This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
File:                     vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json)
Hash identifier:          YUGeRVT54Nwg5ZsYFRZvGexfL/DxrQ/E7TeWvx1rUO0=
Subject key identifier:   1F:CB:AF:BB:F4:4A:A2:3A:D2:DC:80:57:C9:2E:E9:19:37:72:F2:A7
Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
Certificate issuer:       /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Certificate serial:       03E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
Manifest number:          03C8
Signing time:             Tue 30 Dec 2025 23:48:47 +0000
Manifest this update:     Tue 30 Dec 2025 23:48:46 +0000
Manifest next update:     Tue 06 Jan 2026 23:48:46 +0000
Files and hashes:         1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: I3v9pBhvWl6fHLOq9DxnOQpt3P21gAwUyYT0PTHw6HU=)
                          2: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: 8/pe/NkCfmi8GQHtZeDvbdeiM83VXVuijM5zx0eXnx8=)
                          3: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 8dEWz6BA19noWs2zWuUBCRCZchx4qTK4G3VWLV+hIMw=)
                          4: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: KstFse9DL+Lpk2UJhsRfTukB1/IV52HFgYreP0UKdGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
                          rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Jan 2026 23:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
        Validity
            Not Before: Dec 30 23:48:46 2025 GMT
            Not After : Jan  6 23:48:46 2026 GMT
        Subject: CN=695464df-5757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:3c:f8:98:69:3c:26:e4:30:7b:f9:f8:46:
                    ae:07:bd:5e:55:b5:01:42:bd:41:03:a1:3a:9e:28:
                    d1:ed:86:8c:6d:9f:6c:d1:8d:bf:4d:63:4b:05:b9:
                    8b:9b:ea:bb:f5:5e:fd:97:ef:de:70:c4:41:b7:7f:
                    6f:8c:00:dc:ae:41:aa:83:f5:98:ed:da:e1:eb:75:
                    e9:49:60:1c:9b:2b:91:8b:1f:64:0a:05:8c:2f:2d:
                    bb:c1:29:96:25:32:3a:94:02:89:4d:2f:61:21:87:
                    ce:f5:3a:bf:e8:42:9a:83:c1:ec:34:34:96:25:45:
                    7f:8d:02:39:0b:c0:a1:73:4e:d9:d7:20:30:1e:5b:
                    cc:fd:94:14:b4:b7:03:d5:90:a6:b3:4a:df:36:87:
                    df:67:a8:9b:17:11:22:f5:19:91:1c:33:6b:68:55:
                    30:51:af:39:1c:21:cf:4b:f5:45:50:85:6b:28:f6:
                    2f:6d:0a:a6:ed:d6:80:4d:c5:90:cf:74:30:e0:8f:
                    f6:ae:18:39:38:6c:ca:d8:31:67:b7:00:2c:71:84:
                    87:f6:5a:f8:11:a6:8b:9d:bd:db:91:a2:08:bd:10:
                    82:72:60:bc:01:3c:6b:49:12:e3:74:89:ae:07:73:
                    59:0c:72:09:4d:84:2e:5a:bd:d4:0c:05:8a:79:f7:
                    89:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CB:AF:BB:F4:4A:A2:3A:D2:DC:80:57:C9:2E:E9:19:37:72:F2:A7
            X509v3 Authority Key Identifier:
                keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:50:ea:c5:82:7a:3a:d1:36:12:0e:19:b9:ad:04:b2:89:ca:
         d9:1b:94:a0:6b:e0:43:e2:f1:65:f3:4a:14:32:c1:26:4b:d9:
         28:4f:d3:20:8a:f0:64:e1:6b:1a:dd:04:a8:d3:5f:21:a9:6b:
         da:04:8e:cc:d9:04:74:87:21:d6:eb:39:1e:bc:c1:ba:f3:65:
         94:3f:67:0a:b8:d6:7a:c1:0f:73:88:39:4c:c9:0a:fe:4f:e7:
         a8:f9:5e:47:88:2e:b4:c6:e5:25:ed:4c:f5:99:d0:7d:4a:ea:
         69:2d:c8:97:c0:26:66:67:fd:4f:0f:0a:8b:16:d6:67:8f:f3:
         6d:1e:c0:d0:ac:63:e2:6d:a5:3c:e1:e1:a0:a1:8b:1e:fa:4a:
         da:77:4d:18:bd:cd:7b:60:6f:3b:96:c4:83:63:ba:48:c8:bd:
         f7:f1:eb:06:e9:d8:6f:f2:df:55:4a:81:36:d4:c5:0c:d7:c4:
         9b:da:c7:a8:8c:af:2a:b5:78:46:6b:c1:a0:56:cb:6d:55:79:
         c7:0d:e0:ad:10:71:1e:77:f4:46:c7:8e:3b:19:26:ab:2d:e8:
         25:d5:37:0b:96:c6:68:83:a9:89:a0:25:5d:9c:78:31:32:02:
         e3:73:8a:af:e9:42:bc:05:f5:30:37:33:b9:35:d4:62:90:55:
         8f:54:c0:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx
NEMzQjIxNDIwHhcNMjUxMjMwMjM0ODQ2WhcNMjYwMTA2MjM0ODQ2WjAYMRYwFAYD
VQQDDA02OTU0NjRkZi01NzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+88+JhpPCbkMHv5+EauB71eVbUBQr1BA6E6nijR7YaMbZ9s0Y2/TWNLBbmL
m+q79V79l+/ecMRBt39vjADcrkGqg/WY7drh63XpSWAcmyuRix9kCgWMLy27wSmW
JTI6lAKJTS9hIYfO9Tq/6EKag8HsNDSWJUV/jQI5C8Chc07Z1yAwHlvM/ZQUtLcD
1ZCms0rfNoffZ6ibFxEi9RmRHDNraFUwUa85HCHPS/VFUIVrKPYvbQqm7daATcWQ
z3Qw4I/2rhg5OGzK2DFntwAscYSH9lr4EaaLnb3bkaIIvRCCcmC8ATxrSRLjdImu
B3NZDHIJTYQuWr3UDAWKefeJPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/Lr7v0
SqI60tyAV8ku6Rk3cvKnMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw
MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ
VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky
NDNJYkxCMGhxQmNVdzdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwUOrFgno60TYSDhm5rQSyicrZG5Sga+BD4vFl80oUMsEmS9koT9Mg
ivBk4Wsa3QSo018hqWvaBI7M2QR0hyHW6zkevMG682WUP2cKuNZ6wQ9ziDlMyQr+
T+eo+V5HiC60xuUl7Uz1mdB9SuppLciXwCZmZ/1PDwqLFtZnj/NtHsDQrGPibaU8
4eGgoYse+krad00Yvc17YG87lsSDY7pIyL338esG6dhv8t9VSoE21MUM18Sb2seo
jK8qtXhGa8GgVsttVXnHDeCtEHEed/RGx447GSarLegl1TcLlsZog6mJoCVdnHgx
MgLjc4qv6UK8BfUwNzO5NdRikFWPVMBI
-----END CERTIFICATE-----
Generated at Wed Dec 31 03:42:16 2025 by rpki-client