This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
File:                     VIQw6riOTjePtQBa-uXKucAAeho.mft (raw, json)
Hash identifier:          XqDvRLPXA4vhidDTSFXpnVib7q33dU0EUjEZLy892Ek=
Subject key identifier:   51:1F:75:2C:B4:60:4D:F8:39:DD:3B:D3:97:0C:AB:1E:DA:8C:E9:0A
Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
Certificate issuer:       /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
Manifest number:          F7
Signing time:             Sun 21 Dec 2025 04:44:19 +0000
Manifest this update:     Sun 21 Dec 2025 04:44:18 +0000
Manifest next update:     Sun 28 Dec 2025 04:44:18 +0000
Files and hashes:         1: VIQw6riOTjePtQBa-uXKucAAeho.crl (hash: IU3VFbG0aE7uyN7DEpBDdrgBOWbiVkJXZsQ7g1k2Zsk=)
                          2: B91F8BF69EE211EF883C7D14C4F9AE02.roa (hash: piN7tZYvn6wFuBqFyk+X4cGgvKRTrSBE/m37vdIF7QY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818, serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
        Validity
            Not Before: Dec 21 04:44:18 2025 GMT
            Not After : Dec 28 04:44:18 2025 GMT
        Subject: CN=69477b23-50b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:c2:89:3f:c0:07:ef:90:4f:48:2a:d7:67:
                    a1:8d:96:a7:78:c2:b2:61:cb:ce:3b:35:b0:8e:90:
                    22:8d:ed:44:5d:23:99:c1:f3:86:a6:53:fb:f4:9e:
                    79:7c:63:1e:a6:52:52:10:26:e4:13:2d:d3:b7:ab:
                    c2:d3:13:c2:df:46:af:92:8e:8f:c3:32:ba:77:67:
                    74:07:80:49:3b:fe:c0:93:c8:95:0a:8b:62:38:ba:
                    0c:c9:d1:ac:47:7e:2a:b6:37:46:57:1d:da:55:ea:
                    a1:2f:16:37:49:02:2b:7c:f9:a8:4c:2f:ef:9a:bb:
                    cf:b5:b7:a6:33:56:d4:f6:3b:0d:07:19:9d:57:c2:
                    0a:f6:e8:09:98:e7:1e:05:ef:54:8a:de:94:1b:e7:
                    19:6d:bc:b1:ee:fa:c6:24:e2:a2:5c:9f:27:ef:fd:
                    6a:74:13:56:7b:4c:ed:b3:1c:18:68:be:39:f0:53:
                    e5:08:94:7d:26:e5:4f:ec:28:27:d7:05:de:81:53:
                    f7:ab:47:c3:44:32:c5:19:6d:e9:c7:e9:79:3b:d1:
                    2d:0b:9c:bb:68:52:4c:cb:a1:01:8a:3b:85:e1:32:
                    85:87:42:49:c5:30:3a:88:1a:a1:b8:78:59:1e:cd:
                    26:74:0c:0b:0e:8e:4f:b1:cf:47:fd:fb:c0:f3:ca:
                    91:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:75:2C:B4:60:4D:F8:39:DD:3B:D3:97:0C:AB:1E:DA:8C:E9:0A
            X509v3 Authority Key Identifier:
                keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5a:ec:e5:eb:14:9e:8d:5c:5f:c2:5e:8c:f8:b9:80:a6:e7:
         69:fc:07:98:3c:60:c0:a8:78:5d:94:fa:85:8f:ee:1e:f5:cf:
         97:f6:6a:62:92:25:3a:62:d0:2a:3a:0a:a3:a5:28:42:b9:d4:
         92:f3:51:78:10:f9:6e:6c:3d:5a:8d:46:68:d6:4e:70:29:2c:
         c2:eb:e5:fc:f9:a6:63:d6:9d:3f:d4:32:83:0b:e3:c0:ef:a9:
         69:29:9a:ba:68:58:b3:31:08:06:5c:fc:43:6f:ee:8f:bd:6f:
         00:65:19:87:ba:84:e2:80:03:68:0a:a5:22:90:7a:2c:83:25:
         fa:17:65:6f:fe:f2:67:36:68:b5:cb:2c:b4:fa:e0:a7:c8:21:
         a9:c4:12:c2:a4:8c:16:4d:15:4d:cd:8b:df:3c:6f:30:de:ba:
         c0:31:fa:23:f7:6e:c1:06:ec:68:2b:a4:b5:d5:d6:32:91:7d:
         76:0e:07:e8:56:36:70:0e:09:90:74:70:1c:a3:a6:42:d8:8d:
         7f:82:09:f1:9a:d7:ed:e3:10:ad:c5:7e:d9:e6:d6:0b:06:59:
         2b:96:7c:b9:ec:00:7e:e1:bb:dc:9b:ba:13:b5:07:d1:67:76:
         3c:f2:e8:00:3e:1c:7c:fe:f9:a8:9a:e4:a4:95:64:19:b4:24:
         48:85:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:14:30 2025 by rpki-client