This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
File:                     vJfyb7J4ln3TyjnFndCMaiwjBvk.mft (raw, json)
Hash identifier:          Y6A7a3s38BLo03p6xe1ogZcWlJnWo4iwkn21nYLuLC8=
Subject key identifier:   E7:F3:2D:4D:64:41:FB:16:48:49:FC:43:11:DE:9F:91:1C:45:CE:AA
Authority key identifier: BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9
Certificate issuer:       /CN=A9171845/serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
Certificate serial:       054E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
Manifest number:          0545
Signing time:             Sun 28 Dec 2025 22:37:59 +0000
Manifest this update:     Sun 28 Dec 2025 22:37:58 +0000
Manifest next update:     Sun 04 Jan 2026 22:37:58 +0000
Files and hashes:         1: vJfyb7J4ln3TyjnFndCMaiwjBvk.crl (hash: K2c1A0ow/RSdNFRgU8A21EwIeNsXYIQcUUIv7754k3U=)
                          2: 8B91EDB420CD11EC97292B78C4F9AE02.roa (hash: lu1tvmrK1UL4Y/2Rq1YIX+Lb2/NNmqFCgC6huHfwCqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 22:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
        Validity
            Not Before: Dec 28 22:37:58 2025 GMT
            Not After : Jan  4 22:37:58 2026 GMT
        Subject: CN=6951b147-4731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:5a:11:ef:3c:d5:6c:9b:c8:fb:23:b8:c4:
                    d9:8c:b2:26:19:e7:dd:96:41:b4:76:c2:18:66:38:
                    7c:85:bb:59:1c:87:94:42:e6:57:4c:31:24:bc:de:
                    f3:14:52:aa:40:8a:f9:3e:ed:44:3a:f7:03:78:86:
                    8d:43:80:c1:0e:e7:dd:d9:22:d5:ec:d3:3c:1e:0c:
                    e2:cb:04:1b:a7:4e:24:46:05:63:f8:93:8e:81:45:
                    1b:9a:7b:b6:1c:88:63:88:2c:74:df:05:a5:c7:0a:
                    2a:3c:87:e6:28:d7:ed:11:ab:6b:57:17:61:96:9c:
                    90:46:7d:d2:c6:b6:ef:10:19:75:69:ac:db:8b:1a:
                    72:9a:02:3b:27:43:2a:3a:a3:07:c3:64:31:a4:2d:
                    75:a8:95:ae:81:ef:09:56:2b:ef:15:5f:ec:21:b2:
                    46:75:c5:ee:e2:9b:26:d6:bb:ff:dd:81:38:c8:02:
                    2e:ef:22:a0:75:51:99:db:4d:cf:e1:09:c7:cc:c6:
                    1d:ae:cb:ab:40:1f:bc:2f:73:19:5a:d8:ea:2c:24:
                    28:f4:07:c0:30:fc:40:17:ca:f0:83:14:15:0e:a7:
                    69:e4:0a:32:08:a0:16:0f:20:0d:67:88:cf:57:e9:
                    bb:c9:df:c1:f5:7b:86:8d:46:c2:d3:d1:3b:1d:cc:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F3:2D:4D:64:41:FB:16:48:49:FC:43:11:DE:9F:91:1C:45:CE:AA
            X509v3 Authority Key Identifier:
                keyid:BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4e:57:e3:00:a0:b9:03:82:92:7a:ea:24:ca:42:2b:2f:62:
         60:e3:70:74:26:8e:83:89:67:6b:9c:ed:7d:d0:99:bc:4d:e9:
         6a:dc:87:81:84:c5:80:8c:a8:69:b5:9e:7b:b1:5a:60:a0:60:
         af:a8:e1:58:66:9e:b8:4b:a9:54:05:91:99:3b:b2:c5:6d:a5:
         d7:5f:66:58:91:e3:57:cd:92:42:f1:a2:4a:98:11:88:b6:c7:
         27:77:4e:0d:bc:21:9f:c7:d3:c2:c0:e7:c7:96:bb:0e:3f:f4:
         7e:f2:77:9e:6f:64:d8:0f:73:9d:ea:15:bc:ac:12:8c:b1:18:
         4d:63:94:b1:50:b8:a5:fb:a7:ff:72:a7:d7:22:7e:4c:53:a4:
         15:9d:a1:9e:e0:9a:c4:1c:3a:ac:a1:41:d9:1c:cf:39:b4:db:
         23:25:9f:73:dc:7b:5b:4a:0c:69:56:ce:01:a0:4c:74:5b:5b:
         c7:08:9e:7b:d6:66:35:33:9b:2c:52:94:51:dc:b4:5a:db:0c:
         83:55:07:1e:ba:67:fe:ec:a1:06:25:52:90:f9:d4:44:bb:f5:
         2b:54:82:ef:44:50:66:bd:2e:0d:df:b5:de:db:d4:2f:5f:9e:
         14:f8:a1:9c:77:94:0d:72:6f:88:b8:0e:8a:79:08:09:73:65:
         d3:79:33:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE4NDUxMTAvBgNVBAUTKEJDOTdGMjZGQjI3ODk2N0REM0NBMzlDNTlERDA4QzZB
MkMyMzA2RjkwHhcNMjUxMjI4MjIzNzU4WhcNMjYwMTA0MjIzNzU4WjAYMRYwFAYD
VQQDDA02OTUxYjE0Ny00NzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuehaEe881WybyPsjuMTZjLImGefdlkG0dsIYZjh8hbtZHIeUQuZXTDEkvN7z
FFKqQIr5Pu1EOvcDeIaNQ4DBDufd2SLV7NM8HgziywQbp04kRgVj+JOOgUUbmnu2
HIhjiCx03wWlxwoqPIfmKNftEatrVxdhlpyQRn3SxrbvEBl1aazbixpymgI7J0Mq
OqMHw2QxpC11qJWuge8JVivvFV/sIbJGdcXu4psm1rv/3YE4yAIu7yKgdVGZ203P
4QnHzMYdrsurQB+8L3MZWtjqLCQo9AfAMPxAF8rwgxQVDqdp5AoyCKAWDyANZ4jP
V+m7yd/B9XuGjUbC09E7Hcy+HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfzLU1k
QfsWSEn8QxHen5EcRc6qMB8GA1UdIwQYMBaAFLyX8m+yeJZ908o5xZ3QjGosIwb5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS83QjYyQzgwODIw
Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi92SmZ5YjdKNGxuM1R5am5GbmRDTWFpd2pC
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZKZnliN0o0bG4zVHlqbkZuZENNYWl3akJ2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTg0NS83QjYyQzgwODIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi92SmZ5YjdKNGxu
M1R5am5GbmRDTWFpd2pCdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvTlfjAKC5A4KSeuokykIrL2Jg43B0Jo6DiWdrnO190Jm8Telq3IeB
hMWAjKhptZ57sVpgoGCvqOFYZp64S6lUBZGZO7LFbaXXX2ZYkeNXzZJC8aJKmBGI
tscnd04NvCGfx9PCwOfHlrsOP/R+8neeb2TYD3Od6hW8rBKMsRhNY5SxULil+6f/
cqfXIn5MU6QVnaGe4JrEHDqsoUHZHM85tNsjJZ9z3HtbSgxpVs4BoEx0W1vHCJ57
1mY1M5ssUpRR3LRa2wyDVQceumf+7KEGJVKQ+dREu/UrVILvRFBmvS4N37Xe29Qv
X54U+KGcd5QNcm+IuA6KeQgJc2XTeTOu
-----END CERTIFICATE-----
Generated at Tue Dec 30 22:01:08 2025 by rpki-client