This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft
File:                     VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft (raw, json)
Hash identifier:          eE+3H4AZxUsf0N8PRTW/FIbfAZrnTb7j3FH4IvisXkM=
Subject key identifier:   D4:B6:57:D9:33:06:CA:06:73:C4:6E:9B:64:DD:6F:18:9C:1D:C7:CC
Authority key identifier: 54:90:93:D2:C1:61:74:9E:8C:6F:0E:88:56:27:54:10:89:A5:4D:C3
Certificate issuer:       /CN=A919F653/serialNumber=549093D2C161749E8C6F0E885627541089A54DC3
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft
Manifest number:          F1
Signing time:             Fri 19 Dec 2025 04:24:48 +0000
Manifest this update:     Fri 19 Dec 2025 04:24:48 +0000
Manifest next update:     Fri 26 Dec 2025 04:24:48 +0000
Files and hashes:         1: VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl (hash: gbtzzTBEKm6CuX5BVxouezCtKg7J5cGsr3XuRtToRoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl
                          rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F653, serialNumber=549093D2C161749E8C6F0E885627541089A54DC3
        Validity
            Not Before: Dec 19 04:24:48 2025 GMT
            Not After : Dec 26 04:24:48 2025 GMT
        Subject: CN=6944d390-acd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:cf:8c:6d:9e:d5:16:08:6a:3d:b4:a5:f9:
                    d3:15:0f:3e:61:c7:85:4f:1a:a5:f9:d2:43:e0:7f:
                    56:04:35:03:29:7a:7e:3a:92:35:68:fb:0d:60:e4:
                    2f:f5:ec:ef:ee:ff:12:ef:a8:7f:f0:ef:35:df:a7:
                    af:13:a6:97:25:fe:06:28:5d:fb:54:39:ab:73:cf:
                    50:ba:e7:9d:8c:15:f7:6f:1e:b7:e9:f2:97:7d:e1:
                    22:3f:20:3a:72:bc:a1:91:40:b7:70:df:b9:54:09:
                    fd:50:8f:30:c9:4b:43:f7:73:80:f6:78:c3:a9:e5:
                    2d:30:0a:c9:f4:7c:21:83:db:26:2c:f1:fe:14:9e:
                    ee:65:80:e6:f1:5c:78:85:b7:08:9f:08:94:a5:62:
                    02:d9:c4:01:9e:65:b7:e7:ee:af:b4:22:5f:89:ee:
                    dd:38:bd:98:26:57:89:a4:c3:2d:70:87:25:ae:87:
                    65:67:2f:50:9e:1a:dd:0a:4e:ee:6b:c7:90:12:92:
                    59:32:e3:32:ba:b2:c5:1e:a7:ee:29:46:52:4c:90:
                    dc:5b:07:79:9a:96:cc:43:c5:61:70:53:65:89:ee:
                    53:e8:de:30:58:bb:60:51:a1:c0:bc:fb:07:a8:7b:
                    32:1a:ed:1d:0f:31:0c:ac:28:77:e8:b8:d4:15:11:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B6:57:D9:33:06:CA:06:73:C4:6E:9B:64:DD:6F:18:9C:1D:C7:CC
            X509v3 Authority Key Identifier:
