This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File:                     VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier:          Krm7R53sz9Om4J1TRk3996OSvwQe3hrXb3AihJHDstE=
Subject key identifier:   AA:17:7E:A2:7F:45:B0:1F:0C:65:DC:EF:67:47:31:37:84:16:7B:4F
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer:       /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number:          E9
Signing time:             Tue 23 Dec 2025 04:25:57 +0000
Manifest this update:     Tue 23 Dec 2025 04:25:57 +0000
Manifest next update:     Tue 30 Dec 2025 04:25:57 +0000
Files and hashes:         1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: bOjk4iIAlg9Aa1IfSyeprQ2PIIrYWa25DMbNxcpJn8Q=)
                          2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: hQ+Gx7Vv9Bqml1yrkYB3EZZ2s/v+ssA89alsVLHowuc=)
                          3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: 3sSuU9QTymYHLk6nKJf8ZY9J70HL/WV6OzgAH7Dy+z8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
                          rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
        Validity
            Not Before: Dec 23 04:25:57 2025 GMT
            Not After : Dec 30 04:25:57 2025 GMT
        Subject: CN=694a19d5-d813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:71:e6:8f:89:e6:27:92:dd:5a:7b:20:d5:
                    60:73:1b:1f:80:2d:ac:4f:03:23:a8:d0:d2:5b:3b:
                    b2:00:2f:24:98:a0:3d:94:b8:37:d8:b5:82:b6:41:
                    48:52:43:ec:ae:a8:cd:91:2d:02:4b:a5:a7:ca:a9:
                    83:c0:89:dd:11:29:eb:ed:de:62:85:fa:51:71:4f:
                    7a:70:d7:68:54:08:2c:b2:e5:ce:78:f4:ea:19:8f:
                    39:42:a4:20:f6:05:1d:96:32:a0:eb:26:1f:29:fd:
                    71:32:40:ea:b6:25:82:ec:80:07:a3:1b:8e:65:3b:
                    11:70:9e:d6:40:3a:e7:7e:4d:dc:6a:60:b7:69:8d:
                    8f:94:90:86:5e:ec:bd:a6:27:2b:a0:e0:41:bb:ae:
                    83:2f:10:66:6a:90:76:32:58:e2:aa:3b:8a:c8:64:
                    e5:1c:16:5b:83:51:3a:49:64:25:c9:d6:5e:cf:f2:
                    72:b3:a7:e7:b9:b1:22:37:15:56:e3:7a:52:bf:56:
                    8a:ea:6a:80:4a:a0:cf:1b:20:ec:e4:3d:2c:51:94:
                    db:2b:d8:de:21:f1:c0:7c:6a:1a:ce:56:cd:c2:1a:
                    12:66:a1:90:1a:7a:77:b2:8b:0e:e5:0b:af:99:c7:
                    a8:a1:a6:c7:52:d7:04:7e:b4:08:b4:d2:da:44:e3:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:17:7E:A2:7F:45:B0:1F:0C:65:DC:EF:67:47:31:37:84:16:7B:4F
            X509v3 Authority Key Identifier:
                keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:76:41:cf:b3:db:02:c4:9a:be:9c:a3:09:eb:4f:de:cb:15:
         8b:f7:9c:f7:d0:a0:77:f9:e6:33:0e:a2:b1:0c:51:6e:b7:56:
         ef:c7:59:9b:53:97:af:59:83:c5:11:c6:b7:4f:24:23:5e:05:
         c1:d3:17:e7:2b:df:a0:ef:3e:f2:12:00:bc:84:e1:9b:64:dc:
         11:db:5b:5c:92:46:84:f8:cb:72:34:63:70:a8:21:dc:e3:09:
         f2:19:22:e5:cd:55:71:9a:e9:9d:cf:07:cd:c1:6f:57:93:5a:
         1c:d9:a8:19:b8:d4:6c:89:4f:4e:f9:28:ad:88:e5:76:c0:09:
         a9:96:ef:f1:26:30:dd:c5:43:31:78:7f:b2:d2:a4:19:cc:3a:
         02:e3:1b:42:49:92:3f:e6:8b:4a:dd:24:61:18:3c:15:aa:5a:
         85:7f:04:aa:ac:5c:32:cc:fb:87:59:b7:cd:ca:b0:71:b3:89:
         0d:5c:bf:1c:28:90:fb:e8:91:91:66:1c:d1:0d:90:a2:a7:70:
         f1:51:7c:b4:76:f6:d1:c0:50:6a:b9:95:b4:cc:61:4c:57:4a:
         e4:ce:fb:d3:cd:10:8f:0b:a9:12:35:a9:4d:10:f5:ea:ea:e9:
         a6:fb:cf:fc:31:05:03:a5:af:d5:f6:33:ec:c9:2d:25:7e:cb:
         66:33:48:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:15 2025 by rpki-client