This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
File:                     vAWTxH2s9senekHgfeuaBhYxpIQ.mft (raw, json)
Hash identifier:          ju/0xx1NZns+TqdZ6Rmxy8x4viXMWlh0XhrSTR4eBWc=
Subject key identifier:   D6:0C:B7:39:04:C6:C1:04:FA:76:9E:C6:8F:2B:15:A7:A2:6F:62:0D
Authority key identifier: BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84
Certificate issuer:       /CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
Manifest number:          0117
Signing time:             Mon 29 Dec 2025 03:55:34 +0000
Manifest this update:     Mon 29 Dec 2025 03:55:34 +0000
Manifest next update:     Mon 05 Jan 2026 03:55:34 +0000
Files and hashes:         1: vAWTxH2s9senekHgfeuaBhYxpIQ.crl (hash: N+uBhMmCzNv2hTMk/biiiwcD8lvARXtU38uO4qp7sLU=)
                          2: 0D5C00AC38E311EF99F62432C4F9AE02.roa (hash: xQMEY6P6f4jmqeDgv/TImb1ka64GtPCQvQqQLQx2M8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 03:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B40, serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
        Validity
            Not Before: Dec 29 03:55:34 2025 GMT
            Not After : Jan  5 03:55:34 2026 GMT
        Subject: CN=6951fbb6-c457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:12:8b:e9:c5:50:f4:17:3f:6b:28:ef:af:
                    2e:e4:7f:df:e5:ee:d8:ff:07:c5:ff:f8:27:e2:3a:
                    36:0d:c7:9e:7a:c7:54:ce:6f:89:c4:d7:8b:80:d8:
                    f2:75:b8:50:f1:1a:92:4e:50:af:50:bc:c1:1b:7f:
                    28:de:60:56:02:ad:04:67:be:87:61:95:6d:04:fa:
                    29:f8:aa:34:2b:57:96:f8:46:1f:c9:bd:22:50:d6:
                    68:0b:6e:12:e7:ee:c8:2c:7d:ff:85:54:c2:93:2f:
                    a3:88:c1:b2:7c:77:60:d9:3c:29:56:ae:6f:74:a8:
                    f1:88:98:52:c7:eb:b8:fc:48:56:97:a2:d9:9b:39:
                    12:cf:01:51:0a:65:a3:a7:45:cf:c5:81:f5:82:25:
                    7e:79:5a:d9:51:22:05:fe:f6:08:6b:52:7e:6d:be:
                    12:ab:9d:57:a0:08:95:b7:d7:88:00:4b:be:ad:b2:
                    e5:a1:53:e9:7d:c0:77:f8:5a:f1:0d:d1:93:54:01:
                    ee:3c:b2:b4:b7:5d:b2:3f:9f:9c:14:ab:af:5f:b7:
                    e2:91:3f:51:67:54:b2:e7:ef:29:99:25:9e:3d:b1:
                    5f:1b:d0:2e:c2:29:ef:51:af:56:ea:2f:07:f8:1a:
                    d1:b7:12:f9:f8:15:0d:78:d3:25:aa:4e:3e:c4:22:
                    59:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0C:B7:39:04:C6:C1:04:FA:76:9E:C6:8F:2B:15:A7:A2:6F:62:0D
            X509v3 Authority Key Identifier:
