This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
File:                     V4hJyblKNVp2IKl0eXPSG77aP1M.mft (raw, json)
Hash identifier:          WpDn6O/2TJ1uXGRuN9/sN3/JHQ4cWZdvak0+0VVznY8=
Subject key identifier:   3A:C9:E9:01:54:9E:AE:FE:14:B8:B0:B6:50:1E:A5:9E:B0:9C:75:86
Authority key identifier: 57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
Certificate issuer:       /CN=A91410C5/serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
Manifest number:          60
Signing time:             Sun 21 Dec 2025 06:10:57 +0000
Manifest this update:     Sun 21 Dec 2025 06:10:57 +0000
Manifest next update:     Sun 28 Dec 2025 06:10:57 +0000
Files and hashes:         1: V4hJyblKNVp2IKl0eXPSG77aP1M.crl (hash: FiXHQEaLqGFkIiiNF/nCHIgXX4eFcVkWnXrtJ/TOc0I=)
                          2: C7142BC6654E11F0903B1F31C4F9AE02.roa (hash: N2WAIBH8ZMkrMk9CktT8AtzaLV74cC0YpuQq3dTGOmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl
                          rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 06:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
        Validity
            Not Before: Dec 21 06:10:57 2025 GMT
            Not After : Dec 28 06:10:57 2025 GMT
        Subject: CN=69478f71-b00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:70:48:de:e9:00:ae:a0:7c:c6:35:c0:49:
                    c5:1d:6a:08:8e:23:fb:cd:15:75:23:eb:d9:d8:21:
                    73:77:9b:09:75:7f:2a:d4:95:dc:37:aa:69:a8:8b:
                    d4:a6:0e:00:0e:6f:85:df:59:8e:9b:78:ec:92:9e:
                    cb:82:55:21:ca:fb:c9:4a:be:08:da:19:19:a3:90:
                    45:3a:93:49:ea:ba:7e:c2:34:ab:23:cc:38:06:cd:
                    fb:bf:d9:97:08:da:2b:f3:53:d5:15:b4:3d:c0:ea:
                    1b:d1:11:40:68:e1:0c:ad:33:85:65:b9:76:3a:ab:
                    72:05:dd:82:cd:c4:f6:f6:b5:8c:58:f1:76:6f:37:
                    f6:0b:20:44:f8:08:c2:88:58:a9:28:b9:9e:e7:2c:
                    78:6b:8a:fe:5e:29:2f:f3:b1:61:f0:c6:bb:86:04:
                    36:a5:81:df:36:92:aa:d3:91:47:96:94:90:5f:45:
                    7d:12:4f:f9:a7:05:eb:6a:4d:84:75:da:6e:10:34:
                    64:bf:1a:5c:ca:6e:1a:8c:6c:27:a1:58:47:42:dd:
                    73:fc:1c:6c:0a:80:62:7d:29:82:4c:d9:c7:18:fa:
                    fa:23:c5:dc:c3:8b:b6:49:77:ad:77:5e:47:89:d4:
                    bf:3f:f9:99:ac:fc:ee:b2:68:f9:e5:3f:ed:4c:82:
                    99:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C9:E9:01:54:9E:AE:FE:14:B8:B0:B6:50:1E:A5:9E:B0:9C:75:86
            X509v3 Authority Key Identifier:
                keyid:57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:54:33:c9:95:8a:63:82:74:84:90:f2:97:fa:17:0a:80:ff:
         ad:11:ae:42:89:76:59:c2:6d:ed:36:7d:66:d1:6d:a8:89:64:
         61:6e:5d:23:93:87:11:d8:ef:ad:dc:8d:9c:06:9b:6c:29:61:
         00:95:fb:f7:fd:6b:f1:57:3c:cd:e6:f4:02:13:9c:77:8f:02:
         d4:86:be:c6:f7:64:49:2f:0d:17:20:5c:85:28:e4:e8:bc:82:
         a4:7f:85:8f:2c:3b:4e:9a:55:c0:b1:3b:08:bd:a5:80:93:33:
         e2:53:80:30:c0:64:66:c3:c8:48:5d:6f:f8:af:72:ac:cb:d7:
         33:fc:3a:d4:51:57:1f:f0:64:4d:a1:da:d0:72:e3:a3:e6:ca:
         16:14:3e:56:0f:2a:9c:68:46:c3:a2:62:ba:18:bf:3e:c8:d6:
         df:f5:3b:ae:6c:99:13:79:a9:3e:6a:9d:62:51:fa:48:f3:a8:
         e1:50:8d:00:a1:a2:b8:62:67:ce:e7:41:40:db:1e:59:3b:8c:
         82:58:c0:50:a7:89:52:32:1c:bb:33:4a:ab:5d:d1:d1:73:1e:
         44:2d:5a:b4:b9:d2:6e:77:80:a3:a9:22:ca:e5:06:39:bd:f7:
         7a:df:f1:b6:85:0d:50:d8:9f:aa:2a:9d:4a:f3:21:38:1c:bd:
         d8:ae:35:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 20:38:00 2025 by rpki-client