This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
File:                     vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json)
Hash identifier:          v4H6n7M0poxfU1qu39ztLV39NBfUUb4bzrbZcty68hA=
Subject key identifier:   2F:50:AA:A9:B0:94:5C:AA:7A:06:7C:A0:90:55:84:BA:27:57:CF:FC
Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
Certificate issuer:       /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Certificate serial:       0665
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
Manifest number:          0651
Signing time:             Sun 28 Dec 2025 21:54:37 +0000
Manifest this update:     Sun 28 Dec 2025 21:54:37 +0000
Manifest next update:     Sun 04 Jan 2026 21:54:37 +0000
Files and hashes:         1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: siyJ8Jv5yv+jr0E8ovYBq2Vd/nhAZg5EVcf4waOtlyU=)
                          2: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: xc/k3wBL9PbMVeZ6NnzVVYqpCqcpVpMHNoEeu9dWgdo=)
                          3: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: 3m2SQFBv5Jj9U4DJ7yaxwWUfUobTKq/igN4z5bbj3Hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
                          rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 21:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151F3B, serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
        Validity
            Not Before: Dec 28 21:54:37 2025 GMT
            Not After : Jan  4 21:54:37 2026 GMT
        Subject: CN=6951a71d-a557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:09:4c:6f:b6:50:1a:23:5a:d0:a4:55:10:
                    9f:35:6f:af:0c:20:2a:49:8e:e0:b0:52:20:f7:4b:
                    94:77:5d:60:42:3e:12:ee:11:8f:e6:29:8b:d0:5b:
                    59:77:12:ba:76:5f:a6:00:df:8f:4c:a1:b9:b1:4c:
                    56:ad:fd:96:43:e2:f9:f0:b2:9c:d3:6a:ad:b2:5b:
                    49:79:80:e5:e5:4e:25:89:33:ea:da:ff:1e:47:b5:
                    cf:9f:4d:90:fa:52:7b:24:a9:8e:ad:ed:b2:ff:9f:
                    de:b4:d3:4c:cf:37:88:00:1f:16:ac:c7:40:02:56:
                    12:89:7d:d1:6c:77:91:09:79:7d:71:3b:c2:8f:c7:
                    1b:d3:c3:bc:bc:ea:a1:9b:98:19:06:b7:f2:ba:24:
                    9a:bb:7e:f9:f9:0f:86:23:8c:4d:5f:a8:c6:e1:d3:
                    09:ba:90:61:e4:d6:91:b6:dc:48:89:ac:df:34:43:
                    4c:f8:08:bb:05:c5:0e:1e:cb:f3:55:4f:5f:91:95:
                    5a:6e:d0:5c:37:be:7d:c2:c4:7b:5c:45:58:cd:82:
                    df:18:3d:a9:72:fb:98:2a:c0:be:f7:35:3c:2f:a3:
                    45:77:6e:65:bf:9a:52:ab:98:f3:bf:74:98:b2:4a:
                    16:0f:29:3b:99:40:18:17:62:37:75:ed:59:93:62:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:50:AA:A9:B0:94:5C:AA:7A:06:7C:A0:90:55:84:BA:27:57:CF:FC
            X509v3 Authority Key Identifier:
                keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f3:3d:4c:11:6a:cb:80:ff:90:fe:55:64:61:4c:2c:e8:ff:
         bc:1f:20:45:c0:97:3c:9b:0e:91:20:4d:30:28:b5:4e:01:f3:
         9a:68:0e:61:4f:f4:cf:39:ad:1c:c5:26:4d:7f:aa:30:59:b8:
         e3:b2:fb:c9:93:ab:18:d3:33:32:8f:74:23:6a:55:04:c8:9f:
         f8:db:0d:bf:3d:80:b1:f3:e6:e9:52:e0:4d:65:34:2a:13:ea:
         b4:f0:93:f8:74:65:87:24:96:ed:20:6e:9f:b2:b6:d4:42:52:
         d0:fe:09:38:f1:40:ff:81:56:f3:f4:c0:eb:b4:e9:e2:bb:a9:
         cd:ff:2e:e0:2d:e0:11:eb:df:60:a5:49:6b:5c:ae:14:59:11:
         5a:b3:b3:ac:a2:55:20:4d:a7:7c:6f:4d:2d:fe:3a:39:e0:88:
         a1:17:df:88:01:df:a1:aa:19:b9:19:db:b8:3e:69:25:e9:56:
         f6:c0:49:92:39:a5:7b:f5:11:cf:fc:29:93:25:34:6e:d7:e0:
         96:90:b5:5d:a0:43:ac:a2:a7:62:d7:d9:4a:44:6e:2a:ca:11:
         69:b8:9b:15:43:8a:9c:db:b2:4d:71:27:f4:f9:c8:69:d3:06:
         e2:32:0b:d8:a5:46:5e:9c:b2:ce:b5:68:77:64:b1:36:c4:04:
         1c:c3:77:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTFGM0IxMTAvBgNVBAUTKEJFOTJBQkE0QTAxNDQzMTlFRTZENDVBQjkwOTBEODhE
NURBRjM3RkUwHhcNMjUxMjI4MjE1NDM3WhcNMjYwMTA0MjE1NDM3WjAYMRYwFAYD
VQQDDA02OTUxYTcxZC1hNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2TQJTG+2UBojWtCkVRCfNW+vDCAqSY7gsFIg90uUd11gQj4S7hGP5imL0FtZ
dxK6dl+mAN+PTKG5sUxWrf2WQ+L58LKc02qtsltJeYDl5U4liTPq2v8eR7XPn02Q
+lJ7JKmOre2y/5/etNNMzzeIAB8WrMdAAlYSiX3RbHeRCXl9cTvCj8cb08O8vOqh
m5gZBrfyuiSau375+Q+GI4xNX6jG4dMJupBh5NaRttxIiazfNENM+Ai7BcUOHsvz
VU9fkZVabtBcN759wsR7XEVYzYLfGD2pcvuYKsC+9zU8L6NFd25lv5pSq5jzv3SY
skoWDyk7mUAYF2I3de1Zk2K7HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9Qqqmw
lFyqegZ8oJBVhLonV8/8MB8GA1UdIwQYMBaAFL6Sq6SgFEMZ7m1Fq5CQ2I1drzf+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUYzQi80RjhCOTFCOEI5
QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4bnViVVdya0pEWWpWMnZO
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZwS3JwS0FVUXhudWJVV3JrSkRZalYydk5fNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MUYzQi80RjhCOTFCOEI5QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4
bnViVVdya0pEWWpWMnZOXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBD8z1MEWrLgP+Q/lVkYUws6P+8HyBFwJc8mw6RIE0wKLVOAfOaaA5h
T/TPOa0cxSZNf6owWbjjsvvJk6sY0zMyj3QjalUEyJ/42w2/PYCx8+bpUuBNZTQq
E+q08JP4dGWHJJbtIG6fsrbUQlLQ/gk48UD/gVbz9MDrtOniu6nN/y7gLeAR699g
pUlrXK4UWRFas7OsolUgTad8b00t/jo54IihF9+IAd+hqhm5Gdu4Pmkl6Vb2wEmS
OaV79RHP/CmTJTRu1+CWkLVdoEOsoqdi19lKRG4qyhFpuJsVQ4qc27JNcSf0+chp
0wbiMgvYpUZenLLOtWh3ZLE2xAQcw3cH
-----END CERTIFICATE-----
Generated at Tue Dec 30 07:59:53 2025 by rpki-client