This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
File:                     vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json)
Hash identifier:          rV1jLbXMOqJ1JXY6yl2L4JBjAbPUER2XTVaCPUOanC4=
Subject key identifier:   8C:90:A8:18:33:6F:52:90:3C:D6:7F:A0:EF:C3:8D:EA:6C:0F:EA:F7
Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
Certificate issuer:       /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Certificate serial:       0662
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
Manifest number:          064E
Signing time:             Mon 22 Dec 2025 21:52:32 +0000
Manifest this update:     Mon 22 Dec 2025 21:52:31 +0000
Manifest next update:     Mon 29 Dec 2025 21:52:31 +0000
Files and hashes:         1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: dc1hG8WmNdpsgOMkL251KLWLVtTVGXQC+5HZ6cxY+bM=)
                          2: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: 3m2SQFBv5Jj9U4DJ7yaxwWUfUobTKq/igN4z5bbj3Hc=)
                          3: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: xc/k3wBL9PbMVeZ6NnzVVYqpCqcpVpMHNoEeu9dWgdo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
                          rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634 (0x662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151F3B, serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
        Validity
            Not Before: Dec 22 21:52:31 2025 GMT
            Not After : Dec 29 21:52:31 2025 GMT
        Subject: CN=6949bd9f-e519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:1f:70:45:13:52:7b:93:1f:4c:5c:4d:15:
                    21:c3:ce:9a:60:cd:49:a3:18:d5:39:56:58:64:7f:
                    40:b1:c5:49:e0:0a:8f:a8:bc:78:36:eb:05:ba:85:
                    cd:e6:60:db:b4:71:ab:95:70:e2:d6:41:03:68:c1:
                    7c:c9:ea:d2:1f:7e:58:47:a0:fc:95:ea:96:9a:a1:
                    da:75:4b:19:e9:b3:b4:a8:12:10:1d:04:00:f3:f7:
                    e7:9f:63:92:5b:0b:3e:e7:ca:9f:20:7a:de:12:0e:
                    83:d5:96:b3:36:aa:30:2e:85:e5:ff:73:6e:aa:f9:
                    63:0c:45:a4:71:4b:a3:4f:cf:77:0a:22:ed:e5:90:
                    3d:2f:ef:49:d6:3b:25:c4:9c:da:49:10:d3:23:4a:
                    17:cf:05:f4:87:57:42:bf:e8:80:85:5e:a3:69:ec:
                    69:ad:31:6c:51:fc:64:4e:14:09:69:9d:fc:5f:75:
                    9c:19:64:d9:21:1d:2e:4b:b2:98:4f:0d:81:48:eb:
                    ff:95:e6:f8:56:9e:b5:1a:95:73:27:1e:95:0f:8f:
                    da:69:8a:b9:c3:23:67:03:85:62:53:88:e7:63:bd:
                    c1:ef:2d:3f:e9:7b:4c:64:94:6f:3a:05:d6:11:68:
                    d2:cc:f9:fc:49:e1:fd:88:bb:bd:fd:aa:3c:cd:0c:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:90:A8:18:33:6F:52:90:3C:D6:7F:A0:EF:C3:8D:EA:6C:0F:EA:F7
            X509v3 Authority Key Identifier:
                keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b3:f4:0d:a6:c2:f9:2c:77:9d:2f:71:2f:99:49:dd:16:2e:
         fe:1a:1d:8e:15:a2:52:a9:b3:6d:d7:f9:16:e0:ee:78:3f:b0:
         6d:5b:c7:35:74:80:d6:ca:68:fd:5e:d7:31:85:6f:9c:bc:6a:
         ab:4b:a1:7c:06:66:6e:4c:c9:98:63:9c:8c:0a:c5:a8:be:6a:
         db:ae:6f:2f:9c:3b:11:d2:c0:75:5d:bc:f3:48:1d:1e:66:86:
         f2:de:55:29:01:7d:7a:bc:ca:4b:48:f9:18:ce:cf:90:d4:01:
         e6:d4:61:5c:d1:cc:5d:ac:0d:ad:9d:09:c5:d8:1f:d0:e3:8f:
         a3:e1:44:81:ea:e7:37:c3:3a:2d:38:0a:1c:75:6e:4b:bb:e4:
         c4:e4:36:8d:3a:47:08:65:dc:07:db:42:7c:d9:03:b2:1f:c1:
         f3:cd:61:f7:6a:25:d7:c4:71:d7:9c:12:a2:ec:40:81:a4:dd:
         c8:9f:7f:90:ee:4d:da:35:52:4f:5a:90:fb:fa:1d:05:13:04:
         50:e2:a3:90:3a:89:cf:5f:37:c1:be:9b:06:73:b6:5c:b4:74:
         4d:d9:82:4b:af:b2:65:fe:20:08:4d:c9:08:d5:e6:aa:ea:7c:
         5b:bd:da:75:c3:39:68:23:25:5e:d0:be:fc:9a:d4:b4:82:5c:
         ed:4a:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:58:23 2025 by rpki-client