This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
File:                     vJfyb7J4ln3TyjnFndCMaiwjBvk.mft (raw, json)
Hash identifier:          CzmQ1L+1hdk8oq3lvo/dRpwzfnODwoEB/vQ6KEsTRYs=
Subject key identifier:   96:AC:AA:82:58:4E:42:5B:3E:92:0A:5C:6A:5D:65:9D:2F:FB:E4:4F
Authority key identifier: BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9
Certificate issuer:       /CN=A9171845/serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
Certificate serial:       0544
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
Manifest number:          053B
Signing time:             Mon 08 Dec 2025 22:04:04 +0000
Manifest this update:     Mon 08 Dec 2025 22:04:04 +0000
Manifest next update:     Mon 15 Dec 2025 22:04:04 +0000
Files and hashes:         1: vJfyb7J4ln3TyjnFndCMaiwjBvk.crl (hash: KPQ5ApmtN1Qca3xvmG3OBupfX1Kuj2Xqi6F4HjKWd5k=)
                          2: 8B91EDB420CD11EC97292B78C4F9AE02.roa (hash: lu1tvmrK1UL4Y/2Rq1YIX+Lb2/NNmqFCgC6huHfwCqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 22:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348 (0x544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
        Validity
            Not Before: Dec  8 22:04:04 2025 GMT
            Not After : Dec 15 22:04:04 2025 GMT
        Subject: CN=69374b54-d73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:a0:61:3a:2a:e4:27:6a:93:7d:13:01:38:
                    f3:42:33:3f:6b:a4:c2:99:f4:37:76:cb:d5:87:a1:
                    2c:ff:6f:62:ee:4f:cf:5e:be:6b:14:19:d4:c7:57:
                    15:36:dd:67:9b:d4:d7:a5:e1:23:df:79:ac:0a:a8:
                    4f:00:e9:38:ec:1c:18:74:bd:ea:66:cf:70:d3:d1:
                    df:f5:c3:2d:a8:c0:73:df:a1:94:3a:70:f9:d9:c4:
                    95:f0:fe:07:b9:a5:ad:98:ff:91:61:f4:bc:16:b1:
                    2e:9a:3d:40:24:b6:4b:47:7a:24:39:21:86:2a:5c:
                    61:bd:43:47:27:44:f2:77:c3:c6:6b:82:70:c4:9e:
                    7f:fa:2a:0c:f1:b0:33:64:93:56:d1:8e:94:f7:d0:
                    44:89:88:b5:1c:f4:9a:02:af:c1:b7:62:42:01:44:
                    d0:d9:e4:4e:0d:7c:9a:e8:a8:68:f6:c6:6f:b3:77:
                    e3:56:b2:b7:2f:a6:ef:2f:c0:ab:aa:9e:11:00:d3:
                    15:19:35:ce:0e:ad:e2:2d:5e:32:5e:b6:a9:23:6b:
                    3a:8d:88:e9:4b:17:e7:0a:49:85:9d:b9:a2:5a:c6:
                    04:d5:e2:50:43:63:79:4e:03:13:db:50:73:69:68:
                    72:1d:e4:c0:e5:ef:c3:6b:60:c8:65:ad:a5:67:4a:
                    52:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AC:AA:82:58:4E:42:5B:3E:92:0A:5C:6A:5D:65:9D:2F:FB:E4:4F
            X509v3 Authority Key Identifier:
                keyid:BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:34:40:7f:99:23:83:31:35:b0:ea:07:b8:18:b2:0d:93:7f:
         20:b6:db:18:fd:95:b3:29:fb:45:f9:96:a4:8f:35:16:a5:59:
         19:5c:3a:69:9d:ae:45:6a:35:58:68:07:f5:60:24:26:ac:a9:
         6b:2d:e0:b0:6f:df:d3:f2:d9:e3:82:e9:5a:8c:ab:de:8e:cf:
         dd:75:34:39:88:39:c0:0e:3a:68:64:7e:46:79:dc:4e:cc:f8:
         c7:60:5a:ea:14:3d:7a:87:3b:59:48:46:00:fe:b4:f1:4a:a1:
         52:f4:6e:25:a7:99:db:3f:c1:a6:55:d9:c2:a8:79:89:13:84:
         9a:14:53:a9:88:66:1d:2d:74:70:11:30:56:c1:6e:d2:cb:fe:
         51:bc:51:ff:07:67:51:b9:90:47:ab:a7:8f:82:e5:ef:51:5b:
         13:7f:87:fe:e1:a3:d3:d6:72:06:71:d1:f5:10:02:ac:b6:4c:
         2e:1b:d7:b5:8b:d1:2d:01:91:e8:be:f3:1b:e6:20:13:21:d2:
         aa:e2:5b:37:81:9d:cd:0c:04:a1:74:74:da:04:f5:91:34:1d:
         8c:d1:4b:8f:9b:51:ff:2b:4e:ce:87:7e:1e:49:6e:19:86:f2:
         bc:a9:01:40:d1:37:ef:a8:6a:61:5d:1c:11:2e:02:c1:40:6c:
         bb:03:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:33:16 2025 by rpki-client