This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
File:                     VB3RXhVOUI-wD9skXE528q09iB0.mft (raw, json)
Hash identifier:          FLfJjGY9biEMBWLk2RafdrGkR2uRHqWCZj93/pxcMuw=
Subject key identifier:   67:04:8E:C2:4C:FB:40:57:1A:EB:EB:93:D7:DC:2B:65:99:CC:9C:4C
Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Certificate issuer:       /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
Manifest number:          47
Signing time:             Sun 07 Dec 2025 05:25:04 +0000
Manifest this update:     Sun 07 Dec 2025 05:25:03 +0000
Manifest next update:     Sun 14 Dec 2025 05:25:03 +0000
Files and hashes:         1: VB3RXhVOUI-wD9skXE528q09iB0.crl (hash: 8O4iNic6S+kzq9Ys+zB/nzWVyjzkzDgw2V+kpmT1+LQ=)
                          2: BA2C0A9E673A11F0B876713DC4F9AE02.roa (hash: qV69gg2P4bFihZzX2d7CSbRtDBRP/ma/ao4YNWgRlJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
                          rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
        Validity
            Not Before: Dec  7 05:25:03 2025 GMT
            Not After : Dec 14 05:25:03 2025 GMT
        Subject: CN=69350fb0-a12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:bf:f5:a9:e9:3a:3c:d1:aa:8d:2c:4f:ce:
                    ae:f4:d0:af:4a:d4:75:60:5a:68:f4:08:ef:09:19:
                    43:8b:60:08:d5:7d:de:a4:31:5a:cf:fc:50:7c:55:
                    c1:83:7e:b2:41:ae:45:14:ec:19:71:fd:58:8d:43:
                    b1:fa:34:3a:db:54:4d:45:1e:86:79:68:08:bc:57:
                    11:12:61:a6:bc:aa:f3:5a:c9:53:be:b1:76:1f:9a:
                    88:27:bd:9b:86:2d:9c:fd:04:5d:1c:e2:ae:5a:e8:
                    9e:85:75:fe:c3:11:0f:df:e8:c7:a9:52:26:1c:80:
                    7d:0a:e2:26:dc:2b:0e:7b:75:6c:24:7b:6b:d7:0d:
                    80:0a:9b:ed:31:6f:52:94:b6:00:69:50:68:5d:f5:
                    c2:0e:37:a9:49:15:03:1f:99:94:4d:47:cd:4a:85:
                    e4:bc:71:df:03:51:53:10:f3:b6:9b:cc:58:62:a7:
                    e1:20:45:ee:40:65:68:00:26:ed:2c:32:cc:50:8a:
                    98:e0:dd:14:50:60:53:68:6f:15:bd:d3:68:64:14:
                    59:83:4c:0c:48:2f:a7:94:ef:c9:53:2d:f8:a6:7d:
                    1a:ef:5a:f8:15:5e:8b:d5:c5:14:ab:cc:bb:a0:5e:
                    4a:9f:12:c8:96:02:93:06:2e:e5:b1:8a:32:53:30:
                    9f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:04:8E:C2:4C:FB:40:57:1A:EB:EB:93:D7:DC:2B:65:99:CC:9C:4C
            X509v3 Authority Key Identifier:
                keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:32:29:e4:9d:83:1e:7f:af:91:0a:4c:a7:4c:17:6e:8d:75:
         42:5b:ea:7e:a3:9c:84:67:4b:b1:c1:5b:fa:c7:b5:3d:6c:c2:
         4e:24:af:fb:d0:a3:bf:fe:a8:33:0a:bd:17:46:72:31:90:6b:
         af:b3:0f:11:0f:89:3f:08:16:08:e3:c1:51:2b:fd:7e:99:84:
         1f:ed:6a:64:67:eb:ea:0b:ec:06:18:6c:01:3b:69:5a:87:ba:
         f1:61:da:01:66:77:9a:11:62:54:c2:7b:94:84:f2:01:50:87:
         27:ad:ec:dc:7c:27:5b:49:ab:ab:34:27:a2:ae:b3:2e:2d:ba:
         b5:d2:97:99:99:74:c1:6c:e0:e7:ea:f1:bb:02:64:5e:0a:cc:
         60:cd:41:ec:0e:27:c2:f6:d6:57:e8:11:a8:e4:3f:b3:f7:bf:
         ee:37:4f:a8:ab:f2:1d:0d:42:bf:12:94:b0:2f:41:dc:19:6a:
         51:62:f1:a8:71:df:68:25:a0:ef:a4:f9:e1:80:43:10:ee:13:
         3b:97:eb:49:05:cc:04:27:03:10:77:75:72:c6:58:b0:48:9e:
         20:0f:bd:9f:97:cc:e0:62:8c:65:df:af:1c:0d:eb:14:0b:10:
         9d:6b:82:09:cc:71:c6:dc:33:c2:26:ef:29:98:bf:ee:f6:83:
         a7:92:6b:39
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Q0U0QTExMC8GA1UEBRMoNTQxREQxNUUxNTRFNTA4RkIwMEZEQjI0NUM0RTc2RjJB
RDNEODgxRDAeFw0yNTEyMDcwNTI1MDNaFw0yNTEyMTQwNTI1MDNaMBgxFjAUBgNV
BAMTDTY5MzUwZmIwLWExMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtkr/1qek6PNGqjSxPzq700K9K1HVgWmj0CO8JGUOLYAjVfd6kMVrP/FB8VcGD
frJBrkUU7Blx/ViNQ7H6NDrbVE1FHoZ5aAi8VxESYaa8qvNayVO+sXYfmognvZuG
LZz9BF0c4q5a6J6Fdf7DEQ/f6MepUiYcgH0K4ibcKw57dWwke2vXDYAKm+0xb1KU
tgBpUGhd9cION6lJFQMfmZRNR81KheS8cd8DUVMQ87abzFhip+EgRe5AZWgAJu0s
MsxQipjg3RRQYFNobxW902hkFFmDTAxIL6eU78lTLfimfRrvWvgVXovVxRSrzLug
XkqfEsiWApMGLuWxijJTMJ+LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZwSOwkz7
QFca6+uT19wrZZnMnEwwHwYDVR0jBBgwFoAUVB3RXhVOUI+wD9skXE528q09iB0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDRTRBL0UxRUExOUY2Njcz
ODExRjBBRDU2NkQ3RkM0RjlBRTAyL1ZCM1JYaFZPVUktd0Q5c2tYRTUyOHEwOWlC
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVkIzUlhoVk9VSS13RDlza1hFNTI4cTA5aUIwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD
RTRBL0UxRUExOUY2NjczODExRjBBRDU2NkQ3RkM0RjlBRTAyL1ZCM1JYaFZPVUkt
d0Q5c2tYRTUyOHEwOWlCMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKoyKeSdgx5/r5EKTKdMF26NdUJb6n6jnIRnS7HBW/rHtT1swk4kr/vQ
o7/+qDMKvRdGcjGQa6+zDxEPiT8IFgjjwVEr/X6ZhB/tamRn6+oL7AYYbAE7aVqH
uvFh2gFmd5oRYlTCe5SE8gFQhyet7Nx8J1tJq6s0J6Kusy4turXSl5mZdMFs4Ofq
8bsCZF4KzGDNQewOJ8L21lfoEajkP7P3v+43T6ir8h0NQr8SlLAvQdwZalFi8ahx
32gloO+k+eGAQxDuEzuX60kFzAQnAxB3dXLGWLBIniAPvZ+XzOBijGXfrxwN6xQL
EJ1rggnMccbcM8Im7ymYv+72g6eSazk=
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:48:51 2025 by rpki-client