This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
File:                     vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json)
Hash identifier:          zfU7OZCpSKjcfeznc4O+ca4OpYqXZWfyA6Bez/kqkaM=
Subject key identifier:   B0:80:AE:7D:46:BD:20:B1:6E:75:56:9B:27:F4:50:8C:43:BF:06:C2
Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
Certificate issuer:       /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
Manifest number:          0B85
Signing time:             Fri 26 Dec 2025 19:36:53 +0000
Manifest this update:     Fri 26 Dec 2025 19:36:52 +0000
Manifest next update:     Fri 02 Jan 2026 19:36:52 +0000
Files and hashes:         1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: SYgVYoTn1zWnZO9c/Pqd9MgVTw3v2NK3HG4UB17aGCc=)
                          2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: A1jEmvYmaWLQVLC3lKrKCjgOEWn5/laaNWB/FSQRMc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 19:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
        Validity
            Not Before: Dec 26 19:36:52 2025 GMT
            Not After : Jan  2 19:36:52 2026 GMT
        Subject: CN=694ee3d5-be19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:c6:88:f4:d3:68:c0:1e:a2:42:1f:16:a3:
                    ab:92:d9:45:22:f3:ed:fa:7a:8a:84:da:23:5e:07:
                    80:98:0e:e4:43:6b:be:f9:79:20:96:07:75:e2:4d:
                    9d:b0:44:a2:51:54:21:d1:6e:1c:cc:e0:b0:23:24:
                    13:14:c8:a2:06:77:4e:27:88:fb:7b:3c:d3:94:4e:
                    95:3d:fa:3f:d3:43:92:34:ea:58:19:a7:11:e4:3b:
                    19:9d:38:fb:1d:d8:24:2f:5e:1e:9d:b2:b2:f9:c3:
                    64:79:f3:84:dd:49:fa:97:ec:08:3e:5b:d6:00:ed:
                    0a:a8:85:0f:25:44:c9:d9:8d:f3:37:c6:ad:b6:1b:
                    93:c1:79:3e:8d:31:17:8f:8c:4d:b7:1e:c1:51:01:
                    9a:97:fb:81:5f:a0:cb:d9:f8:66:38:03:2c:c3:49:
                    5a:fa:29:49:a5:ab:2c:54:1b:8f:ad:26:a4:82:e9:
                    8e:84:06:0e:ac:cd:12:39:38:bd:a1:62:ae:e7:52:
                    cd:eb:75:3e:af:7c:73:c9:27:6c:49:ef:c6:f0:c1:
                    ba:28:de:df:f9:c8:31:47:db:90:4f:e5:85:f9:04:
                    55:6a:89:7b:e9:aa:d6:58:99:26:0f:56:5b:84:06:
                    58:a3:ff:4a:63:97:12:4a:96:1d:e6:b8:7b:16:08:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:80:AE:7D:46:BD:20:B1:6E:75:56:9B:27:F4:50:8C:43:BF:06:C2
            X509v3 Authority Key Identifier:
                keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:f5:94:64:8d:80:37:70:d8:f0:d2:e1:44:b4:62:7a:74:
         15:f2:53:8f:5d:0f:5f:bc:85:50:cb:b2:16:d5:0e:fc:65:33:
         f9:aa:81:b7:5e:2c:c6:bd:c1:66:fa:f6:97:ae:6d:17:dd:2d:
         6e:7e:85:be:6a:29:90:c7:75:a4:c9:a9:ae:a6:0f:9d:20:59:
         17:b4:db:28:8f:8f:af:17:d4:28:cc:53:d6:d2:b9:93:b6:1b:
         78:c7:49:86:6d:50:f8:d5:90:19:bf:6e:bd:e5:90:a8:45:54:
         2c:f7:48:26:af:8e:2e:f7:c5:0b:6b:c9:6e:a5:4c:ec:c3:17:
         6a:0d:bc:e4:4b:ee:96:9d:b1:f0:a9:66:c1:80:c1:7c:80:e4:
         96:26:b7:ba:2a:56:74:e3:70:06:fd:f4:aa:36:bb:36:71:fd:
         cf:78:25:3f:56:5e:91:c4:88:00:79:82:7c:3d:89:79:34:d8:
         26:1e:f9:95:f4:78:39:1b:cd:b6:70:17:c8:0b:c5:64:10:fe:
         02:cf:de:48:39:0f:f6:01:28:db:23:dc:3f:e7:9a:3a:e0:e7:
         1d:7b:9f:1b:c3:a6:ae:17:f2:f8:11:c9:04:f8:ae:61:93:9d:
         2d:e9:5a:8f:c9:9d:55:60:0a:54:f9:28:0c:87:6b:0c:9f:80:
         49:f2:ba:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 06:38:15 2025 by rpki-client