This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
File:                     VQiKMVvLUJi-72Zaqcvf0yogWCA.mft (raw, json)
Hash identifier:          QZgc//OvSUhb/mxf4zuayoJWOYVTujTzWfnDpxaMHNg=
Subject key identifier:   8E:BF:4B:3D:97:DC:8E:06:A6:3F:F5:62:F8:0F:67:FB:D0:A6:E1:79
Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20
Certificate issuer:       /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
Certificate serial:       0709
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
Manifest number:          06F1
Signing time:             Sat 06 Dec 2025 21:00:39 +0000
Manifest this update:     Sat 06 Dec 2025 21:00:38 +0000
Manifest next update:     Sat 13 Dec 2025 21:00:38 +0000
Files and hashes:         1: VQiKMVvLUJi-72Zaqcvf0yogWCA.crl (hash: i8QFvqJxE3vw1Hwll9Yo/DRy4vP9DFZX45Z1aoVTe/A=)
                          2: 4AC85EBC8E1511F083A5EB46C4F9AE02.roa (hash: HpSbnGJEafe0Cwqy3fqQEE7tGOKywS9PLDhr9ZIWw18=)
                          3: A9B5CDC4B97111F089BA4733C4F9AE02.roa (hash: e7NB/rZJ7soW34sGauamE9L/Mh5Ro39SnWUlgmJO+4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl
                          rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119F89, serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
        Validity
            Not Before: Dec  6 21:00:38 2025 GMT
            Not After : Dec 13 21:00:38 2025 GMT
        Subject: CN=69349977-fc64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:28:7f:82:2b:fe:ea:16:1a:17:42:1d:33:
                    6c:b6:a2:1d:ba:7b:41:35:a5:24:92:15:7b:11:06:
                    6a:90:f1:17:4f:f0:7c:14:4e:95:67:86:6a:a6:fc:
                    65:44:47:56:b0:78:4d:73:e6:51:64:6b:24:b3:95:
                    e9:09:09:2b:9f:ed:2a:f1:76:a3:43:bf:cb:e4:51:
                    41:69:d6:f4:bb:84:02:64:3c:14:97:11:fb:be:de:
                    6c:9a:3f:f2:c3:93:23:53:0f:3c:18:32:fd:3a:79:
                    3e:d0:9a:ee:13:10:9f:98:66:b3:59:4c:55:5b:75:
                    9e:39:ca:51:8a:3c:02:3d:9f:77:fe:80:4a:0e:30:
                    31:f6:26:80:62:c8:bf:22:da:2e:7f:fd:fb:6e:54:
                    2c:74:4c:df:df:30:7e:90:b6:a0:1b:f1:1d:79:66:
                    b8:6c:aa:39:2c:55:36:35:6d:0c:bf:03:6f:11:9f:
                    a0:44:ce:65:3a:7d:26:aa:da:da:c7:12:68:bf:61:
                    f8:e6:65:0c:7f:6c:fe:ba:9f:46:ee:de:ca:c3:bf:
                    a2:c0:dd:9b:06:e2:f4:cd:00:aa:f1:4a:74:70:9b:
                    5f:4f:27:8d:e3:03:5f:29:74:67:92:74:de:32:bb:
                    82:7f:75:2f:64:46:ee:e8:0f:d0:a7:38:9e:9e:f1:
                    99:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BF:4B:3D:97:DC:8E:06:A6:3F:F5:62:F8:0F:67:FB:D0:A6:E1:79
            X509v3 Authority Key Identifier:
                keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ee:a6:4c:60:e4:73:c0:56:f1:2b:b1:01:b5:4a:ca:77:2e:
         14:bd:2f:24:b4:36:1a:47:81:6c:4b:84:9f:02:30:d1:e9:7b:
         19:a8:9f:59:e4:b3:66:26:62:4f:5d:e7:c0:b3:ca:cf:38:c3:
         0d:0c:3c:ff:f3:3c:f6:c7:d2:a4:61:76:e7:c5:01:83:42:3b:
         c1:a3:c5:16:aa:ee:fc:3f:f3:01:41:5a:0a:ac:fc:57:d5:f8:
         bd:4e:c9:7c:c5:65:76:de:25:6b:f2:65:ce:ff:5f:a2:52:38:
         bb:65:f0:23:c0:8f:ee:37:82:4c:a0:a2:7d:78:25:c9:52:95:
         4c:cd:3c:41:d4:c6:0e:61:47:af:fd:7c:c4:cf:0c:ca:cc:e5:
         0d:6d:32:ee:97:56:3b:c7:6d:2c:29:d3:62:aa:50:03:cc:b3:
         4b:7c:74:31:4a:7a:8f:2e:47:59:1e:92:95:b4:44:c0:0a:76:
         95:5a:bf:0d:54:b1:a8:54:4c:5e:45:58:cd:bb:d8:39:67:6e:
         ee:41:9d:ca:37:f1:90:18:87:79:88:4c:f9:84:fd:9d:02:1d:
         85:31:ae:1d:ce:53:a8:6b:8a:9f:03:98:5a:a4:d8:ec:07:16:
         02:3e:e5:f0:0c:90:40:2a:bd:f1:8d:df:24:26:28:55:c3:28:
         49:d0:3f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:45:05 2025 by rpki-client