This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
File:                     vv---O_FAnw03_cEx5-ygSpxMx4.mft (raw, json)
Hash identifier:          XTe8ndtMjPab3LhLjNUSS2Go7+u0iidtBotcG8oA/dE=
Subject key identifier:   5C:66:92:1B:0E:37:AE:F9:73:98:63:E9:8D:C0:71:52:F7:53:9B:8D
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Certificate issuer:       /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial:       01AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
Manifest number:          0195
Signing time:             Mon 29 Dec 2025 02:57:43 +0000
Manifest this update:     Mon 29 Dec 2025 02:57:43 +0000
Manifest next update:     Mon 05 Jan 2026 02:57:43 +0000
Files and hashes:         1: vv---O_FAnw03_cEx5-ygSpxMx4.crl (hash: A3wbV035aumf0sqSjKhG27RfJlptv0G3lfOE/zGbp6o=)
                          2: A17BA30CA6D111F08493B238C4F9AE02.roa (hash: R6Wh09KVezBOlWQFZnxiJwo0eP+rAmGW4XX5Y3hH8zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 02:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
        Validity
            Not Before: Dec 29 02:57:43 2025 GMT
            Not After : Jan  5 02:57:43 2026 GMT
        Subject: CN=6951ee27-e122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d5:05:a8:50:64:09:e9:a8:08:87:d8:de:91:
                    6a:7d:d0:16:e9:a7:86:09:a3:3b:ce:7a:3a:e3:23:
                    15:20:58:10:e4:70:ac:17:fa:02:48:5f:bf:21:14:
                    93:d3:b2:f0:5f:3a:08:5d:f5:d8:45:39:04:13:77:
                    3a:15:a0:82:98:49:84:48:4d:92:0f:a0:79:f4:ab:
                    d3:86:1e:2b:da:c9:35:7d:64:37:bb:b6:5e:46:24:
                    52:d6:87:27:9a:6f:61:da:6c:23:83:2c:2f:ab:1b:
                    c1:2a:f7:15:d7:5d:88:54:94:40:41:d7:ab:d3:6d:
                    15:c5:fb:f1:02:9c:ab:2a:a9:7c:d2:ea:e7:c3:60:
                    41:f7:86:0e:21:d6:f3:28:af:9f:9f:0b:9b:b4:00:
                    13:8b:ac:77:a6:d5:48:ce:58:4a:82:9c:d2:bb:85:
                    64:0d:fe:e4:28:fd:13:25:8b:48:6a:28:ef:ff:44:
                    1e:b9:c7:cb:2b:77:b5:d5:35:8c:5e:6b:4e:49:09:
                    b8:ec:86:86:17:3f:c6:42:6d:0f:e3:26:4f:b1:8f:
                    ad:03:7b:63:35:6a:fa:29:2d:7b:89:46:0c:64:9f:
                    0c:8b:72:fc:c5:c6:d1:70:7e:a9:2a:4c:8d:36:b6:
                    fd:6c:5a:4e:6e:f9:86:10:0f:8a:e7:1f:2e:bf:88:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:66:92:1B:0E:37:AE:F9:73:98:63:E9:8D:C0:71:52:F7:53:9B:8D
            X509v3 Authority Key Identifier:
                keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:7e:52:85:bd:46:dd:02:8e:07:e9:93:d8:49:3f:14:f1:
         d0:5a:55:de:ca:7e:cd:fa:84:2f:41:b4:53:ad:18:8e:ea:7c:
         b8:8c:93:29:dd:0f:08:a7:f1:75:ae:47:4d:2e:1c:4e:da:2e:
         f7:ab:a3:15:ab:95:33:cf:ec:5e:19:e8:70:3a:1f:f0:36:53:
         65:1c:e9:cd:c3:a6:96:e7:02:6a:1e:d5:0f:75:9d:8b:82:d9:
         e6:eb:79:a5:aa:7d:21:c5:43:57:4c:b4:b4:3f:c1:33:33:26:
         d7:a1:7f:49:3b:5b:69:ac:2b:98:36:a3:6a:5f:ec:11:52:f9:
         7c:f2:1d:7b:03:27:80:37:c7:0f:e9:b2:bc:fc:63:e0:00:05:
         49:12:46:3d:b5:f8:e6:89:93:58:6a:b7:a2:d4:e9:ee:10:fc:
         cd:e9:d2:f2:24:58:99:79:3f:cc:3c:76:d9:88:1b:ce:6a:ae:
         18:f7:67:b1:54:19:f9:e5:11:7b:d8:cd:3a:5d:23:91:68:a4:
         75:8f:e1:0e:7d:03:9c:19:21:27:93:32:fb:38:1e:5c:ef:3b:
         ee:7c:cf:5d:ec:2f:7a:21:89:49:de:7d:70:43:77:45:63:98:
         4c:30:d6:5f:ca:bd:90:0f:82:0f:75:90:8e:8c:b6:07:1f:cd:
         09:f5:ed:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMzkxMTAvBgNVBAUTKEJFRkZCRUY4RUZDNTAyN0MzNERGRjcwNEM3OUZCMjgx
MkE3MTMzMUUwHhcNMjUxMjI5MDI1NzQzWhcNMjYwMTA1MDI1NzQzWjAYMRYwFAYD
VQQDDA02OTUxZWUyNy1lMTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1tUFqFBkCemoCIfY3pFqfdAW6aeGCaM7zno64yMVIFgQ5HCsF/oCSF+/IRST
07LwXzoIXfXYRTkEE3c6FaCCmEmESE2SD6B59KvThh4r2sk1fWQ3u7ZeRiRS1ocn
mm9h2mwjgywvqxvBKvcV112IVJRAQder020VxfvxApyrKql80urnw2BB94YOIdbz
KK+fnwubtAATi6x3ptVIzlhKgpzSu4VkDf7kKP0TJYtIaijv/0QeucfLK3e11TWM
XmtOSQm47IaGFz/GQm0P4yZPsY+tA3tjNWr6KS17iUYMZJ8Mi3L8xcbRcH6pKkyN
Nrb9bFpObvmGEA+K5x8uv4iJLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxmkhsO
N675c5hj6Y3AcVL3U5uNMB8GA1UdIwQYMBaAFL7/vvjvxQJ8NN/3BMefsoEqcTMe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS85NTA3NEEwQUFG
NTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFudzAzX2NFeDUteWdTcHhN
eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z2LS0tT19GQW53MDNfY0V4NS15Z1NweE14NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEIzOS85NTA3NEEwQUFGNTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFu
dzAzX2NFeDUteWdTcHhNeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZ+35Shb1G3QKOB+mT2Ek/FPHQWlXeyn7N+oQvQbRTrRiO6ny4jJMp
3Q8Ip/F1rkdNLhxO2i73q6MVq5Uzz+xeGehwOh/wNlNlHOnNw6aW5wJqHtUPdZ2L
gtnm63mlqn0hxUNXTLS0P8EzMybXoX9JO1tprCuYNqNqX+wRUvl88h17AyeAN8cP
6bK8/GPgAAVJEkY9tfjmiZNYarei1OnuEPzN6dLyJFiZeT/MPHbZiBvOaq4Y92ex
VBn55RF72M06XSORaKR1j+EOfQOcGSEnkzL7OB5c7zvufM9d7C96IYlJ3n1wQ3dF
Y5hMMNZfyr2QD4IPdZCOjLYHH80J9e0Z
-----END CERTIFICATE-----
Generated at Tue Dec 30 08:50:32 2025 by rpki-client