1
Lf21M095bcItD93T7l7XPkLkPbBErxRPhEtS2CjJjb0TIggLsvnkwbVnhjxdtZ7Y
uE3MepNkogak0lZ4i5Wc3B37IKerWWjDbQ0BINA1q4hXXLgBeozMZg1kV7Lg8W0t
pm8uKhZKR7KQbplQri7B0IYsxFj6s/XUBL3WrTVO1SQ4HV+4yRIA5Po/+aTNpXOT
MPco0dKlT/aEoH0M1XlvOxU5dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNcDdC8
YHfyrbvEZU7vZyusjlriMB8GA1UdIwQYMBaAFOom0yODHNoaOE6R4P44kdsM6y7I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMzOS83QkYwRjI3NENF
NzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJobzRUcEhnX2ppUjJ3enJM
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZpYlRJNE1jMmhvNFRwSGdfamlSMnd6ckxzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NkMzOS83QkYwRjI3NENFNzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJo
bzRUcEhnX2ppUjJ3enJMc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeOnZJUe0d2tIny/RLp53uV4w18x11Wer0blxtRHauu2VaCkJam+1Y
hPhoJ+Tuavqdp83UFrspOk3htjqSPesenx8CLs3bqFQlCY7/oj0+MeiWOTUkBnL4
VbfdqMuMkuLXzbUMziIvqI69LAua3La2R0Mrehh8OIJeyRKpMTWuFJei3N+tvHnO
QurxiBeAwuX734X5q2z3MDlhjZ1JchngRtRzM+xrb1epccQVYIipxV5ewgx+i1Nv
3hHbPdSiTJmCjGBvP1LwvGormJTN0/cAopWFiG6CDW/pUGE3dgQG8kNdBqDVTaFQ
yNxcZNHQgMSgpNmgHIqGd4Vlxxizq3lV
-----END CERTIFICATE-----
Generated at Wed Dec 31 03:31:29 2025 by rpki-client