This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
File:                     Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft (raw, json)
Hash identifier:          ImIJ9yE0IPt9evcRk/6ZzS9VDRlCkoQ4aV2ED8AWDKE=
Subject key identifier:   6D:A5:5E:F8:3C:50:DE:F6:BF:A0:ED:30:34:09:0C:79:29:2E:6E:59
Authority key identifier: 57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D
Certificate issuer:       /CN=A918CC02/serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
Manifest number:          C1
Signing time:             Fri 19 Dec 2025 05:25:33 +0000
Manifest this update:     Fri 19 Dec 2025 05:25:32 +0000
Manifest next update:     Fri 26 Dec 2025 05:25:32 +0000
Files and hashes:         1: Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl (hash: dE1jPv6M6XDO6kkBLf45wZDnFMDg9kdyzMQiAwaxDaQ=)
                          2: 56C91968C5C011EFA167B30AC4F9AE02.roa (hash: J9k+zMXoD8kSp3VLIugeUbcSYnEVL5ZPLEXp2PR5qWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl
                          rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CC02, serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
        Validity
            Not Before: Dec 19 05:25:32 2025 GMT
            Not After : Dec 26 05:25:32 2025 GMT
        Subject: CN=6944e1cd-ef07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1d:4f:7a:ec:f7:f4:82:7c:c8:f9:8d:fc:83:
                    0b:b9:00:b0:3a:21:3b:8b:04:ba:94:6f:b4:bf:f4:
                    1d:1f:19:4a:1f:4b:00:19:a3:57:ce:80:0e:da:cf:
                    89:3a:a3:2b:8c:15:23:df:b2:f1:e1:a7:3b:e8:72:
                    4f:51:d9:56:0d:d3:1e:84:4d:e3:96:59:7c:b6:12:
                    a6:6f:2e:3e:b4:62:93:2b:ec:bc:cd:5d:d4:a3:fe:
                    53:1d:69:f3:e4:b2:ec:8c:51:85:70:05:2a:b3:bc:
                    b9:54:35:01:e6:bf:07:ba:f0:d3:15:86:f1:7a:b4:
                    ad:f0:ff:91:58:06:8c:f4:31:63:b5:f6:95:da:7c:
                    ca:eb:6f:4f:6d:00:c6:3c:fa:eb:9d:0e:48:87:c8:
                    48:ff:fa:31:3a:4a:1d:e8:31:78:5d:e5:24:e3:ae:
                    f8:5c:ef:18:c9:4e:37:4b:11:a0:9e:c5:6a:54:02:
                    ff:db:00:91:1f:4c:99:0c:5c:8b:37:88:81:5f:6b:
                    c1:49:f1:9e:4d:e6:de:5f:d1:24:2f:67:44:0f:38:
                    6c:39:3c:ba:4c:80:12:1d:50:fa:3c:3c:2d:23:7e:
                    7e:87:fb:31:6f:f2:87:73:ce:36:22:18:53:ab:05:
                    2a:44:d2:ce:a8:0c:30:e2:f6:0c:7f:50:64:e2:14:
                    99:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A5:5E:F8:3C:50:DE:F6:BF:A0:ED:30:34:09:0C:79:29:2E:6E:59
            X509v3 Authority Key Identifier:
                keyid:57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e9:d4:48:2b:6b:53:af:9a:70:a7:cd:10:82:48:2b:03:73:
         8d:c7:6d:3f:c4:da:ae:62:1e:2c:1b:99:b4:6f:46:04:f5:20:
         e3:42:1e:e9:89:66:ac:f4:13:2f:fa:a5:c6:00:fc:30:d3:86:
         53:cd:85:63:94:55:af:c3:4a:41:78:61:c4:65:a6:ed:27:42:
         97:ef:88:0b:e7:04:70:d7:2f:df:35:cf:43:c2:f3:4c:81:60:
         ba:e3:48:a5:15:7f:4c:6c:ff:98:08:9b:34:38:9b:26:60:7d:
         ea:bf:de:ca:34:a7:2a:37:ca:2b:78:46:bc:c7:c1:6c:0c:e6:
         28:2f:e1:57:5e:f0:aa:f2:31:8c:c1:e7:5f:22:ce:62:6b:dd:
         c4:42:ff:2d:e9:ea:c7:e9:db:f4:68:c4:d3:9d:48:0c:9f:06:
         64:d5:02:0f:2f:b9:07:3d:6e:1b:1c:7d:11:d6:ee:dc:34:2b:
         a3:a1:30:50:6b:1d:f8:ab:d8:09:1e:fe:fa:bf:44:24:34:69:
         cb:66:d0:09:1b:9b:65:d0:74:54:df:9a:0d:70:fc:16:69:bd:
         62:c7:57:d0:14:94:3a:b5:03:11:1e:e3:74:4a:a8:1f:58:f2:
         40:b7:23:52:29:93:fc:97:7b:06:81:38:d3:e1:db:9f:96:a7:
         0f:93:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:36:40 2025 by rpki-client