This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
File:                     voedoSIo9Sr7TRD2P4DgJvSFFqA.mft (raw, json)
Hash identifier:          zLZ1TH0JWTX6Lj3ywSzMahL2VXaOuxN9nxZh/oCn1fM=
Subject key identifier:   2E:25:4F:ED:F0:62:67:66:FA:F8:FE:86:3F:3D:65:DD:BD:04:0F:01
Authority key identifier: BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0
Certificate issuer:       /CN=A9124096/serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
Manifest number:          1A
Signing time:             Fri 19 Dec 2025 06:46:32 +0000
Manifest this update:     Fri 19 Dec 2025 06:46:32 +0000
Manifest next update:     Fri 26 Dec 2025 06:46:32 +0000
Files and hashes:         1: voedoSIo9Sr7TRD2P4DgJvSFFqA.crl (hash: 0t62nrcrgFuu7FfNCrXgyzfGUAroRn1XY1Jqxwd4bGE=)
                          2: 0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa (hash: Id7suSsBB7TTPuhlLWbghNG7hbdjnTVpkz27ylBkiVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl
                          rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124096, serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
        Validity
            Not Before: Dec 19 06:46:32 2025 GMT
            Not After : Dec 26 06:46:32 2025 GMT
        Subject: CN=6944f4c8-430b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:a3:bc:2a:61:7d:51:d4:a7:95:a3:6b:dd:
                    76:78:ab:6b:3f:61:14:4d:6c:ca:c2:88:f9:6f:82:
                    3e:43:e2:58:29:53:77:92:09:a5:b0:37:5c:a4:53:
                    d3:95:d1:00:a4:3a:4a:86:33:46:6c:e0:d2:e6:bc:
                    a1:0c:b2:56:9d:f8:6b:24:12:ed:f9:fe:86:fe:84:
                    95:01:d8:ac:03:bc:f2:f3:56:b0:cc:10:29:e4:28:
                    0e:84:2b:cb:5c:01:de:d0:15:b4:d4:18:04:2a:1d:
                    de:b7:c4:4a:5d:14:85:97:2e:2b:e0:cd:0d:8f:06:
                    d5:4d:4d:4a:b1:8f:32:2f:a7:92:ca:08:fb:1a:9b:
                    04:d4:c2:bd:2c:c3:68:90:9c:78:b5:ef:fa:d1:65:
                    23:ef:74:a2:38:bb:41:f7:86:48:b8:5b:b7:5f:c0:
                    23:70:da:fc:7a:77:63:6b:03:da:0b:79:08:b7:29:
                    a5:90:6a:56:3c:bc:e1:6c:f0:bc:24:37:7c:24:d7:
                    74:e0:8c:33:0c:dc:1a:8f:a3:52:0d:9d:5c:48:10:
                    4f:69:03:ec:de:fc:00:d6:0c:13:0f:dc:d3:11:2a:
                    76:fe:e9:b9:db:31:d6:69:68:6b:ba:5f:4b:03:14:
                    0c:11:7d:59:45:60:e4:b1:03:45:d3:ab:19:28:8b:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:25:4F:ED:F0:62:67:66:FA:F8:FE:86:3F:3D:65:DD:BD:04:0F:01
            X509v3 Authority Key Identifier:
