This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft
File:                     vQyzxI8wwfOrPzAa7N5qzAIutV8.mft (raw, json)
Hash identifier:          RxmslbSLvJMR7/vRYmpsCa1CSP70Ub4dFuoUuEvvM8k=
Subject key identifier:   96:AF:08:50:45:59:98:0D:47:EE:44:17:97:E6:76:8E:37:A2:F2:32
Authority key identifier: BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F
Certificate issuer:       /CN=A9131940/serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F
Certificate serial:       06E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft
Manifest number:          06DA
Signing time:             Thu 18 Dec 2025 21:26:25 +0000
Manifest this update:     Thu 18 Dec 2025 21:26:24 +0000
Manifest next update:     Thu 25 Dec 2025 21:26:24 +0000
Files and hashes:         1: vQyzxI8wwfOrPzAa7N5qzAIutV8.crl (hash: GRLdmEsGoaWzTbhZfpmX+Av2ks/ttf5k5TpNNjE6qs4=)
                          2: B7E5ADEE7B2111EB89BB2347C4F9AE02.roa (hash: XhXh7/hc+7Rhp2pgMR497HY0tEko0qYz35OtmtH7m/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl
                          rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760 (0x6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131940, serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F
        Validity
            Not Before: Dec 18 21:26:24 2025 GMT
            Not After : Dec 25 21:26:24 2025 GMT
        Subject: CN=69447181-b7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:45:20:71:8e:b1:a2:86:e5:2d:7f:6d:9e:
                    34:81:41:1a:97:84:ea:a8:03:47:ec:0c:44:11:60:
                    46:aa:56:c4:20:3e:24:fe:be:c1:80:6b:d7:c9:d7:
                    89:35:bf:b4:6b:b3:bc:24:ca:b1:af:a0:a4:29:a7:
                    47:c6:c9:0f:0e:1a:c8:b7:c9:b6:57:eb:f3:cc:71:
                    91:2c:b5:73:e3:58:bf:89:63:39:7c:3b:a3:f7:68:
                    af:6c:d9:f0:9c:34:ab:26:fd:95:0c:05:13:e1:59:
                    b1:31:7e:e0:d9:e8:78:f5:e7:e9:f1:9b:f8:1b:30:
                    93:5e:de:b6:67:ec:7d:63:df:3f:2f:b9:de:7f:2f:
                    82:70:f1:85:08:67:f0:ac:b2:31:4f:ca:bc:4f:1a:
                    b2:5f:3a:76:fb:88:45:db:57:df:e0:54:08:de:4e:
                    d9:b0:9f:af:37:12:c4:fe:5c:7d:a1:19:d3:ed:dc:
                    c5:c4:45:c2:7a:3f:6e:59:63:cc:8f:45:06:36:2c:
                    1e:de:01:b2:d2:7e:dc:ca:a8:be:9b:98:de:b8:8b:
                    e9:66:85:8a:04:cd:a1:f8:3a:b7:ee:53:e9:60:5a:
                    09:e0:ee:5b:8d:57:90:a7:32:04:1e:35:a6:89:fa:
                    f5:95:dd:e0:61:d3:ec:6c:18:d2:d0:95:8e:33:e1:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AF:08:50:45:59:98:0D:47:EE:44:17:97:E6:76:8E:37:A2:F2:32
            X509v3 Authority Key Identifier:
                keyid:BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d7:4f:b5:00:9d:a9:0c:a9:b7:fa:e3:23:dd:7f:63:cd:65:
         ad:50:18:4d:0b:b7:3c:66:46:86:3b:2a:dd:3d:86:83:f3:cf:
         e9:8e:5f:50:f3:20:90:84:5f:b7:a8:8f:8b:cb:34:f9:2f:84:
         89:69:34:46:ac:22:1e:09:1d:b7:11:da:74:c3:0a:08:a8:a4:
         e3:99:d3:a0:7a:f6:0f:00:c9:f6:96:ec:81:b0:c8:1e:ac:11:
         af:b9:fb:e2:4a:da:66:53:db:46:9f:dc:c0:8e:d2:ca:87:c6:
         e8:eb:df:0b:c6:1f:ad:56:07:c6:35:84:77:47:10:ef:6f:cd:
         0d:6d:f4:20:3b:17:8e:6f:65:fb:5c:56:88:8c:2f:94:8d:73:
         02:63:b2:ac:9d:79:61:c7:c0:82:a0:c3:8c:5b:53:ad:d9:98:
         a2:bd:0f:86:63:83:b0:52:31:b4:d2:b0:eb:d4:97:84:ec:4f:
         84:99:38:97:95:e2:a5:65:ae:a5:9c:f8:9f:a2:32:4b:4e:e1:
         fa:d0:66:f7:05:8b:be:ed:d3:57:42:92:53:ad:c9:7a:72:51:
         0f:2e:f1:9a:cc:cd:8b:a5:e9:68:98:85:48:f1:fb:2e:a9:66:
         e2:26:27:66:1c:60:fb:62:43:4c:22:a2:3c:63:a9:d5:fb:57:
         7a:83:08:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:14:16 2025 by rpki-client