This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
File:                     vphUuYSZNmQ-DUAVo7N7XkSErVo.mft (raw, json)
Hash identifier:          /KVgAgBaoLbjJeoOmymxj/fUIy9NFFi/l0KTiVBqPmM=
Subject key identifier:   1F:B1:B4:B0:31:58:D1:5D:53:8C:0A:C6:65:47:AE:AB:CA:EF:CA:29
Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
Certificate issuer:       /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Certificate serial:       2A34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
Manifest number:          2A1F
Signing time:             Sat 20 Dec 2025 15:28:06 +0000
Manifest this update:     Sat 20 Dec 2025 15:28:06 +0000
Manifest next update:     Sat 27 Dec 2025 15:28:06 +0000
Files and hashes:         1: vphUuYSZNmQ-DUAVo7N7XkSErVo.crl (hash: LDiOK/7Xk2er9J0FjSBGYgosKaSK/B3KEiZfkP+4q/4=)
                          2: 73E0191A967811EA92E45A27C4F9AE02.roa (hash: tpW2hEp1WUinGORU3b4Fa8fzBLaeCCXQIdHVixzwtfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
                          rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 15:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10804 (0x2a34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D19, serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
        Validity
            Not Before: Dec 20 15:28:06 2025 GMT
            Not After : Dec 27 15:28:06 2025 GMT
        Subject: CN=6946c086-551f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:69:ca:46:42:2c:16:f7:2f:a8:da:da:c3:
                    fb:80:ae:0e:11:91:de:81:eb:18:46:0c:c5:9a:36:
                    7e:a7:80:09:eb:a8:44:bf:01:c6:9e:a8:3f:34:25:
                    e0:2d:c2:5f:fb:aa:70:d6:40:ce:4a:37:d2:03:55:
                    64:46:7c:7d:72:f2:e1:98:52:80:7f:32:0e:4a:30:
                    fb:44:68:60:3d:6b:ea:2a:63:f6:f4:b4:3a:6d:3d:
                    13:f9:ef:33:6e:dc:9c:f8:4a:30:96:59:95:40:76:
                    ce:d9:da:eb:e1:f4:30:c4:4f:d6:e0:c8:6a:f2:75:
                    34:a5:55:1f:1a:08:f4:58:71:42:10:95:71:37:a5:
                    8c:48:a8:c4:7e:ea:69:92:39:6e:30:26:7e:96:d5:
                    54:e6:1f:74:aa:21:b4:51:e9:31:d3:df:77:b5:14:
                    78:0c:8a:12:2b:2c:ed:a7:c5:0b:f8:37:9f:de:42:
                    10:4f:1c:e4:4e:a6:a2:25:9b:0a:5e:35:25:31:ed:
                    45:9c:11:4e:f0:38:1f:c7:dc:a7:a5:16:6c:81:0c:
                    b2:20:d4:ed:39:1e:1a:e3:25:47:4c:da:22:ea:1b:
                    6b:33:73:dd:1c:50:c2:39:b6:11:74:fa:53:57:c3:
                    67:94:bd:bf:2d:0e:be:07:31:67:48:ee:06:a3:12:
                    e9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B1:B4:B0:31:58:D1:5D:53:8C:0A:C6:65:47:AE:AB:CA:EF:CA:29
            X509v3 Authority Key Identifier:
                keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ec:a7:06:5b:79:45:38:e2:9f:95:88:43:45:97:32:24:88:
         1b:44:09:36:81:57:c9:77:ff:66:55:05:85:f9:97:5d:24:0e:
         e8:54:24:0b:4e:60:46:6d:a5:e5:94:c8:bf:bb:a6:55:fa:77:
         2d:a6:5a:51:99:9f:d0:7c:e8:98:02:7d:b7:63:eb:68:86:ed:
         ab:eb:f5:1a:8d:22:2e:01:90:26:53:f8:b7:b3:40:4d:27:fd:
         07:01:87:57:60:30:51:70:80:67:27:cc:d7:76:20:12:4c:37:
         07:d9:a3:84:c1:90:08:c8:bd:24:9b:38:ec:d4:d2:d7:e7:a4:
         26:24:b6:b1:f8:16:46:70:ba:7c:fc:2d:d3:e6:cd:b0:57:4d:
         1d:35:75:c7:d3:0c:4d:2d:b0:12:a1:f7:ec:e4:9d:27:5d:30:
         3f:61:ca:c1:79:77:11:5f:56:01:52:4a:75:4d:dc:a2:f8:f3:
         06:cf:a7:c6:7c:77:87:4b:52:73:e3:e1:bb:4b:1b:f5:8c:5e:
         7e:29:2e:51:a5:80:19:c9:3e:3f:fb:ce:71:f4:7e:51:31:2c:
         8e:6b:8f:bc:03:88:7b:be:3c:11:f8:5d:47:64:77:26:df:26:
         6e:ea:aa:9e:68:11:51:5b:a5:17:bb:81:d9:d7:23:81:93:d1:
         6d:d8:59:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:46:19 2025 by rpki-client