This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft
File:                     VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json)
Hash identifier:          25oOBAWVITMn2ASrW3mGmORxOcfAD4owyHCbMa9dzGY=
Subject key identifier:   D8:9D:A2:C7:F6:6A:14:7D:BA:12:A0:FC:C5:16:7C:F2:75:6A:72:BA
Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9
Certificate issuer:       /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft
Manifest number:          014F
Signing time:             Fri 19 Dec 2025 03:24:52 +0000
Manifest this update:     Fri 19 Dec 2025 03:24:52 +0000
Manifest next update:     Fri 26 Dec 2025 03:24:52 +0000
Files and hashes:         1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: 3eeis+5Q8kSXHapFnx44PJVp+kS4UdjcFJe/N8bLEkc=)
                          2: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (hash: x0R7/aV5SAgSCY1aeBWFVSWK6YKsQh3+SMh4O+dO85w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl
                          rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 03:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DAC0, serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9
        Validity
            Not Before: Dec 19 03:24:52 2025 GMT
            Not After : Dec 26 03:24:52 2025 GMT
        Subject: CN=6944c584-beca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:88:90:2d:29:b0:09:5b:d4:4a:b4:12:7d:46:
                    b1:93:6b:8d:4b:0b:90:11:b4:34:c7:37:26:62:9f:
                    18:68:89:2b:5a:2e:41:04:ea:e4:14:2c:67:76:0d:
                    ad:cf:f2:3f:f9:6a:58:5b:0f:37:68:e5:2f:52:73:
                    e8:5c:b2:68:a0:77:dd:5b:88:ad:81:05:a1:1b:0a:
                    40:3e:7a:a4:75:d4:22:2f:77:57:70:71:65:d8:74:
                    76:c7:d4:99:3a:a9:4a:cb:2d:74:3a:84:fa:f7:dd:
                    fb:df:09:73:28:c7:be:ec:ce:e5:56:27:58:ce:b2:
                    fb:72:3f:e2:8d:ef:f9:8f:93:4d:c6:24:73:f9:f3:
                    9c:87:72:9b:84:7f:61:ca:07:f5:d9:4d:17:94:e4:
                    34:ff:5f:56:84:e1:b3:1f:9a:4d:00:04:6a:49:9a:
                    bf:34:47:93:0a:d6:2f:37:66:9b:03:98:c2:54:d5:
                    ff:95:6a:e1:18:35:8d:30:7f:22:23:36:ec:67:ed:
                    e2:d7:01:b3:da:9d:b4:59:1f:b5:87:e6:d0:66:54:
                    ce:92:12:d7:ea:a8:74:7f:29:02:e6:48:a1:0b:47:
                    07:67:ff:6f:cc:7d:eb:d5:fd:52:dc:7e:c1:51:03:
                    b8:10:a1:ca:9c:98:dd:b9:92:95:89:54:f0:01:15:
                    a7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9D:A2:C7:F6:6A:14:7D:BA:12:A0:FC:C5:16:7C:F2:75:6A:72:BA
            X509v3 Authority Key Identifier:
                keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:d4:f4:19:7a:ff:68:2a:91:17:51:d0:aa:52:99:85:b5:
         e0:ee:9b:c2:42:a4:e1:0b:ff:c4:77:ee:65:cc:2a:a1:2f:30:
         d0:c5:86:0b:85:f6:6a:d7:68:b5:41:1a:e7:2b:49:88:85:67:
         49:43:4c:33:c7:be:62:3e:f9:7e:a9:8c:e3:21:24:7e:77:17:
         b5:9a:eb:c2:d8:81:bd:44:48:83:44:be:51:7b:00:0a:d0:64:
         96:bb:cb:c1:f4:63:78:c3:21:0d:70:6b:02:0f:c4:90:48:cd:
         2a:e5:07:6b:ab:96:0a:b0:49:5c:d0:4a:38:b9:db:28:b4:dd:
         4e:2c:c0:94:7a:65:2c:6a:db:de:c0:d3:f4:48:a3:41:3d:02:
         d0:3c:e9:ec:34:33:65:13:06:d4:51:6c:bc:c6:a5:9a:a9:90:
         a9:68:83:83:fe:1d:db:f7:e7:87:dd:1a:60:c7:b2:28:53:c9:
         d2:1d:91:3d:16:5e:10:db:d4:cb:b7:a2:6b:c7:16:62:b0:b9:
         f6:6a:64:f1:d6:10:f6:b8:f4:c7:ae:fb:52:a3:93:49:38:e1:
         ce:a5:73:8b:31:75:dc:76:72:cb:a5:1d:a7:f4:bf:a3:d3:59:
         69:9c:38:56:ee:f5:10:55:04:a2:04:f9:f9:e7:8a:37:03:32:
         65:ee:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:36:46 2025 by rpki-client