This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
File:                     vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json)
Hash identifier:          a1meyDO+sGc/YXWDjHPvRx7HuihEiUP/J8hxz2X7iDg=
Subject key identifier:   DE:D5:05:19:81:05:38:8E:26:4E:FC:67:D8:23:DF:98:9D:8A:12:33
Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C
Certificate issuer:       /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
Manifest number:          0102
Signing time:             Fri 19 Dec 2025 04:12:25 +0000
Manifest this update:     Fri 19 Dec 2025 04:12:25 +0000
Manifest next update:     Fri 26 Dec 2025 04:12:25 +0000
Files and hashes:         1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: 1bdTxnFdMJK8XgkH2VXtnj0QJt822LHGHia2erJNPps=)
                          2: 710FB354979E11EF99310B40C4F9AE02.roa (hash: 1UcWorT+hHuzqY8KzQLhN3a0TdkRPLNkQE9UL68LZgs=)
                          3: 27AEE7D0979D11EFB1426839C4F9AE02.roa (hash: xNPSf2uxf0gfylw09N39nWcLaL34aWsQPkwDaLt++sk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl
                          rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C
        Validity
            Not Before: Dec 19 04:12:25 2025 GMT
            Not After : Dec 26 04:12:25 2025 GMT
        Subject: CN=6944d0a9-53e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:0a:df:db:bf:a4:86:62:87:fd:52:55:69:
                    2f:f1:a4:cb:45:06:ec:42:e9:49:f6:7e:b0:69:8f:
                    82:b2:a5:a9:b2:49:68:3f:8c:bb:3a:a2:78:df:b3:
                    60:46:f1:3a:6d:25:16:6d:d9:00:83:96:4a:91:96:
                    8e:39:e5:af:f6:b6:18:9d:97:2f:70:ff:e4:76:cd:
                    56:71:c0:18:f2:1f:1a:8a:d9:48:d6:b2:56:4f:76:
                    de:35:b9:1c:ad:c2:40:b5:2c:54:5e:60:cd:30:f3:
                    a6:09:9e:43:3c:38:05:6f:d5:ee:20:79:d0:19:82:
                    cb:01:d0:9d:6c:78:df:1c:11:95:b8:fc:96:53:36:
                    1f:f2:08:08:22:ae:b3:b1:83:f1:c3:0d:c1:d4:38:
                    1c:09:be:48:b9:5b:be:3c:b4:85:b2:03:11:80:0d:
                    71:88:a5:f8:88:5a:67:23:cf:93:87:1a:59:fe:4d:
                    b3:79:ae:ec:2c:f8:7b:46:c1:d3:1f:a7:a8:60:0c:
                    49:69:00:58:39:a1:d9:aa:8f:47:c7:a2:4a:a2:b3:
                    24:81:57:aa:47:ac:d0:dc:c1:2b:61:1b:0c:4d:af:
                    65:3d:e8:9a:34:3d:00:d9:ba:a3:6e:c4:a3:d6:83:
                    87:c4:55:03:03:39:39:a7:60:de:cf:26:3e:20:09:
                    9d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D5:05:19:81:05:38:8E:26:4E:FC:67:D8:23:DF:98:9D:8A:12:33
            X509v3 Authority Key Identifier:
                keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3e:07:8c:84:04:ef:fa:80:35:a2:8a:b4:61:ae:82:24:e6:
         e4:06:26:f0:13:b6:22:bc:d7:26:c2:3d:24:ff:33:e8:c5:7e:
         4d:35:41:1d:e2:e1:30:88:50:cd:7b:95:87:12:5e:61:05:b6:
         d9:76:58:df:50:42:d9:6c:c6:74:bc:c9:9a:96:a2:1e:4e:6b:
         d9:6c:b5:fc:ac:9e:02:ff:a5:3a:d9:06:62:d9:d3:1a:16:87:
         fb:3b:de:6e:2b:d6:ad:3d:d1:10:16:30:30:1d:d9:c1:93:a3:
         18:08:5f:a8:3f:0a:e6:9c:d9:97:bd:94:da:f9:a9:f1:ee:09:
         f3:12:c4:de:95:76:c1:30:2e:2d:a2:09:5e:e3:cb:c1:7d:fa:
         2c:89:5e:24:86:1b:58:1b:13:e5:09:3f:e7:85:b1:40:42:98:
         c2:85:ec:ac:84:a8:08:cd:dd:c8:9b:76:46:ee:78:d0:d9:71:
         d3:2d:ff:31:7e:92:4f:42:ee:cd:4b:78:64:2b:c0:30:1f:f3:
         7b:95:44:73:e5:ee:7b:db:bf:18:2c:1e:fa:59:24:c9:d2:fb:
         da:6f:f7:c5:68:74:d3:9e:b5:85:6d:6c:b7:96:ac:1b:dc:e0:
         35:51:63:b6:c3:b3:23:c6:5b:4b:27:00:41:a3:e0:4e:02:77:
         fa:83:10:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:39 2025 by rpki-client