This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File:                     VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier:          TGsuphRZnc+Z2Rdxjxt5Iz1PXl8o4jeAeVXQQsgRMCE=
Subject key identifier:   F0:21:68:7C:B2:3E:0B:AA:8B:53:03:7C:2A:0E:6A:BA:9A:FD:42:3D
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer:       /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number:          010F
Signing time:             Tue 23 Dec 2025 03:54:56 +0000
Manifest this update:     Tue 23 Dec 2025 03:54:56 +0000
Manifest next update:     Tue 30 Dec 2025 03:54:56 +0000
Files and hashes:         1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: eJAVWO21EzaVT3LETDmg23PMEjEmKV8N1TGWs7rpY5A=)
                          2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: XqPR58WFjxW/r7vrXermk8/pxwRAohdmERUavDiArx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
                          rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
        Validity
            Not Before: Dec 23 03:54:56 2025 GMT
            Not After : Dec 30 03:54:56 2025 GMT
        Subject: CN=694a1290-cb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:08:0b:e1:52:e6:df:60:11:28:12:cf:d3:f8:
                    46:9b:68:24:5e:03:63:15:ce:77:17:3d:fe:48:48:
                    e6:6c:d8:22:df:f7:b1:6e:db:89:66:f9:02:91:eb:
                    15:1f:f9:fc:6c:0f:c0:09:7a:04:2c:6f:05:03:3b:
                    bd:9d:2b:ac:12:75:b3:71:fc:99:e9:bf:7d:06:67:
                    81:f7:be:c2:f8:30:0a:b3:97:a5:26:49:ca:e5:f0:
                    3e:34:e5:e8:26:3b:0b:d8:5d:19:46:77:80:16:e9:
                    49:bf:f7:0b:22:e2:55:2c:6a:f8:a5:fe:50:88:01:
                    0a:41:6a:93:6a:ad:2a:42:ce:53:78:af:98:62:bf:
                    86:46:8b:08:4b:9a:d7:bc:60:0b:fb:14:f3:cd:2e:
                    b1:51:e1:f9:9b:89:28:90:7c:14:71:84:62:95:ea:
                    19:69:5f:cc:ad:5e:2d:cc:66:57:f3:89:f9:87:31:
                    01:c0:11:de:f6:c7:03:bf:3b:91:84:4d:6e:83:b7:
                    54:fe:8b:18:3d:2e:c6:50:61:0a:68:a4:cd:c1:2e:
                    28:a2:9b:69:59:34:18:26:af:b1:ce:52:9a:39:cd:
                    76:04:2e:ae:94:db:b0:c2:99:52:d8:78:7a:78:0b:
                    79:2a:26:62:52:de:56:53:37:67:16:61:92:7b:5f:
                    05:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:21:68:7C:B2:3E:0B:AA:8B:53:03:7C:2A:0E:6A:BA:9A:FD:42:3D
            X509v3 Authority Key Identifier:
                keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ba:a6:7b:2d:5a:2e:ff:f1:5b:7a:98:f8:94:0e:bd:c7:bf:
         7f:37:6d:5d:a2:18:7b:93:16:e7:08:15:12:9c:6c:5e:16:3e:
         fb:8b:8f:31:b5:40:11:14:5c:94:8e:a5:e1:78:92:ef:ab:36:
         ed:38:b4:82:d6:40:2d:61:79:48:9a:dd:62:3a:f3:8e:0d:25:
         07:10:12:b2:37:37:2e:54:09:db:b9:24:f7:e5:79:a3:b7:ec:
         80:14:c9:a0:7e:3f:ab:94:ab:96:4c:b9:e8:b8:12:bd:52:71:
         64:7f:e3:52:7c:b6:bb:12:6d:56:fe:92:e1:ac:64:0e:6f:fb:
         6a:02:4d:9e:0f:75:6e:e9:f9:f7:bf:00:be:14:03:a1:50:8a:
         f4:c6:3d:da:1f:45:8f:6b:62:55:4f:92:5e:50:6d:e1:09:3a:
         c4:92:cc:f0:8e:20:07:89:70:65:4e:b6:9e:d0:32:b9:22:ae:
         56:e1:a1:1d:b5:17:a0:c4:83:72:94:ae:65:df:fb:95:34:e6:
         f5:1b:ce:eb:45:53:bc:c1:5b:46:e2:54:18:da:ca:de:d9:c0:
         db:ab:61:3b:84:2e:30:e1:35:5b:79:50:5d:1e:eb:35:9d:44:
         39:be:00:02:c7:8e:c7:ab:cd:cf:92:b0:35:4f:cd:0e:3e:dd:
         80:55:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:47:08 2025 by rpki-client