This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
File:                     VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json)
Hash identifier:          UL3wZEMIti2joGIyCKDtWdpsOkneMvL7NF/7Y5o1S8c=
Subject key identifier:   4E:8B:6E:00:BF:47:3B:27:CD:CA:EB:FA:4D:B3:D0:9B:1D:6A:F1:A8
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Certificate issuer:       /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
Manifest number:          FC
Signing time:             Tue 23 Dec 2025 04:12:12 +0000
Manifest this update:     Tue 23 Dec 2025 04:12:11 +0000
Manifest next update:     Tue 30 Dec 2025 04:12:11 +0000
Files and hashes:         1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: DyZa9q828CYwh6AmYZtcJMJLAdz2YqMTjVFIxQbAyxk=)
                          2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: 1Bz9COXjLNAhKPWsXADzGRMHjeGcdVBDGhNMe07ozjE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
                          rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
        Validity
            Not Before: Dec 23 04:12:11 2025 GMT
            Not After : Dec 30 04:12:11 2025 GMT
        Subject: CN=694a169c-bbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:e7:69:17:ee:7f:d0:70:ab:8c:5e:cb:3c:
                    2a:3c:97:f5:69:25:87:c1:29:c8:bf:bf:ee:19:3b:
                    c3:b1:eb:cc:90:e5:00:06:4e:8d:e0:01:f9:cf:1b:
                    78:66:b3:9c:9c:d8:83:46:16:22:d9:f8:3e:86:dc:
                    94:3f:00:83:61:a6:8c:61:24:af:98:52:a3:ef:0d:
                    ec:af:c8:16:be:1e:71:86:34:09:20:e1:0e:cd:c8:
                    5b:77:80:f6:10:d8:32:0a:fe:43:1f:24:6c:ad:9e:
                    fe:bf:d7:06:2a:31:8f:81:fc:98:ff:01:e4:76:ef:
                    a9:5d:ba:94:6e:e7:e4:9c:9e:a8:23:96:72:33:68:
                    4e:d4:df:03:0a:12:b3:4f:37:b6:02:57:28:55:16:
                    05:66:23:76:c0:bc:6c:0e:af:30:1e:1f:f6:18:6c:
                    b0:ce:35:e1:b1:56:ef:5a:37:c5:4d:2b:76:87:90:
                    f1:79:ac:e5:2e:d1:2b:46:00:b9:b1:b7:5e:32:ff:
                    19:1f:ea:b8:f2:87:07:d9:81:39:39:22:a2:ae:6a:
                    96:8d:c4:2c:f3:fc:24:6a:1b:99:fd:bb:06:f4:62:
                    b1:8f:e2:50:a2:13:bf:65:83:19:85:cf:ea:78:e4:
                    e8:e7:d8:8b:5c:0b:e4:c0:50:14:2f:aa:a6:b1:52:
                    57:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8B:6E:00:BF:47:3B:27:CD:CA:EB:FA:4D:B3:D0:9B:1D:6A:F1:A8
            X509v3 Authority Key Identifier:
                keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3a:63:8c:ec:b8:28:f0:dc:1d:d3:43:6f:fc:92:f2:96:7d:
         32:59:9e:2b:ea:83:c5:94:27:6a:eb:8e:11:95:71:df:e3:0c:
         8a:3f:c9:e4:5d:a8:7f:a2:7a:85:f3:a1:56:19:d1:2b:fc:95:
         ab:48:28:d7:d2:2a:96:15:2c:ba:f8:24:43:5c:3f:e0:30:0f:
         80:64:22:e2:9a:a5:a0:0c:13:51:5c:19:59:36:ba:d1:6d:28:
         e5:71:68:a3:2b:50:40:63:20:64:4d:ee:1a:3a:71:e0:d7:58:
         ed:b6:69:07:94:e5:fc:24:72:4b:f2:6e:51:67:66:b0:07:ae:
         38:56:29:74:aa:82:90:be:24:41:e6:98:2d:ce:70:4f:75:46:
         d9:8f:3c:f9:57:cc:ce:f2:d0:bf:30:4e:d8:bc:fd:e7:9f:e1:
         c1:6b:79:14:f1:d9:50:c7:d5:fc:35:ab:b6:2d:e5:68:b4:f3:
         18:30:78:29:1e:2e:89:f0:19:fa:20:d3:01:1b:b1:cd:de:b9:
         09:27:c6:f4:59:ea:4f:7a:7e:6a:1b:5a:bd:33:1d:bc:78:40:
         ca:c8:35:1f:68:77:59:5b:f0:54:8f:d0:b7:5f:40:37:72:9a:
         fb:ec:69:c5:9f:b5:7e:17:64:88:17:17:69:9c:32:2a:a4:fd:
         92:5d:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:30 2025 by rpki-client