This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
File:                     vEIYikinqZ-W1q-yAR59yd7uIqU.mft (raw, json)
Hash identifier:          4e54WVOOcHZmV76xoLubnsgnpe9HBECd1/bJK7cakA8=
Subject key identifier:   41:61:0F:54:0E:73:82:DC:14:47:F8:EE:1D:C5:48:06:5C:E9:F3:9B
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Certificate issuer:       /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
Manifest number:          40
Signing time:             Sat 06 Dec 2025 18:52:08 +0000
Manifest this update:     Sat 06 Dec 2025 18:52:07 +0000
Manifest next update:     Sat 13 Dec 2025 18:52:07 +0000
Files and hashes:         1: vEIYikinqZ-W1q-yAR59yd7uIqU.crl (hash: 0gM4qodfmiyp+bae9P4X3lmAf5956W/cNMGhZ0WEOrM=)
                          2: 751E0734D06911F0A789BB44C4F9AE02.roa (hash: UhXJLAHokVCI0k+DjjmBHGcMcgUilly93pv811k5onQ=)
                          3: 8E018B30D05611F0A517D12AC4F9AE02.roa (hash: sV/z+J9M1vomeBwWCL+sac3AZUuwIvVbej3W8i6aPqQ=)
                          4: 8CBB3EA2D06911F09735DD48C4F9AE02.roa (hash: gqj4jtEMDN4bcyseFHh+di3mjZVrlGI2+shg14Tz6Ac=)
                          5: 080C8846CC5911F0900FE21DC4F9AE02.roa (hash: uIEx6xwpbLEgKu+5JEevIBjQ6QBJ1P16CaV2vlziLyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
        Validity
            Not Before: Dec  6 18:52:07 2025 GMT
            Not After : Dec 13 18:52:07 2025 GMT
        Subject: CN=69347b57-76d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:b2:2a:da:24:ea:24:aa:30:92:51:bb:fc:
                    51:53:88:93:a9:3a:a8:57:0c:a4:23:bd:fb:3c:ea:
                    38:7f:ea:1d:e7:98:69:bc:ff:46:2f:8a:3d:54:08:
                    8c:5e:67:01:5f:f1:33:a2:0a:a5:84:6e:94:07:51:
                    0a:f2:18:8b:2a:f5:b6:e8:81:68:99:6b:38:52:5f:
                    5b:fd:55:7a:39:33:39:c3:91:a6:bb:69:be:86:19:
                    24:27:1e:f0:50:f5:65:72:b6:5c:9b:1e:b1:36:52:
                    aa:c7:7e:44:a1:58:69:5b:3d:08:e3:bc:83:c7:67:
                    50:ae:62:6f:84:c6:6f:e0:ff:d9:ff:e9:61:c6:3b:
                    56:e2:b5:ee:8c:8c:26:05:b2:ed:c6:fb:2b:98:09:
                    e9:cd:e2:44:1a:27:34:a0:0b:2a:10:29:76:b2:2b:
                    c4:7b:30:ef:ca:bc:ea:2c:d0:a1:38:50:3a:5e:84:
                    ea:fd:2b:81:d4:4e:e7:d2:12:d4:45:17:d5:64:db:
                    63:ef:35:32:05:d7:3e:64:42:49:f1:60:49:19:7a:
                    1c:ea:87:41:1a:bd:4d:9d:e8:0e:86:79:55:f2:5b:
                    53:b2:76:e8:f6:15:dd:c3:44:97:36:0b:7d:ea:38:
                    55:55:33:bd:7c:19:dd:3d:ed:f6:94:80:b0:ed:90:
                    00:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:61:0F:54:0E:73:82:DC:14:47:F8:EE:1D:C5:48:06:5C:E9:F3:9B
            X509v3 Authority Key Identifier:
                keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d7:d5:6e:b9:55:2d:30:52:3d:9f:ce:50:6d:4d:f3:62:1c:
         55:b4:81:0c:d8:71:44:16:b9:d1:ce:df:37:6b:01:6d:6f:8e:
         a5:34:70:d5:c3:c1:8e:ff:c1:a9:57:dc:b4:13:d1:89:b2:ae:
         fa:c4:2e:0d:7f:12:3b:10:8a:01:35:5a:02:57:8b:4f:04:53:
         d6:57:ab:49:76:2b:d6:25:2d:f5:a6:d9:ee:9b:29:6c:44:6f:
         5a:79:f0:c4:8e:d2:8b:04:c7:6a:d5:b7:57:69:16:94:9c:06:
         49:9b:62:75:a1:51:74:7e:92:46:ea:0f:05:64:78:c1:38:f3:
         52:c3:8c:2b:3d:2f:63:ec:92:eb:00:bb:17:be:fc:73:87:c5:
         ff:1c:6a:02:23:c5:1b:5b:de:6b:e4:08:3d:a0:bb:62:63:0d:
         03:a3:67:18:84:28:88:db:4d:3d:8f:3b:a1:12:0a:c0:2a:19:
         10:db:f2:7c:8e:14:dc:be:14:40:13:a4:51:5c:b5:c2:ee:0c:
         fa:b6:a2:36:e8:cc:db:64:0d:82:60:4a:fb:9d:f1:d9:de:38:
         97:75:a1:e4:bd:6e:b3:63:02:d3:ac:0f:69:2f:54:d5:82:f6:
         ee:31:25:81:f6:de:81:39:c2:d9:93:f9:f6:11:71:73:13:68:
         8a:cb:e2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:04:01 2025 by rpki-client