                keyid:54:90:93:D2:C1:61:74:9E:8C:6F:0E:88:56:27:54:10:89:A5:4D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a5:c1:31:47:7c:4f:fa:5b:46:77:0f:bc:19:16:dc:52:f9:
         cd:39:1e:03:bf:a6:91:3f:51:56:49:74:fe:f4:b0:86:ec:ae:
         5f:99:b1:c8:cb:04:f6:64:4e:99:41:7d:63:c0:e9:d4:86:20:
         68:9d:00:03:20:e3:07:5e:de:46:c9:f9:41:dd:a1:d0:cd:3d:
         ca:e2:6f:fa:b7:32:c1:71:d0:67:20:1e:37:a9:ab:a8:ff:30:
         c4:1b:71:68:9d:61:b5:ac:65:06:9d:c4:b2:e5:b1:19:44:24:
         71:d1:67:16:7e:0a:d0:e9:4f:b8:c5:6a:69:db:57:45:fa:70:
         b5:0d:b4:f5:51:ff:4d:f9:89:ed:9f:fd:a1:f9:9e:7f:d3:8a:
         32:68:3f:cb:ee:9d:9b:bb:fe:50:3c:e5:73:8c:1c:0c:4a:21:
         5f:95:1a:cd:86:b9:9f:94:b0:1c:48:8e:26:de:d1:25:08:f2:
         db:29:3b:35:91:c9:5b:45:63:0b:e2:1d:87:6d:95:e8:42:a7:
         6d:9b:30:e7:a5:1d:16:90:2d:79:9d:ef:15:46:44:9b:28:40:
         90:b0:7b:7d:08:1a:d4:1a:b9:bf:76:ca:36:23:4b:5c:ce:14:
         45:6f:93:eb:74:9a:c4:f8:34:c7:de:64:b1:3e:c9:cc:7f:4b:
         28:20:04:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY2NTMxMTAvBgNVBAUTKDU0OTA5M0QyQzE2MTc0OUU4QzZGMEU4ODU2Mjc1NDEw
ODlBNTREQzMwHhcNMjUxMjE5MDQyNDQ4WhcNMjUxMjI2MDQyNDQ4WjAYMRYwFAYD
VQQDDA02OTQ0ZDM5MC1hY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0YfPjG2e1RYIaj20pfnTFQ8+YceFTxql+dJD4H9WBDUDKXp+OpI1aPsNYOQv
9ezv7v8S76h/8O8136evE6aXJf4GKF37VDmrc89QuuedjBX3bx636fKXfeEiPyA6
cryhkUC3cN+5VAn9UI8wyUtD93OA9njDqeUtMArJ9Hwhg9smLPH+FJ7uZYDm8Vx4
hbcInwiUpWIC2cQBnmW35+6vtCJfie7dOL2YJleJpMMtcIclrodlZy9QnhrdCk7u
a8eQEpJZMuMyurLFHqfuKUZSTJDcWwd5mpbMQ8VhcFNlie5T6N4wWLtgUaHAvPsH
qHsyGu0dDzEMrCh36LjUFREB+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNS2V9kz
BsoGc8Rum2TdbxicHcfMMB8GA1UdIwQYMBaAFFSQk9LBYXSejG8OiFYnVBCJpU3D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjY1My8wRDk0NEI4NDZB
NjAxMUVGODMxRDE4NzhDNEY5QUUwMi9WSkNUMHNGaGRKNk1idzZJVmlkVUVJbWxU
Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZKQ1Qwc0ZoZEo2TWJ3NklWaWRVRUltbFRjTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjY1My8wRDk0NEI4NDZBNjAxMUVGODMxRDE4NzhDNEY5QUUwMi9WSkNUMHNGaGRK
Nk1idzZJVmlkVUVJbWxUY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxpcExR3xP+ltGdw+8GRbcUvnNOR4Dv6aRP1FWSXT+9LCG7K5fmbHI
ywT2ZE6ZQX1jwOnUhiBonQADIOMHXt5GyflB3aHQzT3K4m/6tzLBcdBnIB43qauo
/zDEG3FonWG1rGUGncSy5bEZRCRx0WcWfgrQ6U+4xWpp21dF+nC1DbT1Uf9N+Ynt
n/2h+Z5/04oyaD/L7p2bu/5QPOVzjBwMSiFflRrNhrmflLAcSI4m3tElCPLbKTs1
kclbRWML4h2HbZXoQqdtmzDnpR0WkC15ne8VRkSbKECQsHt9CBrUGrm/dso2I0tc
zhRFb5PrdJrE+DTH3mSxPsnMf0soIARY
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:00:26 2025 by rpki-client