This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
File:                     vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft (raw, json)
Hash identifier:          EUObx9MI6JYF2KuWLMRkZ6uApGTZcSERgyblQI46SrU=
Subject key identifier:   3C:BE:53:D6:24:BE:09:54:C0:8E:B2:28:D8:BB:01:A0:00:65:30:F4
Authority key identifier: BF:08:E8:E0:B2:A6:76:DC:AE:C4:9D:51:9B:FE:C7:65:46:C2:16:7E
Certificate issuer:       /CN=A916B30C/serialNumber=BF08E8E0B2A676DCAEC49D519BFEC76546C2167E
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
Manifest number:          016D
Signing time:             Tue 23 Dec 2025 02:54:27 +0000
Manifest this update:     Tue 23 Dec 2025 02:54:26 +0000
Manifest next update:     Tue 30 Dec 2025 02:54:26 +0000
Files and hashes:         1: vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl (hash: w5E7QpvGBIqtOiiTSmh4mWdCJ+DXk1I98ImGGCvTnrI=)
                          2: 610EBED6B06911EEA7F1DA31C4F9AE02.roa (hash: Dv0HIWx3/yRbUEaDwhnfPRjSuoO2Y3gJY1XiMwy7l8Y=)
                          3: C75C471CB05F11EEB81C6C79C4F9AE02.roa (hash: 5LPH/WNi3gfNhKVoRLSA8Ih/RzW8kgqCDfXR1GGlrO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl
                          rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B30C, serialNumber=BF08E8E0B2A676DCAEC49D519BFEC76546C2167E
        Validity
            Not Before: Dec 23 02:54:26 2025 GMT
            Not After : Dec 30 02:54:26 2025 GMT
        Subject: CN=694a0463-fa43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:1f:93:e7:35:3f:83:dd:b9:5e:88:be:8a:
                    54:e6:43:4d:88:ab:7d:46:65:d9:14:6e:7c:d0:9e:
                    07:cb:b9:b3:1c:cd:a8:93:ab:8a:e9:3d:a0:06:74:
                    54:f2:9f:26:2c:51:03:42:c7:37:04:56:50:07:0b:
                    19:5d:2e:41:16:93:4e:e6:4a:88:90:82:a9:bf:b1:
                    f0:fd:d0:bb:7f:52:11:33:90:dd:b7:6c:e0:ef:08:
                    1b:b0:5b:6c:7f:db:22:d5:00:91:4c:e1:09:29:76:
                    ce:35:dc:08:7e:2c:66:86:a9:dc:16:07:6d:02:45:
                    47:c7:00:50:9d:b5:40:18:ed:ec:05:de:bf:9a:e6:
                    4b:b1:9e:00:a8:69:8f:36:49:89:ce:c1:a7:c3:fa:
                    18:2d:bf:be:3a:4a:6c:22:6a:3a:dc:e9:9f:a6:ee:
                    f1:3a:5a:5a:0a:fe:a7:0f:67:ab:59:66:7f:87:03:
                    81:c9:e6:19:c7:04:c1:2b:9b:60:99:04:bf:67:3d:
                    e2:2f:63:7c:57:01:99:f7:fe:79:fe:d4:57:61:25:
                    d3:41:5d:9c:ee:43:11:87:8c:ff:b1:ea:d3:08:a5:
                    dd:d4:09:02:3c:ea:40:22:3f:4a:a7:9c:a1:74:61:
                    fd:c1:18:7b:bb:81:7e:86:dc:3b:e0:51:94:e3:33:
                    b0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BE:53:D6:24:BE:09:54:C0:8E:B2:28:D8:BB:01:A0:00:65:30:F4
            X509v3 Authority Key Identifier:
                keyid:BF:08:E8:E0:B2:A6:76:DC:AE:C4:9D:51:9B:FE:C7:65:46:C2:16:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:7e:1d:53:cc:95:19:5b:9f:6f:de:9e:d8:1d:ef:e5:93:96:
         95:ce:19:a3:0e:23:e7:e6:51:31:1b:b6:77:2f:95:92:ae:26:
         55:4b:04:f3:e4:b0:18:69:25:38:44:0f:a9:43:d4:4f:3a:22:
         41:77:b3:d9:17:d5:70:df:d3:f6:72:25:6a:c1:04:6d:9a:a3:
         81:8b:f8:dd:f3:fb:a5:cc:64:4f:47:c1:2a:f4:4d:9d:0c:a0:
         e0:83:ab:e1:f3:ff:90:05:0c:23:77:b7:9a:6a:8d:f4:d7:ef:
         2a:96:35:c8:dd:14:9f:74:48:e3:28:ed:d1:f6:c7:58:c7:cb:
         65:ea:53:83:66:0d:37:2b:8f:42:2d:be:46:f2:0c:07:35:cc:
         e6:3f:3f:46:ec:0b:36:cf:dc:34:b9:33:fe:32:4c:a3:b0:b3:
         5a:e9:ca:41:b0:bc:85:34:21:f0:62:67:34:de:d6:12:b0:7e:
         72:c4:ee:cb:81:8c:98:9d:4a:9b:00:7d:bd:95:b2:26:47:92:
         ea:94:20:9a:29:d9:c6:82:e5:b6:af:39:37:4a:56:b7:d1:f0:
         22:4c:d1:9a:7b:52:1c:9a:fc:80:b4:7b:84:2b:48:d2:40:cf:
         10:20:7e:b8:7e:c9:70:c8:cb:2f:91:eb:c4:58:cc:3f:48:70:
         d2:ef:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:38:47 2025 by rpki-client