This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft
File:                     VWyosJdH0HtvaiekBVKNOfpbgkw.mft (raw, json)
Hash identifier:          eDVq5FxGywgiB9u59QlgzL05KXw+hD2m+62RjPFbWu8=
Subject key identifier:   0F:74:11:70:65:88:2B:4E:70:55:DC:92:C0:73:30:6A:DA:B6:15:58
Authority key identifier: 55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C
Certificate issuer:       /CN=A912A4D7/serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C
Certificate serial:       08F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft
Manifest number:          08F1
Signing time:             Wed 24 Dec 2025 19:47:40 +0000
Manifest this update:     Wed 24 Dec 2025 19:47:40 +0000
Manifest next update:     Wed 31 Dec 2025 19:47:40 +0000
Files and hashes:         1: VWyosJdH0HtvaiekBVKNOfpbgkw.crl (hash: /9LrhyFf24mWJHw2U9LurLuS4Knf31m7JKbTa/QjwMY=)
                          2: 3C24D492BF6911EAA877B317C4F9AE02.roa (hash: NZkd996OCXD4hErR3DmhrfGKjBgYP///vRBLCCwugg0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl
                          rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2297 (0x8f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A4D7, serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C
        Validity
            Not Before: Dec 24 19:47:40 2025 GMT
            Not After : Dec 31 19:47:40 2025 GMT
        Subject: CN=694c435c-311b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:59:72:78:5e:25:7d:a6:36:55:bf:33:67:
                    2f:ea:99:65:97:f0:68:57:fc:40:9d:19:6b:b9:71:
                    75:cc:45:00:a8:75:11:88:31:a7:ef:e7:c7:d9:59:
                    71:79:72:2f:32:ff:47:1c:66:bd:3d:9d:41:e2:a2:
                    16:ed:ba:a4:67:cd:0d:ad:e3:5a:40:93:0e:c8:d3:
                    15:7d:33:a4:b4:21:a1:2e:12:ac:2f:77:46:4c:16:
                    84:5c:48:04:a6:8b:17:53:da:b1:ba:3d:72:12:e8:
                    91:26:f4:9a:76:e8:57:9d:cd:99:d3:92:31:46:98:
                    eb:39:90:3e:1c:22:31:9c:2f:b4:39:d2:cb:f0:c8:
                    3b:32:97:cc:51:e4:66:3f:a6:db:c1:27:bc:f1:56:
                    cc:e5:65:7b:dc:1c:ab:75:12:8b:8c:a9:e7:fe:41:
                    9b:b6:66:54:90:3e:3d:d9:d1:d6:be:01:82:9d:d5:
                    e3:cb:45:33:9d:22:5e:62:aa:4a:f6:88:e1:98:65:
                    c6:eb:a9:f1:e3:a9:f5:82:0d:ac:9e:fe:6e:90:c3:
                    e7:80:2b:f2:76:42:5a:af:b9:a9:40:4b:6d:78:6e:
                    5b:20:e9:1e:30:74:e8:6c:22:a7:4a:b9:94:49:c5:
                    86:64:73:8d:20:57:51:f8:9f:6e:02:d9:48:87:b7:
                    60:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:74:11:70:65:88:2B:4E:70:55:DC:92:C0:73:30:6A:DA:B6:15:58
            X509v3 Authority Key Identifier:
                keyid:55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d2:77:de:70:d5:a7:92:d8:41:e4:92:e3:d2:69:fb:ed:99:
         c2:8d:69:69:a7:87:2d:38:cc:43:a4:7e:15:22:01:b0:75:cd:
         c5:68:25:3c:9d:71:65:57:ec:c6:e4:12:38:0a:1d:cf:34:2d:
         da:eb:f4:4f:61:86:f5:df:3d:5f:ea:f3:f8:c5:77:d6:c3:ec:
         6b:d8:87:81:ed:7a:08:70:07:ac:06:a3:71:f5:3b:62:91:aa:
         1d:a3:7b:7e:9b:b0:11:03:a0:16:fd:07:55:76:01:94:aa:d8:
         bf:ae:6f:92:94:60:88:ce:5c:d4:8c:11:04:07:79:d1:be:00:
         b9:f0:50:a0:cb:3b:71:6e:f0:9d:48:c4:b5:52:16:2f:d7:63:
         5e:94:60:4d:c5:6d:ac:31:9b:5c:8f:25:40:b8:8d:df:f5:da:
         96:0a:4b:ca:33:cf:67:ce:78:6c:cf:bf:67:34:ac:3d:95:de:
         d4:e4:46:aa:0b:fd:3f:67:fb:62:47:27:0f:94:81:cf:d0:77:
         e7:59:ca:9e:f4:b8:8f:4b:1e:54:3f:b4:58:fa:64:22:8b:97:
         30:4a:09:71:d7:3f:c5:c6:93:fe:06:c5:0e:bf:4d:01:38:1d:
         2c:ed:d8:e3:2c:7f:fa:c9:1d:92:f5:16:44:da:55:4b:7d:63:
         9b:15:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:23:59 2025 by rpki-client