This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft
File:                     V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft (raw, json)
Hash identifier:          3/So7IX9mfjTyp5L9TYQ9xpVNxQArQWsT1fTsu7QRTc=
Subject key identifier:   BE:00:55:13:EE:00:A8:26:C6:A8:6C:D0:23:E1:2E:FC:D0:20:00:7D
Authority key identifier: 57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7
Certificate issuer:       /CN=A9132DF5/serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7
Certificate serial:       0F6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft
Manifest number:          0F64
Signing time:             Wed 24 Dec 2025 17:17:22 +0000
Manifest this update:     Wed 24 Dec 2025 17:17:22 +0000
Manifest next update:     Wed 31 Dec 2025 17:17:22 +0000
Files and hashes:         1: V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl (hash: w7cYzJ3x3kPPWzlXhJ9sAbhpqRLKv5J7jdzfapbV9uA=)
                          2: 3058390A7C4511E984DEA431C4F9AE02.roa (hash: 9rDCv+WsiAPR7NnxfH7AASwbAfQNHmC84LRbeE1lu4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl
                          rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3948 (0xf6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132DF5, serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7
        Validity
            Not Before: Dec 24 17:17:22 2025 GMT
            Not After : Dec 31 17:17:22 2025 GMT
        Subject: CN=694c2022-f2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:fd:df:c8:b0:9b:af:a0:db:9a:de:7b:67:
                    40:15:07:71:90:b9:6f:12:70:3a:0c:96:ab:d7:3b:
                    52:6b:55:a4:b4:46:33:d6:4d:1e:b4:b3:0b:44:ca:
                    f4:f5:a9:48:07:36:7f:c5:eb:65:7c:f8:90:c9:dd:
                    7c:95:64:46:85:ff:8b:7e:13:1c:d8:fe:15:25:97:
                    cc:12:f6:dc:65:39:48:ab:71:1c:ed:ab:ec:6c:c2:
                    d5:f0:b2:d3:a6:13:2d:7e:dd:87:ab:e1:d5:a6:fa:
                    13:c5:e9:7c:6c:6a:c7:f5:cc:14:9e:e5:db:c8:45:
                    c3:d7:95:e8:62:fe:a6:6d:c7:2d:8e:fc:1c:13:84:
                    a8:11:98:20:de:30:8b:8d:e8:6c:f0:f6:a8:b9:11:
                    5b:b6:86:24:11:5b:b6:16:cf:0d:72:c1:12:b5:db:
                    1b:56:af:a6:b8:de:a2:24:ff:4b:93:71:11:d0:6f:
                    0d:ae:27:cf:69:61:5b:c0:9e:f2:64:99:59:bc:e5:
                    37:90:87:96:67:c2:33:32:02:71:9c:3a:20:5f:e8:
                    c8:86:18:f7:64:fa:8e:c4:5d:b3:af:81:a3:9a:48:
                    03:2a:98:06:7f:10:fe:5b:ec:4a:81:cb:c9:e1:f1:
                    4f:c7:93:b3:41:c9:4f:f6:5b:ce:51:36:8d:2a:a9:
                    db:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:00:55:13:EE:00:A8:26:C6:A8:6C:D0:23:E1:2E:FC:D0:20:00:7D
            X509v3 Authority Key Identifier:
                keyid:57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:62:42:90:7b:96:f4:83:dc:95:79:5b:67:61:e4:3b:ed:da:
         e0:6f:d1:30:4d:45:30:32:5d:78:fb:92:ea:19:ad:30:9e:9f:
         71:06:8f:66:8c:8f:9e:3d:6e:f4:2f:81:35:ed:13:73:91:78:
         1e:90:69:b5:8b:83:50:cd:4b:00:8a:1e:8d:23:03:15:06:43:
         7e:bb:68:c4:bc:a1:00:06:20:c1:c8:f6:80:b0:eb:5f:90:cd:
         86:35:98:26:c9:17:de:0b:7a:df:7f:26:68:a8:8c:11:33:e5:
         fc:f4:85:04:3e:79:00:ee:cf:ad:86:24:12:e6:6e:ad:95:5d:
         4e:a2:69:c3:74:3c:85:6c:52:56:4d:4c:73:2e:38:a3:2a:97:
         1f:34:7d:30:e9:8b:a7:1a:dc:ac:64:cd:8c:ef:d5:ab:3a:a1:
         41:11:20:a2:3d:d9:f3:dd:4e:bc:3b:70:a4:2a:76:c6:bd:9b:
         56:a7:9b:71:8b:40:27:7d:bb:05:46:3f:4d:4f:21:c9:0e:0c:
         95:59:4d:ef:21:e4:55:2f:b7:37:37:a2:a6:51:84:57:45:61:
         f7:20:a4:67:ef:2d:7b:56:30:83:42:63:2b:f5:14:b2:79:c6:
         3d:e5:a9:06:0b:1a:ad:c8:88:da:70:49:15:18:0b:23:07:18:
         4c:b2:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:21:23 2025 by rpki-client