                keyid:BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fc:98:a9:c7:5d:ea:2f:d2:b9:e4:89:87:bb:3f:cf:96:57:
         8c:68:84:11:cd:6d:20:97:89:71:4d:15:24:ba:e4:ac:2c:07:
         0c:99:9d:ee:9e:aa:82:09:bf:7d:f9:a0:08:91:70:05:32:88:
         e6:a8:72:db:86:a5:20:8a:04:cc:7f:e6:70:f9:de:1f:6c:0a:
         27:ce:a7:22:ce:f2:10:45:a8:38:bb:bf:ee:54:0b:93:7c:04:
         87:31:b2:40:43:cb:0f:20:94:19:3b:fe:3e:c6:44:9f:5b:b4:
         47:7a:62:25:bb:bd:f7:94:bf:e9:6d:38:f9:78:34:6b:ed:18:
         dd:c8:3d:f4:12:1b:21:9b:d3:1f:5b:87:b9:07:79:da:50:fc:
         a7:fc:80:cb:ee:6d:cc:ec:28:3e:7c:a5:86:99:fe:58:4d:c7:
         e4:d3:f6:2c:6c:79:8f:eb:d0:f0:f9:f5:69:79:91:27:bc:e2:
         1f:17:6b:f6:1f:c0:f2:42:4e:75:91:46:a1:aa:60:17:9d:7d:
         a9:29:e8:20:a4:80:95:b8:55:4d:a1:70:07:77:2e:fa:27:1a:
         8a:ee:2d:0b:f4:a5:f2:61:92:a5:61:44:72:02:36:ba:6a:e8:
         62:dc:47:bb:b3:24:6f:ff:80:02:37:3c:7e:a7:66:30:f0:48:
         9c:86:3f:63
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NDA5NjExMC8GA1UEBRMoQkU4NzlEQTEyMjI4RjUyQUZCNEQxMEY2M0Y4MEUwMjZG
NDg1MTZBMDAeFw0yNTEyMTkwNjQ2MzJaFw0yNTEyMjYwNjQ2MzJaMBgxFjAUBgNV
BAMMDTY5NDRmNGM4LTQzMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8F6O8KmF9UdSnlaNr3XZ4q2s/YRRNbMrCiPlvgj5D4lgpU3eSCaWwN1ykU9OV
0QCkOkqGM0Zs4NLmvKEMslad+GskEu35/ob+hJUB2KwDvPLzVrDMECnkKA6EK8tc
Ad7QFbTUGAQqHd63xEpdFIWXLivgzQ2PBtVNTUqxjzIvp5LKCPsamwTUwr0sw2iQ
nHi17/rRZSPvdKI4u0H3hki4W7dfwCNw2vx6d2NrA9oLeQi3KaWQalY8vOFs8Lwk
N3wk13TgjDMM3BqPo1INnVxIEE9pA+ze/ADWDBMP3NMRKnb+6bnbMdZpaGu6X0sD
FAwRfVlFYOSxA0XTqxkoizhnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULiVP7fBi
Z2b6+P6GPz1l3b0EDwEwHwYDVR0jBBgwFoAUvoedoSIo9Sr7TRD2P4DgJvSFFqAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MDk2LzA4QjQwQzNBQkI5
RjExRjBBRjlBNUQxQUM0RjlBRTAyL3ZvZWRvU0lvOVNyN1RSRDJQNERnSnZTRkZx
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdm9lZG9TSW85U3I3VFJEMlA0RGdKdlNGRnFBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0
MDk2LzA4QjQwQzNBQkI5RjExRjBBRjlBNUQxQUM0RjlBRTAyL3ZvZWRvU0lvOVNy
N1RSRDJQNERnSnZTRkZxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFH8mKnHXeov0rnkiYe7P8+WV4xohBHNbSCXiXFNFSS65KwsBwyZne6e
qoIJv335oAiRcAUyiOaoctuGpSCKBMx/5nD53h9sCifOpyLO8hBFqDi7v+5UC5N8
BIcxskBDyw8glBk7/j7GRJ9btEd6YiW7vfeUv+ltOPl4NGvtGN3IPfQSGyGb0x9b
h7kHedpQ/Kf8gMvubczsKD58pYaZ/lhNx+TT9ixseY/r0PD59Wl5kSe84h8Xa/Yf
wPJCTnWRRqGqYBedfakp6CCkgJW4VU2hcAd3LvonGoruLQv0pfJhkqVhRHICNrpq
6GLcR7uzJG//gAI3PH6nZjDwSJyGP2M=
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:42:34 2025 by rpki-client