This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
File:                     _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft (raw, json)
Hash identifier:          BKPt1AwLoSwqm9T88HTlXziRJVtYkaMCDV/attHMbNc=
Subject key identifier:   DE:7D:BD:DC:A9:6C:B4:48:42:F8:18:A0:92:08:DE:BA:1E:08:E4:ED
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Certificate issuer:       /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
Manifest number:          F8
Signing time:             Tue 23 Dec 2025 04:17:41 +0000
Manifest this update:     Tue 23 Dec 2025 04:17:40 +0000
Manifest next update:     Tue 30 Dec 2025 04:17:40 +0000
Files and hashes:         1: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl (hash: mK1FVK2VavuuoFKH06JK9+pPiZJIeDyRLXATikSJuX8=)
                          2: B538B552701211EFB6868329C4F9AE02.roa (hash: 5dSL8DOy/WJ/deJlqUIkaVszqeWmawzFbSAiDop9ztg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
                          rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
        Validity
            Not Before: Dec 23 04:17:40 2025 GMT
            Not After : Dec 30 04:17:40 2025 GMT
        Subject: CN=694a17e5-37a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:03:01:8d:ef:1b:af:79:9d:60:fd:a5:51:
                    c5:29:5d:d1:1d:63:70:a4:41:d6:5c:0c:57:eb:be:
                    71:bb:1e:78:77:a5:d1:6a:0f:fc:5b:cd:f8:eb:1c:
                    fe:33:38:47:e5:d0:6a:c5:c2:be:05:87:db:82:14:
                    b7:b5:7c:18:11:13:d0:cb:33:df:58:41:e9:7a:1b:
                    fb:0b:f9:5d:c1:25:28:f8:16:cf:2f:92:e2:02:3e:
                    91:62:5a:02:8e:17:a2:7f:fc:36:3e:74:61:71:33:
                    9d:fa:31:80:b3:16:13:bd:6c:ea:f2:1b:f4:e1:ee:
                    dd:59:1c:02:80:ee:a0:e2:ab:d5:ab:ac:50:81:14:
                    5e:cc:5c:5d:23:80:f9:be:94:37:cd:64:f0:d0:60:
                    25:db:ad:c4:0d:b5:ab:f1:72:2d:7e:fe:57:f2:43:
                    28:80:b2:66:1c:02:06:0e:f3:ac:2d:89:21:5f:38:
                    69:16:2b:09:6c:1c:9c:c7:24:55:ee:a8:7c:75:df:
                    ec:8d:13:f8:54:53:40:4d:ea:4a:23:34:44:f0:84:
                    dc:bd:4e:01:64:3f:08:14:b6:85:15:64:a0:65:44:
                    ec:13:0f:55:a0:11:fb:c1:70:0e:23:4a:a0:ff:3d:
                    b4:6a:99:45:cb:b5:73:ee:06:0c:6b:98:83:ec:b8:
                    f6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7D:BD:DC:A9:6C:B4:48:42:F8:18:A0:92:08:DE:BA:1E:08:E4:ED
            X509v3 Authority Key Identifier:
                keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f1:57:d6:9f:d6:f0:2b:18:d2:f5:cf:d1:42:54:5b:62:ff:
         0c:b0:bb:bc:29:f9:e8:c0:a8:46:b3:bf:76:aa:fd:cd:92:84:
         42:a5:05:a8:2b:70:71:98:d5:86:b1:ad:96:79:62:d1:94:24:
         0e:a3:26:b6:8a:ad:68:a2:de:e0:88:73:2e:9b:9e:8e:06:b6:
         c1:0e:c0:ee:91:79:58:52:6e:37:87:c8:0c:e4:a0:ea:8f:6b:
         1b:f1:da:1d:eb:1c:34:04:85:69:62:40:5b:e1:7b:4d:88:5d:
         a5:9e:91:b7:22:32:b1:4e:13:15:0e:5c:ca:c2:16:2a:90:72:
         a4:a9:33:94:29:39:2c:cf:ec:ed:05:dd:db:7b:3a:35:41:18:
         16:c2:94:60:93:77:a8:1c:d0:23:c8:40:9c:9e:57:9b:da:fe:
         14:84:91:fb:d7:bd:91:c5:5d:d4:96:8d:27:cc:72:3a:93:90:
         93:25:1c:4c:e2:ac:27:ad:ba:2e:b1:5a:34:a6:91:5e:8f:03:
         76:3b:53:f8:58:de:37:62:7a:6d:f8:24:cf:9b:fc:dc:63:44:
         a5:2c:b2:76:67:f1:20:78:01:52:d5:57:e7:5b:e1:8c:5b:2e:
         22:bf:0e:08:b2:42:c4:27:40:99:e7:1c:d0:df:7c:ce:6b:90:
         f8:f2:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:36:04 2025 by rpki-client