This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
File:                     VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json)
Hash identifier:          M0mI3kOc7Zo6gFjt2g2xBria3FWU3CirFPVQClTy8EY=
Subject key identifier:   83:E5:FF:CD:1D:C3:FE:A0:CF:D4:58:91:72:3B:09:57:F3:D4:1E:4E
Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D
Certificate issuer:       /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
Manifest number:          A2
Signing time:             Tue 23 Dec 2025 05:15:34 +0000
Manifest this update:     Tue 23 Dec 2025 05:15:33 +0000
Manifest next update:     Tue 30 Dec 2025 05:15:33 +0000
Files and hashes:         1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: kQYSL/+FLJwZ+9bA7C0C4PefPDqIaPx5A2CDaDYpRvg=)
                          2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: RGby5CWUvljyTQmbtKXFF+09T5sv2LL/jpj1mhUT/QE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl
                          rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
        Validity
            Not Before: Dec 23 05:15:33 2025 GMT
            Not After : Dec 30 05:15:33 2025 GMT
        Subject: CN=694a2576-ff35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:bd:d7:9e:82:e7:26:6b:2c:10:6e:6d:81:
                    e3:92:f6:76:ac:8b:6c:20:34:be:d0:5d:53:6e:bb:
                    ee:07:43:48:69:18:5c:65:0a:45:86:c6:52:7c:16:
                    ba:37:5a:40:45:44:bf:81:27:25:fb:a1:88:a2:77:
                    31:11:73:ca:2e:6f:c5:2f:ae:7f:69:68:2c:65:cf:
                    2c:0d:ee:97:36:8c:6f:fa:9a:09:11:5c:92:c5:c3:
                    c9:84:85:e8:27:6f:fc:d2:57:f3:03:7d:89:25:b7:
                    7c:1b:de:6a:fe:1b:d5:bc:ac:ed:4d:cc:36:2d:3a:
                    d6:51:42:f1:73:b4:4b:cd:32:ba:40:f3:a5:d4:6c:
                    53:ff:45:a6:8b:08:6c:ab:9f:e1:8d:34:c9:98:c4:
                    fa:1f:eb:51:ca:f6:0b:5b:53:b5:61:c3:89:9f:23:
                    5c:0a:91:52:9d:b5:09:7b:4e:c3:20:07:e1:00:26:
                    75:8e:af:45:a4:04:f3:8b:25:93:bd:24:23:96:f2:
                    59:8d:42:63:fe:41:d2:68:c1:1a:38:4e:c9:3b:49:
                    6f:2c:30:06:c0:bb:41:10:4c:e4:b1:74:71:2a:e6:
                    7c:f9:2d:e4:43:2d:a9:cf:be:b4:7e:d6:a0:2e:68:
                    2b:52:c5:21:44:eb:0c:e2:37:6e:b8:a8:56:9e:1b:
                    cb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E5:FF:CD:1D:C3:FE:A0:CF:D4:58:91:72:3B:09:57:F3:D4:1E:4E
            X509v3 Authority Key Identifier:
                keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2c:64:0e:b6:0a:84:d7:61:d0:cf:75:92:ad:d0:64:96:1d:
         38:3f:5a:3b:f3:1d:16:c7:0d:c8:38:3f:21:9d:0f:33:ce:9b:
         20:3e:9b:4a:82:f0:91:8a:b2:c9:83:0f:0d:a8:29:14:48:b5:
         6c:86:9b:db:42:b9:eb:f7:a9:f9:55:36:58:6d:e5:95:68:41:
         dc:a7:59:77:19:f9:6e:5c:13:a6:0c:09:a6:1f:12:47:a8:16:
         2f:f6:26:a3:4f:6f:43:ac:8d:5c:54:a7:d9:ff:06:be:70:3c:
         b0:ec:aa:a4:6f:75:7e:a1:78:73:8e:4b:2d:a4:b8:6c:7a:3b:
         aa:25:3a:fc:f6:dc:7b:ac:3d:36:ec:6c:b1:5c:f1:87:51:13:
         14:ed:21:54:0e:c3:83:18:95:7b:7e:59:60:9c:a4:53:15:9c:
         c4:39:35:f0:fa:32:03:e2:49:64:53:4d:66:68:7c:b4:48:30:
         46:15:11:e6:2f:df:e3:cb:78:e1:fd:d3:22:5d:9b:8d:88:cf:
         52:5a:b4:c6:b1:99:02:89:7c:f5:ac:cc:93:8a:d6:ba:27:a0:
         7a:6d:b6:c6:4a:1e:d5:7d:f9:3d:99:d9:b1:a0:87:a4:d5:91:
         a5:4e:ca:0e:33:fb:95:5d:1c:b2:5f:20:83:c2:3e:3b:f1:9d:
         30:ae:78:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:24 2025 by rpki-client