This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
File:                     vEIYikinqZ-W1q-yAR59yd7uIqU.mft (raw, json)
Hash identifier:          Z7XT0pKnUUQi6X3nQDG3PIugJfSFxPr9tzVcXWszJbE=
Subject key identifier:   CB:B0:6E:D3:A0:DF:71:07:12:89:1E:4F:BB:1F:E5:35:05:9E:18:F8
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Certificate issuer:       /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
Manifest number:          47
Signing time:             Sat 20 Dec 2025 19:06:29 +0000
Manifest this update:     Sat 20 Dec 2025 19:06:29 +0000
Manifest next update:     Sat 27 Dec 2025 19:06:29 +0000
Files and hashes:         1: vEIYikinqZ-W1q-yAR59yd7uIqU.crl (hash: 70aqCW6qjbSWqsr//MEutPrTRH4PMOFPuF6q3ZNiqqI=)
                          2: 751E0734D06911F0A789BB44C4F9AE02.roa (hash: UhXJLAHokVCI0k+DjjmBHGcMcgUilly93pv811k5onQ=)
                          3: 8E018B30D05611F0A517D12AC4F9AE02.roa (hash: sV/z+J9M1vomeBwWCL+sac3AZUuwIvVbej3W8i6aPqQ=)
                          4: 080C8846CC5911F0900FE21DC4F9AE02.roa (hash: uIEx6xwpbLEgKu+5JEevIBjQ6QBJ1P16CaV2vlziLyU=)
                          5: 8CBB3EA2D06911F09735DD48C4F9AE02.roa (hash: gqj4jtEMDN4bcyseFHh+di3mjZVrlGI2+shg14Tz6Ac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 19:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
        Validity
            Not Before: Dec 20 19:06:29 2025 GMT
            Not After : Dec 27 19:06:29 2025 GMT
        Subject: CN=6946f3b5-ecdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:d7:12:97:71:b1:76:36:fc:ce:5d:f4:f8:
                    8b:f7:e9:8f:61:44:fc:3f:d5:13:93:e3:64:06:7f:
                    57:fa:1e:43:33:46:3f:95:1f:2c:18:41:0f:d3:1f:
                    b3:21:10:26:20:65:9e:a1:31:ae:83:cf:01:f3:c2:
                    53:5e:aa:27:43:a2:23:8f:62:14:b8:a8:99:ab:03:
                    b4:46:b1:14:fa:42:35:5e:bc:9b:56:8f:10:f2:8a:
                    90:6f:dd:99:47:9e:35:84:d3:0e:f7:1a:95:61:72:
                    51:33:3c:07:a3:e2:eb:2e:00:bd:1c:f7:1e:e2:4e:
                    9a:61:67:28:4c:8c:f0:30:84:b8:1b:5b:cb:a5:99:
                    87:e6:38:ac:e7:53:23:d4:7c:ff:ee:10:28:66:3d:
                    1a:43:c5:08:f2:8f:56:8c:5f:50:53:db:79:14:af:
                    3f:55:58:8b:e4:19:c6:4a:45:31:d9:8a:c5:35:4e:
                    57:b7:07:09:07:eb:f5:95:94:bb:b9:c4:b3:c9:7b:
                    18:6d:4b:4a:68:47:c9:7e:48:7f:fb:0e:68:86:83:
                    91:08:45:01:8a:5a:90:c8:cc:f7:27:07:71:d8:57:
                    8d:72:1c:6c:ad:ca:2a:0d:f6:d0:df:93:7c:5b:d6:
                    ef:f7:fa:9f:2d:31:30:00:2a:91:ae:38:6e:a6:b6:
                    0b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B0:6E:D3:A0:DF:71:07:12:89:1E:4F:BB:1F:E5:35:05:9E:18:F8
            X509v3 Authority Key Identifier:
                keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8d:d5:8d:7a:59:e2:3a:bd:2a:5c:38:73:e4:99:15:20:ee:
         85:ed:23:15:eb:9a:b9:16:43:18:c3:ce:48:d7:22:fa:62:c8:
         b2:01:97:06:f9:2c:d9:9e:37:7d:c3:36:04:e5:7b:82:24:87:
         3d:b8:c3:6d:c5:c2:e8:a0:a5:72:c9:65:9d:e5:6f:1f:00:15:
         fd:56:ba:3f:f5:7c:1f:f1:e0:3a:84:89:86:2b:b4:01:f8:42:
         a2:5f:05:60:4f:a6:f8:c4:d2:e1:33:36:96:e6:91:07:20:03:
         ac:9b:8b:0e:18:98:92:c4:b6:6d:02:21:1b:50:3d:0c:ab:9b:
         91:2c:13:4b:ff:76:ac:51:d0:aa:61:f0:dd:c5:a0:eb:97:6e:
         be:72:c5:6b:e7:48:e2:39:2c:9c:a4:27:e6:81:19:b0:17:8f:
         12:21:63:2d:67:89:9a:fa:c9:c0:7f:f2:65:d1:c9:d0:18:69:
         b1:81:40:f7:a5:67:0a:cb:26:de:05:90:ce:f4:1d:12:be:99:
         2c:2e:b0:e8:69:81:31:72:cf:49:2f:7e:c3:bf:d4:ac:83:bd:
         5a:de:fa:ec:37:e5:d7:96:ab:55:7d:eb:0a:c0:cd:ee:eb:33:
         45:bd:b9:dc:7b:58:e6:ff:bf:42:9e:f3:49:02:12:3c:9f:ee:
         33:53:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:00:16 2025 by rpki-client