This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
File:                     VQiKMVvLUJi-72Zaqcvf0yogWCA.mft (raw, json)
Hash identifier:          SXEt54tuz6OqrpRAcRER+DbLxDFNtQyw8fgyQFEa1dM=
Subject key identifier:   97:08:89:CC:0D:D5:35:3B:C6:3D:C1:0C:B4:1F:C7:3E:52:52:02:C3
Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20
Certificate issuer:       /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
Certificate serial:       070F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
Manifest number:          06F7
Signing time:             Thu 18 Dec 2025 21:27:22 +0000
Manifest this update:     Thu 18 Dec 2025 21:27:22 +0000
Manifest next update:     Thu 25 Dec 2025 21:27:22 +0000
Files and hashes:         1: VQiKMVvLUJi-72Zaqcvf0yogWCA.crl (hash: DfxW42KUHkNGMf0KDQ4crUg1qhobUUt/0aL8O5AmpNI=)
                          2: A9B5CDC4B97111F089BA4733C4F9AE02.roa (hash: e7NB/rZJ7soW34sGauamE9L/Mh5Ro39SnWUlgmJO+4o=)
                          3: 4AC85EBC8E1511F083A5EB46C4F9AE02.roa (hash: HpSbnGJEafe0Cwqy3fqQEE7tGOKywS9PLDhr9ZIWw18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl
                          rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119F89, serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
        Validity
            Not Before: Dec 18 21:27:22 2025 GMT
            Not After : Dec 25 21:27:22 2025 GMT
        Subject: CN=694471ba-e743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:63:20:fe:5b:a4:b9:a2:97:c9:06:ba:d6:
                    50:6e:4e:f6:db:b7:4a:19:18:6e:c1:11:46:97:e3:
                    18:fb:b9:9d:9e:07:e8:3a:c6:ef:74:0f:5c:47:23:
                    6c:15:b0:76:0a:a6:19:ee:6c:77:fb:54:2d:84:5f:
                    6d:96:d7:73:c4:ff:b1:82:eb:06:e4:e7:31:3e:73:
                    a3:87:5e:ac:02:35:0b:df:3d:28:47:5d:71:1a:40:
                    74:9f:1e:c4:5b:34:5b:2f:73:b3:96:3c:04:3c:5f:
                    f6:24:08:9f:f7:93:ad:d5:4f:84:57:df:a2:9a:ac:
                    6b:bf:1f:de:1d:44:44:5d:1a:d2:43:fb:cb:40:b5:
                    10:d2:7b:df:e1:35:59:52:5d:57:55:a8:8b:a1:c6:
                    b0:19:38:3d:03:c0:76:21:59:b4:7c:ec:94:81:f9:
                    f8:6f:e1:9d:72:45:87:91:49:51:00:a1:65:15:42:
                    07:06:83:b1:19:2b:f7:a7:a6:59:03:01:fc:41:90:
                    3d:f9:79:ce:8b:fc:f4:ed:59:04:d0:41:0e:cb:cf:
                    94:df:0d:72:8a:93:9e:13:46:0b:f7:95:49:e3:7d:
                    5f:02:3c:9c:79:cb:dd:4b:65:28:d8:34:6b:88:1d:
                    b1:a3:6d:34:dd:b2:e2:e3:72:58:5a:6c:a8:db:94:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:08:89:CC:0D:D5:35:3B:C6:3D:C1:0C:B4:1F:C7:3E:52:52:02:C3
            X509v3 Authority Key Identifier:
                keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0a:94:af:e0:a6:37:d4:02:79:82:e1:92:8d:9e:c4:f4:4d:
         9e:66:6e:e2:6e:8c:51:be:30:84:ea:ea:f0:32:c7:48:9b:03:
         2e:44:f0:95:09:61:e3:66:0c:4a:e8:e7:c5:b3:fa:5f:80:af:
         a0:5f:3f:50:6a:8d:e6:86:db:b6:f6:ab:26:cb:c4:bc:9c:dd:
         43:7e:0d:35:4c:70:6d:59:cc:eb:3d:51:ec:42:6c:10:45:45:
         df:2f:c4:ee:fa:41:9d:00:d8:c9:5b:c8:0a:09:be:f2:b2:ce:
         86:e0:82:16:cb:a5:7f:40:09:32:e3:92:92:e7:23:44:25:d1:
         40:62:f7:20:00:eb:f1:d9:62:4b:38:85:da:e1:c0:b5:ac:34:
         e5:5b:da:c9:f9:66:89:71:b0:b4:83:ee:e3:f7:4f:1f:e2:f3:
         be:1e:56:2e:fb:80:97:34:f1:a0:c1:cd:6b:84:ce:7d:6b:d9:
         2a:29:7c:20:7c:48:58:ee:76:f1:32:75:50:23:cd:d3:a4:b3:
         17:29:47:89:57:1b:b8:75:bb:bc:24:c2:9f:36:16:6e:bd:5e:
         e9:d2:83:00:c0:d9:ce:30:84:cd:67:98:7f:fd:67:70:25:08:
         45:8d:29:18:68:43:12:c9:71:b5:97:af:5a:b5:1c:7e:63:88:
         a3:4d:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:07:18 2025 by rpki-client