This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
File:                     vjv7J425oD3qOFbX_iKSGDdNj8A.mft (raw, json)
Hash identifier:          QgbFIHsVDwYOrXrWJLS5kEaGVgpisKFNJwN+0pqLMBU=
Subject key identifier:   C2:D4:07:95:C6:57:8B:73:E3:E3:B4:9E:B7:7F:D8:EB:EF:48:13:D3
Authority key identifier: BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0
Certificate issuer:       /CN=A9145884/serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
Manifest number:          B2
Signing time:             Sun 21 Dec 2025 05:11:41 +0000
Manifest this update:     Sun 21 Dec 2025 05:11:41 +0000
Manifest next update:     Sun 28 Dec 2025 05:11:41 +0000
Files and hashes:         1: vjv7J425oD3qOFbX_iKSGDdNj8A.crl (hash: SItrsye1sxaofaJbDooZuqrrHpJkFucvJCrWlRFIcYI=)
                          2: FB1BCFB4CDEB11EF8115D720C4F9AE02.roa (hash: xoOr7mcziDhALfamVuTQnWFaiiFOCUXOClhl7nV0wbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl
                          rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 05:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145884, serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0
        Validity
            Not Before: Dec 21 05:11:41 2025 GMT
            Not After : Dec 28 05:11:41 2025 GMT
        Subject: CN=6947818d-f21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:b9:32:0e:2b:e2:58:c2:57:4e:ba:e9:71:
                    73:ce:45:89:92:d8:ff:ae:b8:9e:17:25:9c:8c:6e:
                    8d:13:72:f9:46:6a:80:ad:6c:49:0e:3c:4c:ab:f5:
                    8f:05:52:05:47:b4:13:44:fa:49:d2:63:9a:91:2c:
                    ea:e0:d8:60:90:15:e8:8a:b8:a0:12:82:9d:df:61:
                    18:15:dc:0b:2f:3f:92:da:b9:41:ca:49:83:34:a4:
                    1c:72:dd:d1:c2:b1:37:7a:88:03:ae:c6:01:12:46:
                    c6:0c:d1:d2:f1:03:d7:a5:71:34:df:6a:22:90:5c:
                    c6:28:21:0a:a3:32:1a:55:12:ee:3f:ce:67:88:b3:
                    ac:17:9a:75:22:d4:a9:b6:9d:a7:84:43:10:17:54:
                    f1:5d:41:cd:df:f8:42:ca:34:b9:ed:d5:bb:33:1b:
                    d3:47:28:fb:41:c4:f9:81:bc:89:8f:67:0d:25:47:
                    fc:73:36:c1:6d:e6:53:d1:05:4b:68:f4:48:15:7c:
                    85:47:7f:f2:bb:91:f4:e5:20:a5:95:08:f2:78:67:
                    ef:fd:9e:5e:7e:0b:f6:71:27:35:b5:e2:16:15:32:
                    30:39:06:3c:95:90:b5:98:14:72:2d:6a:68:80:c6:
                    48:a9:14:41:79:b5:cc:1e:45:a2:e5:fd:74:6d:19:
                    4e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D4:07:95:C6:57:8B:73:E3:E3:B4:9E:B7:7F:D8:EB:EF:48:13:D3
            X509v3 Authority Key Identifier:
                keyid:BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:36:cb:ba:3b:1d:ed:78:13:73:a5:02:54:e3:cd:8c:a5:95:
         dd:2d:b5:bd:6d:ea:6f:da:f2:cb:72:db:d2:51:12:bf:d6:21:
         b3:69:b6:b8:09:65:68:44:af:08:9f:20:1d:dd:73:32:0d:a6:
         6c:a7:e4:32:56:87:46:7a:68:35:1a:fd:7b:03:07:4d:a9:3f:
         30:aa:23:c2:90:f1:4b:37:e9:3e:8e:fb:a2:66:a0:7c:e8:1c:
         90:1e:ea:b5:ac:08:fc:2b:a9:ab:d3:8a:82:6f:84:6d:3f:e2:
         43:bd:70:f5:4b:e1:84:16:fa:e7:f2:d7:52:57:00:d8:35:c7:
         2f:90:c1:f4:81:80:8b:b9:e1:a0:75:ea:fa:4b:c9:e0:a0:52:
         8e:12:3e:d9:c2:43:77:e4:ba:fd:25:bb:6a:9c:6e:19:05:64:
         f7:9c:fe:20:20:bf:82:60:90:2a:81:7d:4f:00:1d:6e:52:e8:
         a2:92:54:a3:ae:be:03:57:3d:67:b3:9f:cc:64:34:05:7b:47:
         6e:84:c6:c9:26:0c:30:1f:31:99:18:bd:a2:03:2e:36:ec:2b:
         de:4f:e4:95:38:89:c5:d4:81:e0:92:a8:78:d6:7e:65:0d:cd:
         92:4c:16:09:3d:0d:4d:9c:fb:df:ac:b8:34:20:29:c2:2d:07:
         f5:1f:10:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:35:44 2025 by rpki-client