                keyid:BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f8:8a:39:8c:ce:fc:91:10:ca:87:3f:c6:96:69:22:20:2f:
         a6:b2:05:0c:4e:35:7f:c4:ff:83:0a:3c:05:aa:e7:10:6e:da:
         e7:f7:12:e1:f1:d7:ff:07:56:c7:95:56:33:00:3c:e9:09:59:
         b2:85:bb:ac:2a:61:9c:a8:ee:ee:bc:f1:16:cc:e2:cf:fe:2d:
         4a:8b:6b:24:5f:28:e6:3e:56:66:7c:35:d7:b9:5f:63:93:d4:
         24:b5:3a:85:5e:72:1d:df:3a:df:47:6d:ae:34:ec:12:70:54:
         cd:cc:4c:dd:a3:96:75:11:67:6e:07:e2:db:36:d3:8c:1a:7c:
         06:14:6e:64:24:a3:ce:34:cc:77:d7:2a:2b:e3:c6:c7:cb:47:
         a8:b7:77:49:90:87:7d:26:62:8b:76:8e:63:18:44:8a:9f:6a:
         e5:88:2f:41:06:37:c5:29:2c:af:79:5e:50:ee:ad:c4:44:ec:
         76:66:1b:3c:33:b3:6d:63:23:ef:b9:74:ac:14:a6:48:8c:38:
         b1:68:c2:bf:59:b3:7e:98:b5:db:52:99:54:a9:7b:a6:34:f9:
         b0:23:db:73:5c:24:41:e2:0c:3a:f6:9e:07:96:8e:eb:19:59:
         a8:c4:87:3d:ee:67:1d:41:04:32:cb:3f:35:66:f6:29:dc:d5:
         7c:d2:20:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBCNDAxMTAvBgNVBAUTKEJDMDU5M0M0N0RBQ0Y2QzdBNzdBNDFFMDdERUI5QTA2
MTYzMUE0ODQwHhcNMjUxMjI5MDM1NTM0WhcNMjYwMTA1MDM1NTM0WjAYMRYwFAYD
VQQDDA02OTUxZmJiNi1jNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs3oSi+nFUPQXP2so768u5H/f5e7Y/wfF//gn4jo2DceeesdUzm+JxNeLgNjy
dbhQ8RqSTlCvULzBG38o3mBWAq0EZ76HYZVtBPop+Ko0K1eW+EYfyb0iUNZoC24S
5+7ILH3/hVTCky+jiMGyfHdg2TwpVq5vdKjxiJhSx+u4/EhWl6LZmzkSzwFRCmWj
p0XPxYH1giV+eVrZUSIF/vYIa1J+bb4Sq51XoAiVt9eIAEu+rbLloVPpfcB3+Frx
DdGTVAHuPLK0t12yP5+cFKuvX7fikT9RZ1Sy5+8pmSWePbFfG9AuwinvUa9W6i8H
+BrRtxL5+BUNeNMlqk4+xCJZ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYMtzkE
xsEE+naexo8rFaeib2INMB8GA1UdIwQYMBaAFLwFk8R9rPbHp3pB4H3rmgYWMaSE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8yODQwQzhBNjM4
RTAxMUVGOTRCODREN0ZDNEY5QUUwMi92QVdUeEgyczlzZW5la0hnZmV1YUJoWXhw
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZBV1R4SDJzOXNlbmVrSGdmZXVhQmhZeHBJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEI0MC8yODQwQzhBNjM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi92QVdUeEgyczlz
ZW5la0hnZmV1YUJoWXhwSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQ+Io5jM78kRDKhz/GlmkiIC+msgUMTjV/xP+DCjwFqucQbtrn9xLh
8df/B1bHlVYzADzpCVmyhbusKmGcqO7uvPEWzOLP/i1Ki2skXyjmPlZmfDXXuV9j
k9QktTqFXnId3zrfR22uNOwScFTNzEzdo5Z1EWduB+LbNtOMGnwGFG5kJKPONMx3
1yor48bHy0eot3dJkId9JmKLdo5jGESKn2rliC9BBjfFKSyveV5Q7q3EROx2Zhs8
M7NtYyPvuXSsFKZIjDixaMK/WbN+mLXbUplUqXumNPmwI9tzXCRB4gw69p4Hlo7r
GVmoxIc97mcdQQQyyz81ZvYp3NV80iBf
-----END CERTIFICATE-----
Generated at Tue Dec 30 00:21:24 2025 by rpki-client