This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
File:                     vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json)
Hash identifier:          yFtGAWT0Va4Z9MxpLZCigZG+hdI+GqwBgHDaTfxUEtE=
Subject key identifier:   D4:80:0C:07:EA:A6:F0:80:6D:3D:07:2D:13:04:7B:7F:32:9A:26:06
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Certificate issuer:       /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
Manifest number:          025A
Signing time:             Tue 23 Dec 2025 00:38:45 +0000
Manifest this update:     Tue 23 Dec 2025 00:38:45 +0000
Manifest next update:     Tue 30 Dec 2025 00:38:45 +0000
Files and hashes:         1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: kHCdRm+mNKM1KDBptU/kL0vMG6pDke9ngaATDiVqLMI=)
                          2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: L4gwhY7icNtGh4Pw0dLfgymKZ1S0Ut+p6qHkiovinK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
                          rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
        Validity
            Not Before: Dec 23 00:38:45 2025 GMT
            Not After : Dec 30 00:38:45 2025 GMT
        Subject: CN=6949e495-23cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:d4:6f:cc:2b:27:11:a2:95:b2:c0:ac:05:
                    d5:69:11:7b:d5:66:ce:af:95:2e:e2:0e:91:c2:f4:
                    27:c6:85:2b:83:df:55:1d:d0:41:96:dd:96:55:ea:
                    1f:20:cc:a3:04:79:fc:e0:d2:28:d4:37:98:96:48:
                    43:98:ff:ed:cc:1b:09:70:d8:70:0d:44:0c:75:60:
                    81:ba:71:98:14:42:6f:f4:97:80:5e:a0:55:54:37:
                    cc:6c:6a:ca:e2:a2:e8:b7:cc:4f:c1:74:30:2a:23:
                    ac:ae:29:cc:6d:af:9d:1e:05:09:f9:65:6f:02:f1:
                    4c:1c:79:3c:c5:1e:db:17:66:2e:f4:39:5b:ab:e8:
                    af:e6:fc:dc:98:b9:5d:ed:77:3f:81:46:3a:c8:da:
                    bd:14:c2:6b:e4:39:ed:6c:65:d6:6c:0b:eb:4c:bc:
                    b7:ca:e3:76:1c:aa:34:f3:f5:13:a5:d0:64:41:62:
                    38:34:f6:10:e5:a4:4c:f7:8d:c0:1d:d0:83:d3:29:
                    80:97:68:e3:cc:81:77:02:68:b1:0e:82:4c:14:a0:
                    4c:90:d4:6d:fc:48:be:47:59:2d:e7:00:c9:c3:f9:
                    eb:70:a8:13:01:0c:ea:94:90:8c:c4:5b:8e:fb:14:
                    4c:c7:f2:05:d9:20:61:07:bd:9c:b3:1b:e6:f8:21:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:80:0C:07:EA:A6:F0:80:6D:3D:07:2D:13:04:7B:7F:32:9A:26:06
            X509v3 Authority Key Identifier:
                keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5c:3a:35:10:a3:d1:6a:27:1e:49:e7:61:d4:d5:dc:4b:b5:
         bb:38:ad:e9:ac:5d:ed:c4:31:21:b5:26:07:25:ee:9f:60:89:
         b0:13:ef:96:65:53:bf:1f:15:2b:db:88:d8:b5:71:d5:6d:bb:
         fc:e9:3d:d0:47:25:fd:87:d6:99:3b:78:53:7f:4e:b5:01:72:
         70:31:7e:63:cd:23:29:d0:9e:0f:75:a7:ff:61:c8:6d:ec:1a:
         23:a3:09:c8:81:00:09:1d:28:f8:7b:a9:65:bc:88:b3:bc:94:
         da:ab:38:d9:90:cf:5d:66:ac:d8:d5:fc:e0:78:ef:81:ae:cc:
         e5:c9:92:91:9f:b2:9f:f1:1e:5c:1d:c5:09:c4:9d:40:7a:f9:
         50:c8:ad:58:f4:55:82:24:22:e3:c2:1e:e9:db:22:29:40:f8:
         5a:2f:36:a6:7e:99:61:93:16:e7:44:d1:cc:ed:e2:37:f9:b0:
         8c:32:d1:55:c2:3f:8b:3e:13:52:9c:55:dd:40:e1:34:ca:0b:
         c3:e6:b3:47:43:75:b1:1c:64:18:6b:97:93:84:b7:1c:ad:b9:
         54:aa:29:c9:e3:28:60:4c:c9:d6:6c:eb:73:a1:fd:8f:01:0b:
         15:3d:8f:55:7d:61:6f:20:ec:4b:d1:cd:9f:d8:fa:8c:ef:71:
         06:2c:85:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:06 2025 by rpki-client