This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
File:                     vAWTxH2s9senekHgfeuaBhYxpIQ.mft (raw, json)
Hash identifier:          I0BWfRZXMj1VhYd7TPiKVQ7O1NWjt0fRtqoSU7BB6no=
Subject key identifier:   58:F2:8B:05:C6:A6:DD:62:21:F1:F0:FA:83:F4:CF:A2:8F:F4:72:46
Authority key identifier: BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84
Certificate issuer:       /CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
Manifest number:          0113
Signing time:             Sun 21 Dec 2025 04:02:07 +0000
Manifest this update:     Sun 21 Dec 2025 04:02:06 +0000
Manifest next update:     Sun 28 Dec 2025 04:02:06 +0000
Files and hashes:         1: vAWTxH2s9senekHgfeuaBhYxpIQ.crl (hash: u5h6R9q6lm/43BrAn0u1/iptFROer9nXPh8PWHQ1b0M=)
                          2: 0D5C00AC38E311EF99F62432C4F9AE02.roa (hash: xQMEY6P6f4jmqeDgv/TImb1ka64GtPCQvQqQLQx2M8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B40, serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
        Validity
            Not Before: Dec 21 04:02:06 2025 GMT
            Not After : Dec 28 04:02:06 2025 GMT
        Subject: CN=6947713f-f234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:25:f5:7e:7e:89:4d:32:0b:60:80:fe:57:
                    a3:58:2d:9c:75:d4:44:81:3e:87:cd:ac:fd:5a:d8:
                    fc:f3:d0:30:19:03:0c:2e:cd:f8:1b:bc:1b:02:36:
                    fc:c6:0a:40:46:3e:d3:c0:60:99:2b:f8:cc:45:6c:
                    78:bb:be:99:8d:59:46:a1:f9:67:2a:d0:bf:68:76:
                    e1:c9:26:48:67:0c:d8:d6:5b:86:a6:e9:02:4e:25:
                    3a:ce:05:ac:e5:2f:d5:8e:65:fc:17:4e:bc:8f:50:
                    91:e4:7a:f6:73:f2:63:82:af:31:ef:7c:05:0e:93:
                    03:e4:18:64:35:35:a3:10:82:db:6f:9b:82:78:bb:
                    9d:af:d2:7f:20:7f:7b:ad:49:a9:d2:d6:4e:91:b5:
                    3a:c7:de:9f:1f:8f:e0:ab:4d:34:0e:52:c1:d7:26:
                    53:41:ba:25:16:aa:db:2a:f8:b5:30:ab:24:1a:f5:
                    50:3a:16:f9:a8:19:c8:2e:04:0b:e6:ac:bf:be:21:
                    ed:71:12:0d:5d:a3:b3:2b:6a:50:0a:2b:ea:7b:65:
                    fb:8f:36:90:6e:fa:2b:4b:5d:0c:86:d2:64:13:55:
                    31:8a:31:6a:6a:a3:74:6c:82:0a:f7:e8:bc:c6:b0:
                    3a:34:13:05:ed:5e:fa:fe:13:ed:09:29:e1:f1:12:
                    fe:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F2:8B:05:C6:A6:DD:62:21:F1:F0:FA:83:F4:CF:A2:8F:F4:72:46
            X509v3 Authority Key Identifier:
                keyid:BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3b:5d:a9:75:92:23:04:b4:2f:c0:0b:5b:87:81:0a:5e:1b:
         e0:d5:ea:26:ee:be:34:0d:6f:b6:00:d8:21:dc:e6:49:24:a9:
         35:2d:ec:7e:55:76:8f:82:a2:56:1d:5b:36:35:9a:f9:e8:8b:
         2f:2c:d9:02:ea:ee:26:a1:27:9d:9f:a1:d4:11:7f:66:c4:23:
         f7:36:e9:13:10:e3:c2:1e:33:b9:9a:67:85:a7:26:df:81:99:
         d1:09:6c:6c:19:75:2a:ca:13:84:c0:c0:cb:43:0c:b0:9e:d4:
         64:a8:f3:d3:35:a9:95:42:c9:b2:82:29:f2:92:a5:f4:dc:36:
         18:cf:b0:d1:e0:91:0e:01:b4:47:1e:c8:5c:71:30:09:51:31:
         49:6f:7a:a1:ae:49:52:19:2a:13:38:9f:88:fb:04:e6:41:a2:
         79:91:27:8a:16:fd:bc:c7:c5:b8:fd:f1:54:fc:94:68:5a:ce:
         7c:37:ee:9f:77:d8:0e:b9:b8:c2:00:a5:f6:00:0f:45:b5:12:
         aa:76:95:48:8c:5a:01:e2:72:3b:68:fe:a8:ed:2e:33:5c:d0:
         8d:4b:95:4f:30:17:69:1a:fa:1a:f7:ed:0b:4b:3d:52:02:8f:
         4f:b2:96:f0:d4:fc:bb:07:66:a1:f7:db:1f:6e:b6:8d:ba:dd:
         b8:a0:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:44:01 2025 by rpki-client