This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
File:                     sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft (raw, json)
Hash identifier:          3WAt2aa9SF47S8b1gWBKWvqcXIped7GPmqBOLki0Ia4=
Subject key identifier:   60:ED:78:53:F9:5C:FD:34:DF:DF:26:C5:CB:9A:BD:CF:27:73:5E:AB
Authority key identifier: B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83
Certificate issuer:       /CN=A919C203/serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
Manifest number:          015B
Signing time:             Fri 19 Dec 2025 03:15:01 +0000
Manifest this update:     Fri 19 Dec 2025 03:15:01 +0000
Manifest next update:     Fri 26 Dec 2025 03:15:01 +0000
Files and hashes:         1: sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl (hash: bJ3XbMaGDyahoxpNlRVkKhSVt6RMxUqFt5PpOiqLvhw=)
                          2: 1B434E42C58811EEA2A7F049C4F9AE02.roa (hash: eHVAw6t0G0OOVunESIIPqhZXYkGjz7nn6NHSttJw5xM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl
                          rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C203, serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983
        Validity
            Not Before: Dec 19 03:15:01 2025 GMT
            Not After : Dec 26 03:15:01 2025 GMT
        Subject: CN=6944c335-5a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2b:ab:32:be:c1:a6:8d:be:47:22:2f:22:0f:
                    bf:b3:b6:95:1f:be:61:9d:30:28:3e:b1:1f:9c:2d:
                    a2:55:9e:87:a9:f1:7a:c1:1c:8e:51:38:5b:16:e6:
                    46:69:28:a6:be:2a:9c:24:bc:22:94:5e:b5:5d:b3:
                    ae:10:b8:47:6a:13:99:dd:1f:d8:f5:d9:5f:36:82:
                    c8:2a:3f:bd:f3:c8:e8:b0:e6:7c:db:3b:33:c3:30:
                    97:70:3b:a8:5c:aa:34:be:3e:08:ce:20:00:0f:7d:
                    45:ce:9b:42:73:a9:37:12:a8:86:73:88:ac:0b:b1:
                    d8:b6:e8:2a:a5:c5:25:e9:15:73:6f:8e:ee:c8:84:
                    4b:7e:06:4b:3a:19:08:a8:53:35:b6:6f:34:69:ff:
                    8b:2e:e1:44:68:87:42:37:b5:bc:77:65:ce:14:20:
                    df:4c:18:b1:05:81:5e:9d:19:e8:96:f9:6c:ff:20:
                    88:53:46:6d:e3:a8:36:62:df:fa:17:c8:f6:f9:5f:
                    d2:38:e3:6a:8d:63:e6:2f:a1:e8:eb:1f:bd:65:19:
                    ef:fd:11:79:6f:bf:22:00:ac:e4:07:75:e5:9d:c0:
                    82:47:67:5b:8b:e2:1c:05:3a:68:82:c3:bd:3f:ac:
                    3d:fb:1c:38:a4:a4:d5:c1:47:06:f9:5e:4c:d1:91:
                    ec:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:ED:78:53:F9:5C:FD:34:DF:DF:26:C5:CB:9A:BD:CF:27:73:5E:AB
            X509v3 Authority Key Identifier:
                keyid:B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:aa:46:50:3b:c3:31:91:9a:d4:a2:17:55:4a:04:e3:37:93:
         52:1f:92:ca:dc:80:01:a0:ef:38:f0:60:e9:9e:21:d2:df:29:
         96:d6:03:e7:e0:c9:bc:ac:b8:18:c7:f3:18:25:5f:e2:55:3e:
         ee:c7:3f:63:b6:5d:18:25:6c:2d:4e:0a:e0:45:a1:73:c9:d4:
         a7:a5:a8:cb:61:97:51:5d:76:80:2c:40:31:ff:68:91:bd:78:
         5a:33:b3:f4:9c:c8:73:d0:6e:36:90:25:05:01:c4:91:5b:b0:
         82:a2:2f:5d:0f:8f:e0:78:3b:79:48:62:9d:c6:c8:45:dd:08:
         01:d6:92:96:17:21:fe:dd:0d:a5:a5:fc:23:f0:0d:ab:fa:c3:
         cf:02:ca:6b:b9:fb:cb:e0:a2:73:f3:99:2b:f3:83:0c:d5:b9:
         44:1a:2f:cb:ab:61:aa:be:74:28:cf:a1:40:22:33:94:c4:f7:
         be:be:bb:89:73:0d:dd:5f:8a:9e:57:70:9f:f2:61:cc:30:2c:
         46:6d:ab:ce:78:a6:f3:cd:97:3f:73:1d:3b:b6:4f:96:11:29:
         ee:34:c2:52:79:c3:7f:db:e5:38:d9:63:f8:35:0c:76:63:38:
         11:eb:31:ca:ed:b3:61:05:5d:1e:b7:9f:0b:e5:b6:39:eb:17:
         03:a6:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:19 2025 by rpki-client