This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
File:                     vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json)
Hash identifier:          fXMETOZHk8xA5ONP4P6qSueJfj7t9VzcDbgJoyTvqJw=
Subject key identifier:   43:34:66:F4:BF:A7:58:18:BF:DF:F0:3A:1E:07:8A:96:89:A0:54:48
Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
Certificate issuer:       /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Certificate serial:       03DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
Manifest number:          03C3
Signing time:             Sat 20 Dec 2025 23:56:55 +0000
Manifest this update:     Sat 20 Dec 2025 23:56:55 +0000
Manifest next update:     Sat 27 Dec 2025 23:56:55 +0000
Files and hashes:         1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: XsK5SU+BLTCPiRi6qEsYxS4iHRe8PgI/UEGF6WGtfTM=)
                          2: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: 8/pe/NkCfmi8GQHtZeDvbdeiM83VXVuijM5zx0eXnx8=)
                          3: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: KstFse9DL+Lpk2UJhsRfTukB1/IV52HFgYreP0UKdGE=)
                          4: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 8dEWz6BA19noWs2zWuUBCRCZchx4qTK4G3VWLV+hIMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
                          rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990 (0x3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
        Validity
            Not Before: Dec 20 23:56:55 2025 GMT
            Not After : Dec 27 23:56:55 2025 GMT
        Subject: CN=694737c7-0504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:5b:e1:7e:30:bf:f2:4b:2f:e0:b7:ce:b5:
                    c4:2a:e2:57:6e:ba:1b:b7:e0:8b:06:ad:ab:ce:98:
                    c9:5d:ae:ae:dd:b8:a5:4e:4c:9e:b1:3a:ca:02:54:
                    ed:0c:67:e5:30:24:e6:52:cf:dd:c8:b6:68:d3:17:
                    c5:0f:d9:a7:8b:12:97:0b:fb:72:d9:af:b2:8f:8c:
                    91:88:6d:0e:75:eb:60:e6:33:5f:f7:cb:af:57:7b:
                    0a:4b:5e:a5:84:d5:8c:22:09:d3:93:e8:d5:db:24:
                    cf:66:89:f2:a2:8c:d1:f7:47:e1:94:ef:e6:34:18:
                    4c:ad:ed:5a:1a:2f:61:df:c8:d6:b9:ef:c4:58:db:
                    50:d5:ed:37:b7:fe:56:08:f2:43:e3:eb:f1:78:96:
                    c6:a3:25:20:86:f6:fa:ab:c9:e5:b5:99:5e:bb:1e:
                    c4:79:fb:68:55:13:e0:d8:7c:87:02:21:9c:a1:6a:
                    c3:fd:91:9b:d1:ff:f0:25:b9:9d:9d:02:7a:87:eb:
                    db:39:d1:eb:56:f8:06:81:37:d6:37:e4:ac:84:b6:
                    f1:78:61:91:4e:5c:d1:34:48:3c:bd:1d:0c:ae:8e:
                    18:17:2c:ad:c2:bd:36:d2:a5:47:f1:83:7b:d5:1e:
                    45:d0:07:f5:a5:f1:5e:ae:e3:84:03:c4:a0:43:14:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:34:66:F4:BF:A7:58:18:BF:DF:F0:3A:1E:07:8A:96:89:A0:54:48
            X509v3 Authority Key Identifier:
                keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:42:58:64:31:91:33:0c:34:29:f8:e4:56:9c:63:3e:85:ef:
         48:6c:70:62:38:d6:cd:eb:b9:07:01:f5:28:b6:2a:4d:94:f4:
         6a:30:4e:ca:ba:94:c0:07:31:97:d6:2c:33:0d:95:d0:d9:dc:
         60:b7:09:20:90:98:4d:d2:7e:cb:a7:9e:59:39:e7:51:43:ae:
         80:cb:1b:38:51:f1:97:d7:8c:2a:e7:2b:89:c5:e3:03:fc:3a:
         54:d5:be:c9:d0:5b:a6:59:86:9e:69:7e:75:94:6e:24:b8:b5:
         49:99:bb:88:d7:fc:2f:3a:2d:c9:f7:35:2e:20:97:e8:11:8b:
         28:f6:7d:d5:8d:54:33:e4:8d:a0:c6:2a:01:8b:ff:5d:63:db:
         55:65:14:84:6a:d7:85:71:ba:aa:9c:b2:8f:c9:da:66:f1:8c:
         05:f1:7b:fd:7a:5a:cb:25:06:90:ef:36:d6:5e:97:9b:e3:74:
         7d:60:3f:32:09:07:7d:f0:e4:a8:b1:14:0a:d2:4a:0d:63:c9:
         fb:eb:17:8f:15:48:4a:86:87:0d:ed:84:45:ee:b3:a5:18:41:
         53:f6:34:c5:a1:eb:69:9a:2e:f2:c2:d8:e7:51:04:45:72:5a:
         e7:77:1e:ee:ec:fb:49:92:45:f0:7a:f1:ce:62:43:ba:7a:bc:
         8b:30:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:26:50 2025 by rpki-client