This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
File:                     VvkoxypXKMF6mCUQm7u3IQMTu8o.mft (raw, json)
Hash identifier:          LRluHK6kgHNQn5M1dWLMqqE/8b6ud2/X/FrfAgick00=
Subject key identifier:   FA:B9:C2:29:51:69:14:B4:E3:AC:55:2C:CB:C0:90:91:9C:50:D6:43
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Certificate issuer:       /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
Manifest number:          019F
Signing time:             Fri 19 Dec 2025 02:42:43 +0000
Manifest this update:     Fri 19 Dec 2025 02:42:43 +0000
Manifest next update:     Fri 26 Dec 2025 02:42:43 +0000
Files and hashes:         1: VvkoxypXKMF6mCUQm7u3IQMTu8o.crl (hash: /LvYqJYczJCLJppybw6BJU7G/HuwXLMgFwuZIoKWjJ8=)
                          2: 0BB29428314511EF9B1F4B46C4F9AE02.roa (hash: H2sLs/hJoaPZU0Z/0qHdW66zEdj635m4qaU5cpHkB3A=)
                          3: EE44E774314411EF956C0046C4F9AE02.roa (hash: tpBZHVCLnDE9hPXx1rzX1HnhPRZpMRzJTTstJm0BIGI=)
                          4: 22C2DBA66E7511EFA80C0F12C4F9AE02.roa (hash: c53/pjhIZaLo3ZYn7NmlwhctciJl6CH40hWP1FAxHnA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
                          rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
        Validity
            Not Before: Dec 19 02:42:43 2025 GMT
            Not After : Dec 26 02:42:43 2025 GMT
        Subject: CN=6944bba3-b85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:47:3f:cd:f4:ae:58:5c:70:e8:7e:66:f6:79:
                    09:b8:96:ef:ad:67:13:9e:92:16:f8:31:33:a7:56:
                    70:95:43:b1:c3:ac:f6:ce:53:ef:f1:24:63:e1:3c:
                    5d:a1:a6:08:37:1a:87:d5:76:6b:70:13:2d:1b:71:
                    b0:d3:11:5e:13:26:cf:8b:c2:bf:11:85:7c:c2:63:
                    b8:f4:84:b3:3e:d4:1a:2b:05:15:4d:29:9c:f6:d1:
                    6a:27:90:30:a4:a6:a6:0c:14:f2:8e:d9:79:c6:23:
                    fd:10:eb:39:08:3f:85:59:98:9a:5b:a1:03:ce:8b:
                    2a:1f:71:6c:49:52:c1:1e:5d:aa:e9:0c:cf:d5:bb:
                    51:65:6a:ee:d5:b1:34:c1:63:cd:80:7b:5c:36:46:
                    46:05:d6:be:6d:cc:27:79:1c:97:6f:da:3e:3f:18:
                    8c:15:80:8c:43:ac:90:78:7c:51:81:ab:ab:d1:b5:
                    ff:4b:be:c2:3e:04:f3:cb:20:51:62:43:ff:19:09:
                    28:6c:2a:fa:57:54:7a:89:c9:27:ae:31:02:36:bf:
                    2a:c9:1c:b5:70:13:1f:17:eb:30:9b:e2:ec:f8:e3:
                    4a:8b:44:89:1b:c2:db:d4:92:50:b6:f0:ce:fc:bc:
                    b4:be:90:5b:37:b6:08:04:69:e7:0f:01:61:5a:0c:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B9:C2:29:51:69:14:B4:E3:AC:55:2C:CB:C0:90:91:9C:50:D6:43
            X509v3 Authority Key Identifier:
                keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:05:5c:7e:62:68:0b:d4:03:58:ab:ca:86:41:a7:30:ec:d6:
         10:9e:78:8c:0a:a0:c6:e9:c8:c6:f4:80:32:0d:99:89:6a:b4:
         36:6c:26:9f:a9:d8:f1:31:cb:7d:2e:db:c7:20:f8:f0:68:b0:
         89:da:1b:89:54:81:71:f1:f4:3e:63:eb:13:51:ef:21:8e:f8:
         6e:54:3c:93:fc:e6:0b:3f:6e:9c:6e:6b:f0:8e:5d:39:27:58:
         f7:f4:9b:b2:de:26:11:e9:fa:a6:7f:55:16:1b:d3:a6:b8:8f:
         ae:a8:c9:b0:59:6c:dd:4d:47:d3:a1:8b:35:e7:77:98:f3:d2:
         01:2d:86:9b:f7:6b:09:2e:cf:af:ad:e8:38:1e:74:7d:b4:7a:
         18:48:99:7e:a0:19:0b:e0:08:bd:44:f6:05:6d:30:c8:b8:0f:
         6f:34:0e:bd:f4:80:74:29:08:2c:f4:01:5a:7b:94:d3:10:c1:
         9c:d6:ac:ed:1a:5b:87:8e:d5:34:a8:02:aa:40:26:77:ab:a9:
         12:27:a0:09:fb:5c:da:e2:40:b7:e1:18:fa:8f:36:0c:35:76:
         83:4f:f4:51:66:47:c4:08:cb:04:85:17:76:3b:0e:ba:61:78:
         d9:30:ea:a9:62:14:54:aa:ea:55:1e:cf:97:9d:93:82:d1:ea:
         9a:c7:21:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:12:54 2025 by rpki-client