This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
File:                     vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json)
Hash identifier:          WvYnshd7+QSP80nJ95bFNdxX+P7ClfSX6ae096lvm1Q=
Subject key identifier:   AA:82:F0:DA:2E:21:66:C4:1B:E5:85:FB:E7:58:A6:4A:59:24:EE:E8
Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B
Certificate issuer:       /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B
Certificate serial:       06FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
Manifest number:          06F6
Signing time:             Thu 18 Dec 2025 21:21:19 +0000
Manifest this update:     Thu 18 Dec 2025 21:21:18 +0000
Manifest next update:     Thu 25 Dec 2025 21:21:18 +0000
Files and hashes:         1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: Yg8Ww5zO8sBUXn1JucyXQY5OoOQCgxWrXVfUOHDApOo=)
                          2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: I+eEa2BCG1ocgDoHBOIM7GqSJBtmqFy6z+9Rb7P5WKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl
                          rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B
        Validity
            Not Before: Dec 18 21:21:18 2025 GMT
            Not After : Dec 25 21:21:18 2025 GMT
        Subject: CN=6944704f-99e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:4c:02:d2:9e:99:ac:95:ba:22:26:57:2b:
                    2f:f1:f2:72:29:06:df:5c:18:cb:38:c7:52:31:df:
                    ea:db:b6:93:9c:a8:fe:96:31:eb:ba:50:ae:da:8d:
                    ab:86:9d:c1:1d:01:74:ff:f8:53:c2:ab:f5:56:cf:
                    8d:6b:88:df:24:47:3e:65:0d:64:d0:5e:c6:18:95:
                    80:a8:70:15:08:ae:5c:d3:bf:ca:1c:bb:83:2d:90:
                    14:f1:7e:44:ee:75:5b:c0:91:01:5e:ff:0d:33:d8:
                    e6:88:4f:df:cd:bd:02:d0:7a:5e:01:81:58:60:ea:
                    5c:1f:eb:04:f6:6c:1e:6e:85:c4:ae:55:cc:42:ac:
                    c7:db:3d:a2:67:7d:d1:53:96:e1:53:1e:e7:21:e7:
                    d5:51:a3:ef:01:69:13:2a:71:61:c2:da:df:e6:ad:
                    6b:86:1e:4a:9a:b1:58:41:15:e7:fe:d7:42:e4:25:
                    af:49:60:66:19:4a:b0:5b:be:2d:79:a8:5d:c6:9f:
                    12:44:69:ea:55:8f:fd:5a:5e:14:4b:be:87:7c:52:
                    c7:3c:82:5d:b4:96:d3:12:4c:3e:f5:5c:86:fb:43:
                    43:f4:e0:62:71:70:33:04:49:23:f9:00:22:46:0c:
                    ef:db:a9:60:22:fe:fa:97:08:0f:d9:6c:11:cb:a4:
                    b3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:82:F0:DA:2E:21:66:C4:1B:E5:85:FB:E7:58:A6:4A:59:24:EE:E8
            X509v3 Authority Key Identifier:
                keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:94:fe:0b:6a:a2:09:4c:40:9d:79:7b:f9:35:6f:f8:83:3b:
         04:de:20:9d:04:ca:5b:c9:5f:00:f5:4f:60:a4:fc:40:10:0a:
         8c:b8:57:da:fd:67:1a:d4:82:ac:5e:90:64:42:0d:f6:7e:d5:
         9d:96:2f:2f:6a:90:33:cc:89:5d:22:54:73:05:40:5b:c0:c1:
         c6:a4:49:44:41:81:27:f5:9a:93:08:3e:07:6f:cd:09:ea:5c:
         9f:be:21:c3:3e:cc:73:94:0c:d3:bd:6d:df:db:63:cc:97:be:
         f1:17:9b:9e:c5:0a:ef:1e:ef:b0:e9:78:72:73:a9:b1:b6:01:
         d0:b0:04:c4:8f:57:44:bf:18:9e:f2:b9:59:c1:63:08:2a:16:
         0b:40:82:9e:36:7d:27:0a:b3:1f:86:21:aa:1c:8d:e5:f6:4a:
         e5:17:cb:c7:72:5e:46:06:9c:09:89:de:91:8f:d1:f1:7a:14:
         dd:cf:2a:6d:ba:17:e6:f9:4d:46:fe:9b:66:92:8e:92:9f:14:
         f5:a9:d2:0c:a7:c8:9f:05:5b:1f:6f:ef:29:90:a7:68:1c:88:
         db:e2:a0:b5:7b:e0:7d:a5:5e:77:ff:a8:07:5f:e7:b6:b9:42:
         ac:65:1a:9f:70:80:e5:ce:46:83:15:ec:19:8d:89:51:c3:2d:
         24:a4:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:19 2025 by rpki-client