This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
File:                     T_VN6rrUlFWSUQEqpawiKVDLJh4.mft (raw, json)
Hash identifier:          A/ut2qe695u+AL/zCKldEA+Lwb5hDidDFT2cI3Pnh/s=
Subject key identifier:   E3:D1:B4:98:30:34:53:FA:58:E9:30:CA:6B:47:52:8C:F8:9C:7F:32
Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E
Certificate issuer:       /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
Manifest number:          92
Signing time:             Sat 27 Dec 2025 05:21:57 +0000
Manifest this update:     Sat 27 Dec 2025 05:21:57 +0000
Manifest next update:     Sat 03 Jan 2026 05:21:57 +0000
Files and hashes:         1: T_VN6rrUlFWSUQEqpawiKVDLJh4.crl (hash: KdKDZkOMWDnSmC2JMcriW26/kjyBNhcvATgmRZoMhkM=)
                          2: B66603C6025C11F0BDF41912C4F9AE02.roa (hash: H2+Ddkh87XoYI/8vzCTZnxyRNxL5o9son0tiMIrsX2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl
                          rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 05:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B38F5, serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
        Validity
            Not Before: Dec 27 05:21:57 2025 GMT
            Not After : Jan  3 05:21:57 2026 GMT
        Subject: CN=694f6cf5-1672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e0:74:c3:a0:96:6f:75:62:fd:42:6c:c3:94:
                    c3:76:36:1b:04:a5:17:b9:cc:75:8f:83:85:49:3d:
                    fe:83:c2:eb:89:36:f8:50:a2:37:5a:f6:2d:45:d2:
                    62:66:b3:78:ae:fc:fc:74:45:43:71:68:39:a5:21:
                    3a:30:6a:61:ae:3e:0f:6e:64:dd:51:06:b9:be:86:
                    c4:e5:d2:83:44:55:6e:60:f7:5a:5e:c7:43:b1:21:
                    bd:1d:02:ca:0a:fc:87:bb:d4:09:01:7d:37:00:74:
                    9c:27:9e:bf:61:5b:20:0e:b3:f9:63:e8:14:0a:ca:
                    1c:cd:ce:20:38:ec:2e:ba:b0:37:e1:81:14:6b:c0:
                    c3:f3:63:6d:c8:13:52:61:86:ae:1a:2c:d2:4a:bb:
                    01:82:78:23:07:74:1e:12:c0:e5:a0:57:58:61:6e:
                    63:57:05:e1:90:fc:7f:39:21:34:da:f1:a8:e9:b3:
                    44:ee:b5:47:28:6e:df:cc:8e:34:65:90:30:5f:05:
                    61:9e:23:16:5a:f4:74:07:3f:7c:c7:b5:ee:94:52:
                    de:77:26:b2:79:3d:bf:d5:f3:d1:5b:76:0c:d5:f4:
                    b4:40:5a:d2:07:1a:fc:a9:40:0a:54:ba:4e:e8:b4:
                    53:bc:b1:1e:1c:17:ea:86:6e:ad:91:6d:c3:c8:bf:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D1:B4:98:30:34:53:FA:58:E9:30:CA:6B:47:52:8C:F8:9C:7F:32
            X509v3 Authority Key Identifier:
                keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:21:fa:1c:fa:28:12:6a:81:3c:8b:1a:ce:aa:76:65:25:90:
         9a:d2:1d:26:c9:10:22:a9:c6:be:91:a9:bc:6c:8e:15:3d:74:
         9d:d2:6f:58:fa:21:c7:eb:67:aa:0e:e6:e4:9f:cc:20:b8:a1:
         7b:3d:9f:2b:e4:32:9d:7f:2f:ad:19:b1:0c:e7:db:31:fb:86:
         07:5e:62:73:cc:5b:89:cb:19:47:20:0b:95:e8:03:fb:5b:9e:
         87:10:67:98:e1:9a:62:b2:e2:69:a7:2c:b9:29:24:09:96:e2:
         cc:82:f0:17:03:44:7f:0c:50:e7:df:1b:ef:ef:b0:48:e4:44:
         5c:54:f9:85:3f:dc:fa:d1:71:c8:42:75:8e:54:ac:eb:33:7d:
         9d:dd:01:3b:fb:83:30:48:09:b9:00:46:2d:6b:99:a5:15:8e:
         2d:02:af:a2:e0:7e:b0:a9:39:ee:ce:33:9c:61:fb:c7:c0:72:
         f5:3b:0e:af:78:37:b9:c5:58:d2:12:76:3d:d5:f6:f3:08:4d:
         84:ac:bf:f3:9e:e2:70:4e:ee:f9:d3:ac:9b:9a:bb:b7:ae:f9:
         92:14:0d:11:92:56:93:77:7e:9e:78:50:a0:49:d4:da:9e:af:
         f5:68:a0:99:e5:b1:20:7b:49:db:e1:f9:66:f4:c4:1f:1f:93:
         c9:ee:e1:38
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM4RjUxMTAvBgNVBAUTKDRGRjU0REVBQkFENDk0NTU5MjUxMDEyQUE1QUMyMjI5
NTBDQjI2MUUwHhcNMjUxMjI3MDUyMTU3WhcNMjYwMTAzMDUyMTU3WjAYMRYwFAYD
VQQDDA02OTRmNmNmNS0xNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7OB0w6CWb3Vi/UJsw5TDdjYbBKUXucx1j4OFST3+g8LriTb4UKI3WvYtRdJi
ZrN4rvz8dEVDcWg5pSE6MGphrj4PbmTdUQa5vobE5dKDRFVuYPdaXsdDsSG9HQLK
CvyHu9QJAX03AHScJ56/YVsgDrP5Y+gUCsoczc4gOOwuurA34YEUa8DD82NtyBNS
YYauGizSSrsBgngjB3QeEsDloFdYYW5jVwXhkPx/OSE02vGo6bNE7rVHKG7fzI40
ZZAwXwVhniMWWvR0Bz98x7XulFLedyayeT2/1fPRW3YM1fS0QFrSBxr8qUAKVLpO
6LRTvLEeHBfqhm6tkW3DyL+XOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPRtJgw
NFP6WOkwymtHUoz4nH8yMB8GA1UdIwQYMBaAFE/1Teq61JRVklEBKqWsIilQyyYe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzhGNS9GMDI2M0ZGMDAy
NUIxMUYwOUFDRkQ5MTBDNEY5QUUwMi9UX1ZONnJyVWxGV1NVUUVxcGF3aUtWRExK
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RfVk42cnJVbEZXU1VRRXFwYXdpS1ZETEpoNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzhGNS9GMDI2M0ZGMDAyNUIxMUYwOUFDRkQ5MTBDNEY5QUUwMi9UX1ZONnJyVWxG
V1NVUUVxcGF3aUtWRExKaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdIfoc+igSaoE8ixrOqnZlJZCa0h0myRAiqca+kam8bI4VPXSd0m9Y
+iHH62eqDubkn8wguKF7PZ8r5DKdfy+tGbEM59sx+4YHXmJzzFuJyxlHIAuV6AP7
W56HEGeY4ZpisuJppyy5KSQJluLMgvAXA0R/DFDn3xvv77BI5ERcVPmFP9z60XHI
QnWOVKzrM32d3QE7+4MwSAm5AEYta5mlFY4tAq+i4H6wqTnuzjOcYfvHwHL1Ow6v
eDe5xVjSEnY91fbzCE2ErL/znuJwTu7506ybmru3rvmSFA0RklaTd36eeFCgSdTa
nq/1aKCZ5bEge0nb4flm9MQfH5PJ7uE4
-----END CERTIFICATE-----
Generated at Mon Dec 29 01:52:12 2025 by rpki-client