This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
File:                     vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft (raw, json)
Hash identifier:          NzPoKyYjqPoPvpNBrDQpzIuCZvFPRLAGT2mZ6+N1Hvo=
Subject key identifier:   1E:75:3B:F1:6D:D4:ED:FA:E2:E7:6C:04:13:E6:D0:D9:0B:F0:A7:07
Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
Certificate issuer:       /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Certificate serial:       0CC7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
Manifest number:          0CAF
Signing time:             Thu 18 Dec 2025 18:08:30 +0000
Manifest this update:     Thu 18 Dec 2025 18:08:29 +0000
Manifest next update:     Thu 25 Dec 2025 18:08:29 +0000
Files and hashes:         1: vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl (hash: w4Mt2JYzJ6bHWog+0ASJj7amC2UZLdjj6cMBWxxp1ZI=)
                          2: 7035C2E6CF7111F0A638EC6BC4F9AE02.roa (hash: t33RheNvT6AZs0YGzltpL3HsFmPDCdK8QLo3GUeUtsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl
                          rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3271 (0xcc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184569, serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
        Validity
            Not Before: Dec 18 18:08:29 2025 GMT
            Not After : Dec 25 18:08:29 2025 GMT
        Subject: CN=6944431d-5109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:e4:d9:d2:65:fe:d2:45:c7:68:b0:2e:0f:
                    97:b5:18:bf:dd:4d:20:78:bc:27:52:3f:cb:bc:5f:
                    31:a7:36:78:dc:5d:e6:a6:ae:f8:6e:7f:d7:8a:91:
                    ec:af:57:65:ee:06:fe:1b:ce:09:fe:99:58:e0:e6:
                    7b:75:f0:28:4e:f9:5d:7f:1e:f7:1b:64:f0:56:5e:
                    10:98:ff:e7:2b:7e:dc:c6:e7:91:b4:d2:c3:90:61:
                    5a:46:f0:b2:6e:21:74:05:31:88:1a:dd:bb:6c:cd:
                    5b:37:54:19:83:c9:c1:41:73:d5:62:64:db:28:77:
                    8d:b9:fa:4e:c7:c7:09:e3:46:f6:de:35:e4:3c:98:
                    85:73:13:55:3f:ff:51:aa:2f:4f:fd:86:ce:15:dd:
                    51:d1:dc:eb:4a:7d:43:ea:cb:b7:f0:05:65:c8:6a:
                    27:5e:64:f3:30:5a:a7:02:3d:e2:d4:89:74:7d:df:
                    16:19:3f:96:34:19:ab:f7:cf:cf:6c:6f:6a:94:af:
                    dd:66:27:21:e7:28:3c:c1:cc:f0:4e:58:c1:61:5d:
                    e7:cf:db:6f:25:22:f9:99:98:46:aa:4f:11:70:e3:
                    57:e5:7f:6a:88:89:5f:4b:6d:d0:5d:0d:e1:2d:ec:
                    4a:94:f1:8f:95:41:7b:fc:df:01:4e:74:ea:b1:3b:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:75:3B:F1:6D:D4:ED:FA:E2:E7:6C:04:13:E6:D0:D9:0B:F0:A7:07
            X509v3 Authority Key Identifier:
                keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:45:0c:a2:5f:f1:cd:eb:f6:c5:7d:b2:a8:01:66:6e:f1:a6:
         8b:cc:d1:23:7a:7c:8d:c4:8a:24:f1:58:4f:4a:f5:d7:69:2f:
         ea:97:0b:bb:a0:11:0b:b2:35:46:dd:de:7a:42:2f:e5:b1:58:
         48:0b:ba:93:8f:97:cb:26:59:4d:b5:ba:55:41:a8:4d:32:3e:
         b8:89:28:36:da:84:34:5a:f1:85:44:82:3f:6d:03:ef:99:4f:
         17:90:8a:08:3f:5e:90:c0:d1:46:1d:ad:d2:3b:6f:06:71:8e:
         12:e8:45:88:bf:0f:86:aa:ad:fa:c4:4e:74:66:78:3c:ca:9f:
         34:ff:00:c7:24:e0:47:4c:48:4a:37:62:ec:84:ce:06:a8:3f:
         7d:99:ae:cc:6a:91:94:3b:eb:76:dc:27:af:d2:df:35:67:01:
         25:3d:25:4f:b7:8e:87:8f:5f:19:df:30:6c:1d:33:3f:d1:fc:
         c2:0d:cb:5a:0e:7c:ca:51:b9:60:b8:2d:41:e0:d7:d8:1e:37:
         8d:9a:81:b1:89:4c:4e:20:fc:d5:7d:8e:fa:a6:88:e4:99:87:
         73:d7:23:33:57:ab:95:ff:42:e5:7c:94:55:55:0b:c1:91:57:
         2d:ca:c4:a2:24:27:8a:d1:ca:a4:72:ff:d9:e6:d2:94:60:17:
         71:fa:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:35:33 2025 by rpki-client