This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
File:                     vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json)
Hash identifier:          0m5bHTPKULQgeYlBjSlcJko+lewK67PPLCk56pWuJsI=
Subject key identifier:   BB:B8:04:17:99:CD:2F:23:A3:18:6C:F3:A9:73:1A:BB:E0:28:1E:36
Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
Certificate issuer:       /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
Manifest number:          0160
Signing time:             Sun 07 Dec 2025 02:24:29 +0000
Manifest this update:     Sun 07 Dec 2025 02:24:28 +0000
Manifest next update:     Sun 14 Dec 2025 02:24:28 +0000
Files and hashes:         1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: hDUmy7blUWKsAxyLvXbbzZxIDXO4R3TR0OLqcHKJguo=)
                          2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: MNtM9pXu4p6v7Z7f6/Wop8L0VMv9VFX8mmGYuSjaQTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
                          rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
        Validity
            Not Before: Dec  7 02:24:28 2025 GMT
            Not After : Dec 14 02:24:28 2025 GMT
        Subject: CN=6934e55d-a76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:71:a7:4c:48:d7:e5:5a:1f:bd:bb:28:a6:
                    d7:b3:dc:83:36:d6:80:9c:aa:84:3e:25:d9:5e:5b:
                    48:d3:a7:20:30:f3:f1:5d:37:28:24:bd:0f:65:b0:
                    0c:1a:8f:ab:0c:74:72:fd:fa:85:05:5f:39:20:82:
                    72:f3:02:d4:e4:70:23:dc:8a:8e:13:bd:57:bd:77:
                    7f:57:6d:e0:b6:5b:b3:32:7d:8f:3b:ea:87:d9:4b:
                    f3:29:97:67:e7:c1:fe:e4:5d:03:19:81:46:14:a1:
                    16:1a:20:ec:10:5c:fe:3c:7d:df:19:4f:bc:8b:cc:
                    ff:e3:00:c6:fa:e9:5f:0c:49:b0:08:67:25:40:65:
                    6c:aa:9a:d6:e3:f5:a5:f7:be:13:4d:65:dc:01:a0:
                    9c:69:3f:be:85:7d:c9:3b:69:26:b5:26:04:27:75:
                    5e:a1:68:c3:70:f4:b1:98:68:e1:fc:4e:c9:ad:10:
                    45:6a:2c:03:74:bc:80:af:57:78:3d:f2:55:62:a0:
                    b2:03:d2:0d:83:b8:3e:1f:ee:da:49:6a:7e:b3:41:
                    bf:e3:40:8d:96:05:c4:63:1d:82:9d:78:57:3a:80:
                    a0:8e:0b:99:cf:a2:6e:77:c8:01:98:47:57:92:ac:
                    f5:78:12:ab:55:50:fb:20:e5:ec:91:14:1a:bd:57:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B8:04:17:99:CD:2F:23:A3:18:6C:F3:A9:73:1A:BB:E0:28:1E:36
            X509v3 Authority Key Identifier:
                keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:25:28:71:0e:ff:48:67:19:33:4c:80:0e:54:ca:01:bf:
         ee:fb:48:e5:06:ed:7c:9e:14:d7:1b:f1:0b:7c:82:30:34:9f:
         81:6c:50:43:80:a3:47:96:75:09:3b:d2:3f:43:eb:80:17:fa:
         f3:19:a4:cd:de:9a:69:97:bf:94:e6:b4:5b:ee:16:36:54:9a:
         41:2f:e6:2d:fd:68:6c:78:8a:52:6c:0a:5f:32:52:b2:0e:59:
         a2:c0:39:ef:ee:bd:e0:59:60:4d:7c:3e:26:e1:39:2b:b0:b8:
         ed:9f:1d:4c:fc:d5:5c:a5:e5:71:cb:82:ea:d5:78:d5:7f:2b:
         f6:cc:81:52:1c:af:08:6f:21:7b:e1:ed:44:1f:70:49:ef:a1:
         44:4c:e3:9c:a1:86:a0:fe:a4:7c:f2:e7:81:1c:25:3f:da:84:
         99:ea:90:c6:43:8f:1f:b2:5a:46:d6:69:1d:b8:f0:f6:87:74:
         ef:1b:a0:b1:5d:c2:40:f5:5c:a0:2e:61:f3:30:1a:1c:b6:a3:
         83:c8:a6:0d:68:35:98:2d:94:3f:4b:30:93:a3:fe:6f:60:07:
         3f:41:ef:13:c7:df:e5:27:f1:f8:d1:0e:60:46:f5:32:83:a1:
         f0:a4:20:fc:72:d9:b0:84:9d:9d:a0:c0:15:55:bb:8f:08:e5:
         fc:07:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 12:22:52 2025 by rpki-client