This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C39/26294668D0D911E797AFD910C4F9AE02/dvsCo5_Q3u_00rJ2EfAeffN-Y18.mft
File:                     dvsCo5_Q3u_00rJ2EfAeffN-Y18.mft (raw, json)
Hash identifier:          0zBKvDILpbXpBvdhqu1aOTVoZhjk7x/G7xv+CiEVjp4=
Subject key identifier:   65:87:96:7A:B4:B3:57:7C:B3:CC:39:D3:17:B1:C9:B4:61:40:C1:13
Authority key identifier: 76:FB:02:A3:9F:D0:DE:EF:F4:D2:B2:76:11:F0:1E:7D:F3:7E:63:5F
Certificate issuer:       /CN=A9127C39/serialNumber=76FB02A39FD0DEEFF4D2B27611F01E7DF37E635F
Certificate serial:       185F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dvsCo5_Q3u_00rJ2EfAeffN-Y18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127C39/26294668D0D911E797AFD910C4F9AE02/dvsCo5_Q3u_00rJ2EfAeffN-Y18.mft
Manifest number:          1824
Signing time:             Mon 22 Dec 2025 16:18:32 +0000
Manifest this update:     Mon 22 Dec 2025 16:18:32 +0000
Manifest next update:     Mon 29 Dec 2025 16:18:32 +0000
Files and hashes:         1: dvsCo5_Q3u_00rJ2EfAeffN-Y18.crl (hash: I5xTL6ycuzvywsXGz57Nb8mDQw7EaxLZfAsJRv0rnW4=)
                          2: 2D72E2E0D2F111EFB73B6249C4F9AE02.roa (hash: FeuqzjF8rJPkacZzUKGZMgqA+cPMBZD6yNzQnLtg2j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127C39/26294668D0D911E797AFD910C4F9AE02/dvsCo5_Q3u_00rJ2EfAeffN-Y18.crl
                          rsync://rpki.apnic.net/member_repository/A9127C39/26294668D0D911E797AFD910C4F9AE02/dvsCo5_Q3u_00rJ2EfAeffN-Y18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dvsCo5_Q3u_00rJ2EfAeffN-Y18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 16:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6239 (0x185f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127C39, serialNumber=76FB02A39FD0DEEFF4D2B27611F01E7DF37E635F
        Validity
            Not Before: Dec 22 16:18:32 2025 GMT
            Not After : Dec 29 16:18:32 2025 GMT
        Subject: CN=69496f58-0b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:b0:eb:43:66:34:5f:9f:66:d5:d7:a6:7d:
                    b7:e6:e0:1f:c9:48:65:2e:c9:e0:64:c5:9e:f2:85:
                    33:e5:55:cf:25:67:40:57:73:9c:e7:0b:b0:18:c3:
                    d9:fc:16:5c:08:da:ac:38:6d:06:a9:af:d5:02:e8:
                    aa:18:d2:ea:60:64:2b:33:f3:36:22:0b:51:f0:32:
                    a3:cc:8b:a1:1e:2b:88:15:15:be:ab:48:8d:8a:45:
                    8e:b3:b5:23:6a:d5:9e:6b:5e:41:49:4d:4d:57:1a:
                    23:f3:d0:75:85:97:41:40:98:78:6f:a4:2c:6a:d9:
                    17:fe:ca:7f:1f:fe:8d:70:5f:0f:71:65:9c:90:13:
                    54:d3:f4:e1:7d:10:95:58:fd:e4:a0:c6:8d:00:48:
                    c0:2c:05:45:58:a0:43:bb:91:24:19:74:69:a0:92:
                    f9:02:8b:ee:de:b1:24:98:8b:dc:d6:f5:36:b3:03:
                    9b:22:c6:68:7d:e2:7a:22:76:8b:2e:09:9b:f5:2a:
                    7d:21:b8:1b:88:57:52:f9:8d:58:e2:69:f2:e1:2e:
                    ca:82:bf:62:6b:ed:98:66:52:16:e6:90:53:c3:f5:
                    f3:2d:aa:fd:b7:7a:40:52:2f:1d:cd:48:76:8a:ec:
                    0f:b7:76:29:5b:06:b0:07:68:34:5d:5a:a7:81:1d:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:87:96:7A:B4:B3:57:7C:B3:CC:39:D3:17:B1:C9:B4:61:40:C1:13
            X509v3 Authority Key Identifier:
                keyid:76:FB:02:A3:9F:D0:DE:EF:F4:D2:B2:76:11:F0:1E:7D:F3:7E:63:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127C39/26294668D0D911E797AFD910C4F9AE02/dvsCo5_Q3u_00rJ2EfAeffN-Y18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dvsCo5_Q3u_00rJ2EfAeffN-Y18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C39/26294668D0D911E797AFD910C4F9AE02/dvsCo5_Q3u_00rJ2EfAeffN-Y18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0a:37:d7:fc:3b:bd:49:91:cb:99:61:d6:e6:9b:5c:48:59:
         42:8d:f0:d4:ce:74:a3:cd:6e:78:55:de:6e:ec:25:78:86:e0:
         e1:17:13:74:6b:af:24:45:dc:d7:ff:87:20:c7:3a:5c:30:95:
         7c:3a:00:20:00:18:39:f3:3b:0d:1f:ae:73:db:8a:97:ea:a8:
         63:25:34:f5:24:74:44:8c:f2:1e:1b:56:1b:c2:d4:c8:a0:ee:
         0e:ad:60:47:d9:78:a9:d8:7f:d7:3f:fc:5f:c4:e8:98:2e:fe:
         df:82:c6:f8:c3:0e:d6:7d:ee:11:3a:93:37:c4:d0:0d:15:e0:
         0f:f2:e2:ce:ac:ec:ab:9f:e4:bd:c5:bc:1e:a9:ff:41:ea:d9:
         dc:09:23:8b:29:88:45:a9:14:eb:bd:49:66:c6:f3:bb:17:d8:
         83:b2:22:3e:23:19:b0:73:ca:6b:87:d5:03:c0:58:39:d1:27:
         16:cc:bf:13:a4:d3:de:86:2f:73:62:60:26:98:72:1a:20:c8:
         ce:ae:dc:f9:2b:ee:28:42:20:66:f2:d5:f7:61:90:ea:05:7b:
         6b:85:b6:54:4e:09:c8:c4:f4:4a:25:a5:2e:0e:43:8b:3d:cc:
         5f:bc:57:46:f1:67:a1:6f:fa:a2:03:15:5f:55:2e:69:73:24:
         7e:bf:80:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:41 2025 by rpki-client