This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
File:                     vwxRAalGDasWiyHwJOMMiVoCjEI.mft (raw, json)
Hash identifier:          IxfiOgr6RWVa3sqsjeSLmaCtjmoyNz7R/nTKqUszsH8=
Subject key identifier:   03:06:D3:1D:47:A2:4D:19:86:2E:E6:DB:3B:62:78:21:5A:E6:FE:EB
Authority key identifier: BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42
Certificate issuer:       /CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
Certificate serial:       0570
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
Manifest number:          056A
Signing time:             Mon 22 Dec 2025 22:28:50 +0000
Manifest this update:     Mon 22 Dec 2025 22:28:49 +0000
Manifest next update:     Mon 29 Dec 2025 22:28:49 +0000
Files and hashes:         1: vwxRAalGDasWiyHwJOMMiVoCjEI.crl (hash: akkca+gWOgUf5PI3LWMeLke896xtdOlg4vZFg7u0tl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl
                          rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 22:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180307, serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
        Validity
            Not Before: Dec 22 22:28:49 2025 GMT
            Not After : Dec 29 22:28:49 2025 GMT
        Subject: CN=6949c622-6ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:dc:4b:ec:b1:4c:b5:21:c6:0e:7c:b3:34:
                    62:e8:66:cf:ac:07:7e:9a:ba:92:98:b8:a7:5f:74:
                    cf:cf:ba:6d:b9:36:69:6a:28:91:12:4e:2a:a8:71:
                    e2:21:cd:f4:fa:1e:3e:41:8d:55:76:a0:11:7b:79:
                    a9:88:32:d3:dc:d2:c1:89:83:7c:52:f2:18:a8:64:
                    f9:ed:85:30:d3:bc:2e:b6:87:05:d0:8e:5e:bf:3e:
                    30:3f:7c:54:81:3e:fe:d8:a3:80:0e:45:98:00:47:
                    25:a6:39:2d:bf:c0:05:93:85:0f:8c:8f:47:5b:fc:
                    7d:db:7b:56:3c:c8:42:44:16:76:34:64:d0:c3:f5:
                    cd:9f:71:b7:67:6d:c4:92:85:eb:f5:bd:cd:66:eb:
                    38:4b:45:e4:2a:60:24:34:d5:0d:98:5f:79:5b:90:
                    e2:8f:13:97:ba:d1:1d:27:91:db:11:5e:2f:58:dd:
                    d6:d4:34:7a:2a:65:ff:08:f6:c1:1c:d5:97:8f:76:
                    a5:b9:50:ca:5e:c3:b9:2f:9d:d4:19:75:f1:b5:f1:
                    2a:51:6d:7d:34:8c:4b:89:d4:82:fd:33:43:bf:7d:
                    fd:e8:0b:d4:ea:cd:7a:a3:ff:5d:07:c2:e3:0b:4f:
                    07:91:12:72:d1:95:05:05:ff:a9:b1:5f:c6:97:e0:
                    cf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:06:D3:1D:47:A2:4D:19:86:2E:E6:DB:3B:62:78:21:5A:E6:FE:EB
            X509v3 Authority Key Identifier:
                keyid:BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a1:9c:28:c0:ab:ac:c5:e8:7c:ee:04:a1:c8:07:e0:b1:15:
         35:b2:67:01:84:cf:fb:05:ed:30:c3:10:1e:3c:ff:2d:2d:e6:
         bf:6b:de:a3:62:59:4a:40:d0:a6:d5:9c:3d:59:f0:ef:37:cd:
         45:9d:52:0c:38:92:b9:32:f5:52:2e:7d:ef:f2:ac:3e:16:3b:
         15:a4:94:d6:df:6b:b7:7e:34:47:ac:9a:32:80:a1:fc:1e:bb:
         ec:1f:70:7d:fb:e8:83:ab:24:f6:74:90:0f:75:01:5e:24:27:
         d0:4e:2e:2b:3e:fa:31:00:0e:e3:92:a3:a1:c1:0b:7f:52:4d:
         a1:cf:ab:30:f7:9c:65:7d:56:fa:e6:6e:ec:b8:30:02:5e:96:
         f5:73:8d:b5:70:a9:47:b7:a0:f3:26:1e:b8:e6:3b:e8:ed:ac:
         30:32:f3:ef:67:40:b6:82:d7:4b:b1:2f:b7:56:5c:d5:66:47:
         59:d9:76:fc:ac:47:9c:f5:45:3d:49:a9:2b:ae:03:3a:8a:18:
         09:56:4d:c6:85:a1:98:72:42:33:7d:3f:96:76:9e:45:63:5e:
         9a:9a:5e:99:f4:0b:b5:dd:b8:24:17:3d:03:7c:6a:63:a8:f6:
         60:96:c4:8b:f8:03:15:88:54:f0:6a:5c:3c:c5:d2:1a:53:cb:
         4b:b3:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:46 2025 by rpki-client