This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
File:                     VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft (raw, json)
Hash identifier:          4EsKriTcNcZgOAHuNoDg/O4U24KqqP57edIqelDkaXI=
Subject key identifier:   22:2C:63:CC:4E:32:A8:04:11:BA:B9:E3:A7:12:76:D3:99:0A:2F:B7
Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
Certificate issuer:       /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
Manifest number:          0101
Signing time:             Wed 17 Dec 2025 04:41:25 +0000
Manifest this update:     Wed 17 Dec 2025 04:41:24 +0000
Manifest next update:     Wed 24 Dec 2025 04:41:24 +0000
Files and hashes:         1: VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl (hash: SfVxm++Vo9Uuq4DYfp0PtclTLP0/NGWVegVa/yiee7s=)
                          2: CEF77C10FB3811EF8D87CD5DC4F9AE02.roa (hash: XlrGroWLq2F8K9TNvUILoHbQClBvuar5myCI5h2ZPFM=)
                          3: C4C5449EABD111F0A9879016C4F9AE02.roa (hash: 27GDWRqexIzZCkZxT6vxP5UiZyDTasoUQCay0EB/G5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
                          rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 04:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917928F, serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
        Validity
            Not Before: Dec 17 04:41:24 2025 GMT
            Not After : Dec 24 04:41:24 2025 GMT
        Subject: CN=69423475-90bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:84:fd:aa:50:6f:b9:1f:31:b2:1c:c8:d8:
                    e7:6c:10:8f:ce:05:a2:e0:59:66:d8:27:45:7e:7c:
                    e0:4c:ef:22:29:e7:a6:e3:ed:3c:ab:c9:49:ff:12:
                    b6:62:d3:7c:6d:49:07:5f:bd:84:7f:86:01:44:2c:
                    c3:2a:6b:0e:4c:cb:9f:b9:ed:bf:d8:18:6f:1c:b6:
                    a2:be:49:3a:42:cf:b7:35:69:36:e8:f4:e3:e1:97:
                    07:9b:f4:ae:d0:c4:29:e0:9d:d3:82:03:d4:62:b7:
                    16:2c:38:41:b8:18:a8:28:80:15:e1:b1:b1:bd:37:
                    b3:3f:01:df:dc:73:89:e8:1d:01:d7:4b:d1:93:6c:
                    fc:74:61:ee:3b:fe:37:51:12:42:fb:d8:a7:d9:5b:
                    1e:72:05:22:b5:3a:e4:d8:ac:53:3c:9d:e0:22:65:
                    b9:12:88:fa:81:3b:82:15:3b:9a:57:98:8e:c0:fc:
                    5c:f8:73:05:b6:7a:fb:ec:bc:b6:1f:22:da:b3:dc:
                    cc:de:47:11:bd:6f:db:b4:0b:41:ec:29:e5:82:44:
                    f4:0f:85:53:12:6d:73:22:e5:77:30:4f:11:ba:d1:
                    1d:2a:6f:bf:89:bc:6b:6a:89:3c:1f:cc:57:ce:fa:
                    3f:c8:36:aa:f8:f0:c7:2c:39:a1:bf:df:2f:8e:ea:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2C:63:CC:4E:32:A8:04:11:BA:B9:E3:A7:12:76:D3:99:0A:2F:B7
            X509v3 Authority Key Identifier:
                keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:83:d6:cb:b9:2c:96:9e:d1:d4:f6:87:de:90:0e:9f:3a:0b:
         8f:62:94:19:c0:c0:03:9a:ad:20:65:9b:b4:1c:7c:69:a6:ee:
         7b:ea:58:13:b2:ee:c1:6d:ae:4a:0e:b7:29:6e:f8:2a:a3:b4:
         7d:f9:23:2d:db:ed:b1:8b:f5:fd:31:ca:db:d8:8c:47:83:6f:
         68:46:e6:ec:e2:81:ac:3c:22:bc:34:21:af:6a:33:8c:31:aa:
         99:0a:c4:3c:ea:fd:b0:fc:b0:ff:3f:80:d1:e3:e0:66:e2:24:
         af:db:7e:c6:87:75:14:43:7c:ea:70:47:f2:94:e4:47:fc:55:
         af:6c:ef:1b:0a:6c:d6:f5:72:37:14:fd:6e:9f:d5:61:5c:35:
         f1:88:29:88:22:3a:da:ad:c6:b9:1c:53:c4:73:7c:8a:66:ea:
         f1:3b:3b:d6:71:fa:0a:4d:89:c6:7e:b3:0c:e9:75:da:d2:06:
         95:ee:d0:46:a7:d5:97:cd:c6:ad:a2:6d:1a:54:4d:43:e2:08:
         94:09:a8:a8:f6:96:db:a4:a4:3e:38:6d:c8:da:0a:09:ec:21:
         21:44:7c:38:71:4f:7b:01:2a:3a:c4:e9:b0:27:9c:79:1d:65:
         18:78:cb:9a:16:a7:74:03:fd:f2:b2:a7:55:bf:c9:2c:67:fd:
         18:d9:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:52:16 2025 by rpki-client