This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
File:                     VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json)
Hash identifier:          +KrW/mn/u/O7Zl077k+zn8Ch73iZ6rXZ57t0kjYQ/UY=
Subject key identifier:   87:8F:5E:89:20:F1:1A:E4:E2:12:B5:CA:AE:F7:BE:80:9C:25:A1:BA
Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0
Certificate issuer:       /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
Manifest number:          0165
Signing time:             Tue 23 Dec 2025 03:02:08 +0000
Manifest this update:     Tue 23 Dec 2025 03:02:08 +0000
Manifest next update:     Tue 30 Dec 2025 03:02:08 +0000
Files and hashes:         1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: cgfCnaBnpf4DIdHSPQ3q15S8Z2HuPWC5M8vP6s3Cn8c=)
                          2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl
                          rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
        Validity
            Not Before: Dec 23 03:02:08 2025 GMT
            Not After : Dec 30 03:02:08 2025 GMT
        Subject: CN=694a0630-15e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:28:ea:21:da:04:c3:61:af:bb:5f:26:51:
                    0f:60:7f:3e:42:41:1f:65:31:be:43:b4:06:65:d6:
                    ce:e3:a1:05:93:8e:bf:4b:5e:4b:49:db:9b:b1:f9:
                    75:c4:42:b5:30:2b:6f:7b:9e:03:e1:d8:14:57:31:
                    c8:03:34:5c:79:ad:45:8a:c4:ea:10:7d:06:de:3f:
                    e2:f7:7a:3c:ae:0a:03:95:eb:64:cf:45:a0:3d:e0:
                    55:3a:38:02:ef:e3:6a:56:dd:3a:ed:9c:d6:95:1e:
                    a1:1e:be:10:30:31:53:a3:5c:be:2b:0c:3a:f9:a7:
                    58:09:e3:91:01:16:7a:f5:22:a6:f7:95:84:3a:ac:
                    31:4e:69:7c:57:11:77:fb:07:12:a4:0e:04:fd:17:
                    1a:c9:a5:81:5d:cb:9d:15:3a:8c:3b:e0:9d:fb:b0:
                    9e:bd:cf:0c:1a:3d:9f:a5:e7:a9:da:04:b2:72:23:
                    14:f5:eb:d1:db:e9:cb:3f:05:fa:cd:f1:99:62:e3:
                    1e:64:21:2e:2c:d0:4e:d3:b9:04:83:af:2a:0b:b0:
                    21:f9:5c:cb:fa:86:82:3d:8d:a7:50:2c:5b:eb:27:
                    71:38:03:81:1b:49:de:fa:89:9b:e0:87:fb:06:e4:
                    63:e5:27:f5:37:79:10:10:0a:0b:92:d9:10:4e:e3:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8F:5E:89:20:F1:1A:E4:E2:12:B5:CA:AE:F7:BE:80:9C:25:A1:BA
            X509v3 Authority Key Identifier:
                keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ae:27:b1:d4:48:c5:69:08:8e:fe:fd:c6:e6:c7:56:97:b4:
         64:f7:bd:e0:43:5d:73:6d:08:69:e1:b9:1e:ea:b8:1e:9c:2d:
         c7:59:78:dc:f9:f8:cd:e8:39:48:1e:c2:94:0e:4b:08:da:c3:
         40:9c:93:96:24:e8:41:ee:5f:61:12:33:bc:3d:a3:6c:ab:2f:
         20:30:02:8e:a2:ef:68:5c:23:d4:0d:79:2b:48:de:0c:26:c0:
         d1:e7:33:bb:87:fe:ae:90:5c:15:a8:38:6a:2d:f1:a7:50:98:
         23:35:22:04:be:e4:36:51:ef:a2:a5:f0:3d:b5:cf:c2:c9:6d:
         f2:9d:d8:65:57:2b:04:f9:3a:2e:11:98:5a:aa:6c:3a:56:0a:
         9b:c2:21:80:e0:f4:07:ee:f5:22:fe:65:02:e8:93:5f:f2:f8:
         71:0d:ae:2c:9b:30:0c:21:1b:c6:63:07:c4:f9:54:04:55:f7:
         cb:84:e5:c3:3e:e8:d6:76:c0:52:60:1f:82:39:82:1b:89:f9:
         c6:0e:17:e1:57:c0:8e:d6:53:c4:1c:df:8b:7c:ca:b0:a0:14:
         e1:cf:95:78:92:a3:d4:38:b6:c9:a4:d9:69:af:c9:37:03:b5:
         0b:fb:d2:bb:74:30:11:42:4c:73:80:81:1f:5d:1c:dc:ff:b0:
         de:73:f6:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4
RUY5OTA2RTAwHhcNMjUxMjIzMDMwMjA4WhcNMjUxMjMwMDMwMjA4WjAYMRYwFAYD
VQQDDA02OTRhMDYzMC0xNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArWAo6iHaBMNhr7tfJlEPYH8+QkEfZTG+Q7QGZdbO46EFk46/S15LSdubsfl1
xEK1MCtve54D4dgUVzHIAzRcea1FisTqEH0G3j/i93o8rgoDletkz0WgPeBVOjgC
7+NqVt067ZzWlR6hHr4QMDFTo1y+Kww6+adYCeORARZ69SKm95WEOqwxTml8VxF3
+wcSpA4E/RcayaWBXcudFTqMO+Cd+7Cevc8MGj2fpeep2gSyciMU9evR2+nLPwX6
zfGZYuMeZCEuLNBO07kEg68qC7Ah+VzL+oaCPY2nUCxb6ydxOAOBG0ne+omb4If7
BuRj5Sf1N3kQEAoLktkQTuOYvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIePXokg
8Rrk4hK1yq73voCcJaG6MB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG
NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P
MUtuRy01cllLWHVPLVpCdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQANriex1EjFaQiO/v3G5sdWl7Rk973gQ11zbQhp4bke6rgenC3HWXjc
+fjN6DlIHsKUDksI2sNAnJOWJOhB7l9hEjO8PaNsqy8gMAKOou9oXCPUDXkrSN4M
JsDR5zO7h/6ukFwVqDhqLfGnUJgjNSIEvuQ2Ue+ipfA9tc/CyW3yndhlVysE+Tou
EZhaqmw6VgqbwiGA4PQH7vUi/mUC6JNf8vhxDa4smzAMIRvGYwfE+VQEVffLhOXD
PujWdsBSYB+COYIbifnGDhfhV8CO1lPEHN+LfMqwoBThz5V4kqPUOLbJpNlpr8k3
A7UL+9K7dDARQkxzgIEfXRzc/7Dec/aG
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:51 2025 by rpki-client