This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
File:                     VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json)
Hash identifier:          NcfJTmNCjUSOif2Q20YBt4HFZV6/zB7QZ38nqhX68fA=
Subject key identifier:   86:7B:73:FB:AC:A6:6F:C9:FC:5A:73:08:97:1D:A7:B3:66:81:41:53
Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8
Certificate issuer:       /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8
Certificate serial:       0CA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
Manifest number:          0C97
Signing time:             Wed 24 Dec 2025 18:04:50 +0000
Manifest this update:     Wed 24 Dec 2025 18:04:49 +0000
Manifest next update:     Wed 31 Dec 2025 18:04:49 +0000
Files and hashes:         1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: JzQ4Ylib1ytex9hlrhxTTjRvhyEASEaGUQ1+cEJYn+o=)
                          2: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: u6PjzNYcnOXcXRJn9HLyhk2+LGVsDog450i4Tie6o0k=)
                          3: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: sXqVXr7ZHzH2JmpUEnTy5shMtTPK9xhXC3ul6iYq9+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl
                          rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3239 (0xca7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8
        Validity
            Not Before: Dec 24 18:04:49 2025 GMT
            Not After : Dec 31 18:04:49 2025 GMT
        Subject: CN=694c2b42-25f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:08:ca:75:7a:77:b0:47:18:3d:53:43:55:
                    82:88:55:c7:27:a7:e2:57:fc:b1:78:16:e0:fe:98:
                    31:1a:7e:e6:7c:b4:34:89:5e:71:34:71:6f:a5:9e:
                    06:c2:52:cd:21:8c:a9:74:e5:12:d5:c0:76:31:63:
                    03:1c:16:3c:fd:1a:74:12:bd:d0:75:22:7c:3c:35:
                    05:0a:5f:1c:60:3a:25:f0:6e:82:70:1e:2d:e1:ac:
                    58:f3:1f:86:f3:bb:60:74:da:48:43:c4:98:8d:12:
                    fb:9f:f4:14:c0:56:52:7e:3d:d0:2a:39:dd:76:c7:
                    62:1e:5f:26:32:f8:69:b2:53:57:73:20:eb:d6:1b:
                    02:38:60:26:74:69:2f:dd:0c:a0:b5:0c:46:65:f3:
                    47:6c:01:8f:7d:6f:4d:0c:00:db:32:0b:05:3b:98:
                    d1:a4:19:21:44:99:94:3e:06:e9:6b:0c:31:82:e4:
                    80:8b:75:31:74:23:2a:49:f4:ca:f9:58:5a:c7:ba:
                    0b:67:7d:21:79:d9:d4:71:2b:18:fc:f6:51:48:c6:
                    d2:fb:54:54:ce:4c:81:ec:7d:9b:38:fb:89:d1:8f:
                    9e:ec:c2:8b:dd:b7:e9:73:0a:0e:46:72:2a:a5:ff:
                    91:61:ca:e9:48:ce:0a:6e:56:07:d8:e2:ab:fa:4a:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7B:73:FB:AC:A6:6F:C9:FC:5A:73:08:97:1D:A7:B3:66:81:41:53
            X509v3 Authority Key Identifier:
                keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:cf:7a:1c:df:77:55:1f:74:75:9a:8a:14:19:37:1b:06:54:
         30:82:7d:8d:9d:19:f2:2b:ca:c2:b3:31:1e:87:26:7b:bd:40:
         0d:80:f9:4e:ae:d1:08:97:57:69:96:21:13:5c:aa:01:e5:19:
         32:92:dc:5e:d4:af:07:2a:89:1d:f3:ad:ff:31:a4:1a:84:e6:
         8e:61:3e:22:1e:4f:82:c1:0f:31:31:cc:da:7c:5e:99:97:7d:
         96:92:4b:60:e8:b7:50:d1:16:f2:5d:2a:b8:f1:fc:3a:a5:b8:
         cd:e7:ae:cb:fa:2e:c2:6b:84:9d:6b:73:a9:3c:67:54:c4:75:
         e5:9b:27:0a:69:3d:cb:95:2b:8a:1c:e6:3a:77:03:df:06:e8:
         bd:9c:05:5a:e7:da:43:d5:8e:3b:6c:d1:8b:27:ea:8d:af:d9:
         13:40:94:d5:27:67:7b:49:02:1a:f2:ce:1e:e4:c9:d4:cb:8e:
         2e:05:f7:83:01:29:25:4a:30:5d:55:54:c9:e1:49:75:29:29:
         80:2a:8c:84:70:e2:d3:9c:14:ff:ff:ce:df:c8:c3:d4:f1:7e:
         3e:13:9a:87:21:13:77:dd:73:6f:8b:ee:aa:7b:eb:b5:1d:dd:
         80:e5:5d:f6:23:86:4b:37:69:68:21:7a:75:41:e1:7f:56:c4:
         1d:67:5e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:31:34 2025 by rpki-client