This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
File:                     vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json)
Hash identifier:          NjAgEuWYwWOD9DaSd8YMSHgBnUe4sRPwkGnVu5cZv+4=
Subject key identifier:   F6:F8:3F:DC:9D:B3:DD:F0:FA:B4:7F:41:EE:E4:A4:2D:8C:EA:58:9D
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Certificate issuer:       /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial:       05B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
Manifest number:          05A6
Signing time:             Sat 20 Dec 2025 22:26:39 +0000
Manifest this update:     Sat 20 Dec 2025 22:26:39 +0000
Manifest next update:     Sat 27 Dec 2025 22:26:39 +0000
Files and hashes:         1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: eLeS17aeeBPKlDf/FqEVVi9JUiDeKA2QUmmpkoFUIFw=)
                          2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: edmH+zoE3tcqcciZuFe0JER5V1TWvNXJvKg0Me+DQ90=)
                          3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: amAbeNg9WhoR9LiBcCPddN+usabEY60TrC7LxRq3i34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
        Validity
            Not Before: Dec 20 22:26:39 2025 GMT
            Not After : Dec 27 22:26:39 2025 GMT
        Subject: CN=6947229f-4d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:75:a4:ff:19:bf:19:9f:58:05:25:6f:e6:
                    5d:0e:ca:de:71:97:27:43:1f:d8:3b:ef:41:31:a2:
                    5c:83:0e:32:6c:a4:e7:0a:70:7b:da:ed:51:a1:cb:
                    b6:13:c1:1e:95:b0:7a:06:be:b1:29:f2:d4:78:5e:
                    6e:02:29:a2:be:68:cb:83:a0:bd:42:4b:11:39:98:
                    1e:1c:d2:d9:a0:29:d9:92:c5:81:58:e5:d4:51:4a:
                    e1:fa:21:2b:76:72:11:d5:23:d2:41:1a:13:de:a7:
                    d2:12:8f:19:42:86:d5:c1:0f:68:53:7a:ab:cf:67:
                    8a:43:14:f1:b9:e9:ab:2d:88:5c:17:77:03:e9:e3:
                    5e:b3:5e:b2:9d:45:e3:7f:04:3f:f1:af:48:12:c7:
                    21:2f:f8:8e:e4:ca:f1:d3:ba:94:b4:b4:d3:14:55:
                    e4:5e:7e:1d:eb:0d:c5:0d:5f:13:fb:ae:dc:74:c5:
                    4a:7c:17:e2:38:20:cb:29:7e:96:c3:ce:5a:b6:38:
                    10:72:8f:52:f6:5e:76:78:42:55:43:58:c7:0e:1a:
                    df:d1:a8:d0:46:4a:89:8d:31:c4:75:c5:09:e5:41:
                    96:73:43:ce:9c:45:19:26:db:1b:81:d5:72:4d:a9:
                    a3:91:ef:65:7f:c1:79:62:60:ca:96:79:50:78:2a:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F8:3F:DC:9D:B3:DD:F0:FA:B4:7F:41:EE:E4:A4:2D:8C:EA:58:9D
            X509v3 Authority Key Identifier:
                keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:96:f9:07:72:8c:b6:e6:9e:86:c6:b8:8e:f6:a5:bb:83:
         2a:17:f2:7d:90:4b:36:23:ba:6f:e1:b3:b4:58:17:29:d4:9d:
         b5:de:65:75:1a:df:c8:13:ec:a9:ab:88:70:2b:5e:41:91:b0:
         fc:fa:bb:81:32:10:51:1e:de:32:97:1e:58:d7:07:08:ad:42:
         a4:b1:3e:80:4e:79:ba:e8:af:4e:be:d7:fd:e2:50:72:c1:e8:
         13:6b:6e:b1:0f:04:d8:e6:53:49:f7:ed:97:1c:8a:df:9c:42:
         6b:f0:1c:58:23:bd:44:f1:76:49:b6:5f:26:a0:15:04:f1:9d:
         64:c9:8c:ed:06:e9:ad:97:92:fc:a3:63:f7:c2:2b:9d:ef:4a:
         ee:52:57:fe:e6:46:b7:ef:d9:4a:ab:f8:b2:6a:2f:31:b5:93:
         97:39:9d:20:15:0c:08:de:fe:25:5f:96:54:78:c6:89:a7:f0:
         39:1c:36:95:b8:26:3e:c2:44:43:79:c9:f8:a0:4f:c8:72:08:
         7f:60:66:2d:2c:1c:9d:c4:5d:2f:99:d4:49:4f:a4:3a:b2:20:
         02:e9:d2:18:80:87:7e:d0:c8:0b:49:95:b0:cb:2b:7f:ea:ee:
         4c:de:33:07:0d:ce:22:cb:20:25:c7:1d:4b:8c:dd:bf:a9:03:
         92:da:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:17:01 2025 by rpki-client