This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft
File:                     vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json)
Hash identifier:          cEvF76a/0cIY9NZ61hZqBo8of15NV6BLyn81L4Mdcx0=
Subject key identifier:   48:1C:1F:B1:8D:26:98:C1:E0:75:6A:0B:56:55:41:04:D4:78:10:C4
Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95
Certificate issuer:       /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995
Certificate serial:       084E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft
Manifest number:          0848
Signing time:             Thu 18 Dec 2025 20:14:32 +0000
Manifest this update:     Thu 18 Dec 2025 20:14:32 +0000
Manifest next update:     Thu 25 Dec 2025 20:14:32 +0000
Files and hashes:         1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: K2NZpuVOHehVupohyszlsPOZe1r6qzmfp+LVuyCWmwY=)
                          2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: g+6S4S2dxNtg0BGxl2vF4MpJIveeS58PPReJPs/GBY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl
                          rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2126 (0x84e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995
        Validity
            Not Before: Dec 18 20:14:32 2025 GMT
            Not After : Dec 25 20:14:32 2025 GMT
        Subject: CN=694460a8-d868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:ab:d6:45:59:08:92:bf:8c:0c:66:0d:a6:
                    97:b7:71:14:8c:d0:24:ce:9a:da:0e:68:68:7a:5b:
                    b6:45:47:28:79:4f:30:27:e2:71:db:5b:0c:65:13:
                    6f:e2:2d:e4:19:14:41:88:42:8c:9d:85:46:6a:73:
                    e6:ae:d0:b5:62:5e:38:b4:f6:63:84:5a:1d:4c:ba:
                    b3:66:b7:5d:5c:6f:1d:81:04:1e:fc:b1:18:cf:36:
                    2c:9b:9c:dc:65:f7:fa:43:9a:a9:fd:58:31:d3:ac:
                    d7:ad:fd:00:d7:4c:3c:8f:89:13:ec:4a:34:19:e5:
                    75:67:f8:d7:cf:7d:e8:9b:c4:b5:c3:d0:94:7b:9b:
                    c0:40:e5:e7:8d:d7:39:98:bc:52:a1:51:49:84:8d:
                    b5:ba:5e:51:33:f5:ff:23:91:3d:53:ac:dd:31:6c:
                    f8:80:39:a5:d2:6f:95:b2:34:56:52:97:d6:6f:b3:
                    92:8a:8c:90:6c:4b:04:0f:97:cc:f1:ea:b1:a1:cd:
                    64:ae:5c:80:e6:65:fa:ab:5f:6d:61:48:d6:b8:d9:
                    ee:4d:ba:54:5f:82:b3:7b:8a:14:b4:f6:fa:3a:7f:
                    c1:c1:d1:97:22:3f:d8:02:d6:d7:a8:bc:46:7e:e2:
                    f5:2b:43:c4:5c:e5:32:74:3f:06:29:80:9b:97:e6:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:1F:B1:8D:26:98:C1:E0:75:6A:0B:56:55:41:04:D4:78:10:C4
            X509v3 Authority Key Identifier:
                keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:69:cf:9f:95:a5:2c:6d:ed:76:6c:95:ce:1d:1a:91:b8:d7:
         1a:be:6f:45:90:8d:d8:c5:20:52:0e:d9:c0:b8:88:d7:fb:5c:
         c8:af:45:57:d8:92:8b:43:95:34:b3:6b:94:28:53:90:5e:d2:
         0a:2e:34:19:af:d1:3c:f6:34:49:3b:45:7c:9e:16:fb:2c:eb:
         73:b2:fa:f1:4f:fc:4a:ed:6f:3d:e2:b1:33:47:c7:3e:a7:dc:
         af:7e:9b:06:27:e7:94:6a:16:3f:9f:fa:de:ce:37:2a:16:83:
         a9:bc:08:0d:71:f3:d5:1b:bd:7e:7a:cc:08:04:f2:9e:4d:f6:
         d7:38:4d:6d:01:52:a3:83:fd:53:15:1f:05:3e:a7:34:0a:34:
         ad:66:10:03:fe:d8:db:e7:4a:14:2f:9e:a2:b5:4f:0f:2a:40:
         56:76:ea:ae:f5:34:47:04:0c:0e:48:26:77:48:95:10:29:07:
         a1:3d:ee:02:01:10:ac:6a:33:c9:80:8b:74:87:48:fb:e9:13:
         d1:6b:b1:87:93:bc:fd:11:56:e2:2b:a6:90:0f:66:03:13:26:
         5e:00:51:ce:fb:05:c2:85:18:3b:23:ab:c5:f3:e1:58:49:15:
         3e:32:20:90:4a:f7:39:df:02:77:86:35:ff:cd:05:d1:9b:16:
         ca:33:83:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2
OEREN0I5OTUwHhcNMjUxMjE4MjAxNDMyWhcNMjUxMjI1MjAxNDMyWjAYMRYwFAYD
VQQDDA02OTQ0NjBhOC1kODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm4Wr1kVZCJK/jAxmDaaXt3EUjNAkzpraDmhoelu2RUcoeU8wJ+Jx21sMZRNv
4i3kGRRBiEKMnYVGanPmrtC1Yl44tPZjhFodTLqzZrddXG8dgQQe/LEYzzYsm5zc
Zff6Q5qp/Vgx06zXrf0A10w8j4kT7Eo0GeV1Z/jXz33om8S1w9CUe5vAQOXnjdc5
mLxSoVFJhI21ul5RM/X/I5E9U6zdMWz4gDml0m+VsjRWUpfWb7OSioyQbEsED5fM
8eqxoc1krlyA5mX6q19tYUjWuNnuTbpUX4Kze4oUtPb6On/BwdGXIj/YAtbXqLxG
fuL1K0PEXOUydD8GKYCbl+bvBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgcH7GN
JpjB4HVqC1ZVQQTUeBDEMB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC
QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K
NU1hb3F3bWM3NDVvM1h1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBzac+flaUsbe12bJXOHRqRuNcavm9FkI3YxSBSDtnAuIjX+1zIr0VX
2JKLQ5U0s2uUKFOQXtIKLjQZr9E89jRJO0V8nhb7LOtzsvrxT/xK7W894rEzR8c+
p9yvfpsGJ+eUahY/n/rezjcqFoOpvAgNcfPVG71+eswIBPKeTfbXOE1tAVKjg/1T
FR8FPqc0CjStZhAD/tjb50oUL56itU8PKkBWduqu9TRHBAwOSCZ3SJUQKQehPe4C
ARCsajPJgIt0h0j76RPRa7GHk7z9EVbiK6aQD2YDEyZeAFHO+wXChRg7I6vF8+FY
SRU+MiCQSvc53wJ3hjX/zQXRmxbKM4PT
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:51 2025 by rpki-client