This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft
File:                     VZvvzzSYaXPTvkWTUWF45MOs4os.mft (raw, json)
Hash identifier:          tc6VOZa3Pws22BtId7uOpvjTxgFTiwAhqhg1thpT+8c=
Subject key identifier:   1A:93:8B:5C:0B:1E:EC:97:12:C3:16:64:60:A3:56:76:B1:49:42:A4
Authority key identifier: 55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B
Certificate issuer:       /CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft
Manifest number:          0120
Signing time:             Fri 19 Dec 2025 03:58:07 +0000
Manifest this update:     Fri 19 Dec 2025 03:58:06 +0000
Manifest next update:     Fri 26 Dec 2025 03:58:06 +0000
Files and hashes:         1: VZvvzzSYaXPTvkWTUWF45MOs4os.crl (hash: 7z5MYRjt8ps9bGt8BgLwTrVI+71XFscVwstLjXcBdWA=)
                          2: 7B6E133A61D911F0822B8C0CC4F9AE02.roa (hash: ezXxJLwoPcgk4MWna/9ZB6q7u9eauHRSVysibGU4wOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl
                          rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167003, serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B
        Validity
            Not Before: Dec 19 03:58:06 2025 GMT
            Not After : Dec 26 03:58:06 2025 GMT
        Subject: CN=6944cd4f-9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:1b:11:3c:b2:6c:f9:3f:c6:b4:e4:8b:bd:
                    e3:e5:95:e4:a5:73:91:86:46:70:7d:5a:a4:ca:18:
                    aa:79:fb:69:ac:30:e0:00:92:bd:33:56:25:ef:7e:
                    a3:b1:aa:48:35:22:ff:c7:f1:a0:2f:34:58:2d:c0:
                    af:f3:73:b0:74:d9:d9:38:61:eb:90:c2:d3:20:c9:
                    bc:3f:66:32:e0:3b:2a:89:97:03:93:a6:8b:60:c6:
                    26:e6:a3:83:e8:e2:f5:0a:4c:52:6d:e0:00:92:c7:
                    d0:94:cd:23:ab:be:b8:06:2d:9c:bf:1f:23:b9:4f:
                    b7:b3:ba:33:49:77:3b:d1:6a:56:5c:7e:ae:f1:f3:
                    b3:5e:69:8e:d4:a8:d8:27:3b:51:84:28:bf:3f:e1:
                    fa:32:08:6c:8e:ed:49:b3:da:9b:dd:5b:da:45:b9:
                    f8:27:56:48:45:df:98:c0:bb:4d:18:39:0d:97:d2:
                    34:78:db:a8:16:ba:dc:23:ff:5c:b8:54:db:9f:0a:
                    26:55:d6:96:15:25:42:26:06:8e:b4:5d:76:b3:37:
                    46:b1:36:92:62:76:48:cf:9f:2b:20:6f:49:12:3b:
                    79:cb:1a:39:a9:00:2d:5f:5f:90:d5:0f:18:9a:e2:
                    99:52:b1:b0:a4:2c:17:a6:3b:db:48:f1:fb:58:f0:
                    84:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:93:8B:5C:0B:1E:EC:97:12:C3:16:64:60:A3:56:76:B1:49:42:A4
            X509v3 Authority Key Identifier:
                keyid:55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e4:a6:92:6a:ad:65:5c:c4:8f:d7:f9:a4:29:da:ba:4d:02:
         78:67:4a:85:70:32:96:b5:6f:a3:b8:f6:0c:a4:30:cf:87:98:
         f4:5f:19:e5:bd:55:a8:be:95:fb:4d:87:1b:30:81:ad:34:8d:
         7e:6f:01:c2:ef:5f:bb:1e:ef:32:99:56:2f:c8:b3:8b:a5:79:
         5e:55:da:e4:0e:14:7f:21:04:a5:ac:f5:da:99:3a:00:ab:67:
         93:f3:d4:fb:98:f2:74:1b:22:a7:5a:99:0f:e8:2e:2d:90:7e:
         36:6c:a5:76:b8:13:ed:5e:94:8a:5e:38:50:7b:c3:ef:d1:fb:
         ba:b4:49:49:fc:b2:1a:c3:ab:2d:29:a3:bf:5e:ed:91:10:83:
         ee:44:58:f8:6d:e7:1f:24:ba:97:0a:3a:65:5b:cb:f4:a5:ab:
         f1:94:4b:29:df:7d:e4:1d:ec:93:5b:50:24:43:14:ae:a0:ee:
         d3:d2:be:2b:c3:b8:6a:ab:51:dd:cc:58:77:47:20:6a:4e:46:
         3f:00:f8:67:da:d4:90:03:1e:71:51:c5:7d:60:dd:f1:b6:2a:
         02:d6:a0:01:40:fe:17:b0:0b:c0:9a:41:27:60:65:0d:88:5d:
         d7:a8:cc:ca:79:e0:d1:ee:0f:53:e0:43:b1:ce:ce:87:4e:0f:
         99:8e:bd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:37 2025 by rpki-client