This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
File:                     vLfPRDC7mOoEhRw0BybliBUOE50.mft (raw, json)
Hash identifier:          sGdfoeQJCQS8B4PUI2hMrT/U1mrqRjXCh8qCBTMEWl4=
Subject key identifier:   9C:4A:42:93:52:AE:C5:CA:79:82:E5:A0:1E:50:3D:37:A9:C0:4A:16
Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D
Certificate issuer:       /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
Manifest number:          0142
Signing time:             Tue 23 Dec 2025 03:33:28 +0000
Manifest this update:     Tue 23 Dec 2025 03:33:28 +0000
Manifest next update:     Tue 30 Dec 2025 03:33:28 +0000
Files and hashes:         1: vLfPRDC7mOoEhRw0BybliBUOE50.crl (hash: tjcVfQdG50rWoqC1GKJADrYf63LPkUNnkWbxsMTcbEU=)
                          2: D6871FC40C5711EFBD14BD5AC4F9AE02.roa (hash: ct7HNnoVMRTu9GGbvMdnAsr99cdgOMQ5g1ojGQzID0Y=)
                          3: F9393E440C4811EF97CBBC31C4F9AE02.roa (hash: MLTTfCwREUsGVfNKsAVzpfz2Sc45FONq7T/5iif0e5s=)
                          4: 8F64B3240C4B11EFACEF2C6FC4F9AE02.roa (hash: 2CtFG7HWVSfrrJnKmf+0gUAHRHN8PeRmFCcQjXhYXBE=)
                          5: BD5B75800C4E11EF85EEFC1FC4F9AE02.roa (hash: yvhUjHAiX+EPlHQdcU4E7154R9m6cxsrAxWsgLI83Mw=)
                          6: BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa (hash: VQG0WF9XSuXwWbMIIOSS0EFZqyrabhvnJP0dkdCPAVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl
                          rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91993A0, serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
        Validity
            Not Before: Dec 23 03:33:28 2025 GMT
            Not After : Dec 30 03:33:28 2025 GMT
        Subject: CN=694a0d88-f53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ac:79:43:32:34:22:b9:fe:29:24:8a:eb:35:
                    b6:81:4b:7b:2f:fc:d8:65:b3:93:11:da:f6:d8:8c:
                    f2:a8:fa:fc:8a:a2:c0:77:89:a4:09:e6:b2:39:f1:
                    7a:b6:d6:76:38:8a:bd:ff:11:41:5c:6e:33:89:9a:
                    34:70:fa:e3:6b:da:4a:dc:79:14:81:69:b1:4f:16:
                    1b:20:b9:9d:cf:38:4f:d6:bf:91:67:8f:3d:87:7b:
                    f1:f6:3a:90:21:2e:74:e3:7c:4c:33:1b:68:72:1c:
                    0d:60:f6:98:49:2f:50:3e:28:36:8b:98:85:21:3c:
                    38:c4:22:c7:91:02:6b:af:e3:fb:7c:5f:ab:ea:cb:
                    8d:d3:02:72:d9:22:8e:f8:2e:fc:77:45:0d:84:5d:
                    b0:da:78:46:88:fe:d6:52:e6:a9:9c:d8:4b:30:27:
                    c9:83:14:31:7f:09:72:e0:4f:b1:9a:d1:82:76:ef:
                    42:02:09:b7:0e:b2:27:9a:1e:84:ad:6d:e7:db:17:
                    34:0b:1b:1a:ff:ef:0c:5c:2c:d9:a2:82:e2:91:b3:
                    92:83:46:c1:ad:e3:8d:38:ef:92:87:b9:be:b8:cb:
                    a1:5b:49:8d:01:84:13:86:25:cf:f5:2a:0d:92:b4:
                    56:82:1d:da:a8:5e:4f:0b:0b:e7:45:f8:3a:da:87:
                    e0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:42:93:52:AE:C5:CA:79:82:E5:A0:1E:50:3D:37:A9:C0:4A:16
            X509v3 Authority Key Identifier:
                keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:49:58:d7:36:bd:e2:c3:b2:58:d8:51:91:80:91:8f:c9:68:
         ef:a3:82:7f:a1:55:1d:55:90:5a:d9:4e:84:21:cd:63:0e:c7:
         7f:50:82:82:ec:6d:4c:11:53:f3:89:85:39:7f:15:c4:69:04:
         da:75:28:01:2d:00:c6:f1:9a:d0:a3:02:5f:73:db:bb:18:e5:
         56:80:44:78:7b:9c:cf:01:98:10:09:05:f3:91:fe:c1:43:ce:
         66:d0:5d:15:c0:4b:f6:bd:59:93:ca:5c:bb:1a:be:4d:a5:32:
         49:a0:c3:52:b3:d2:17:4a:7e:b2:bc:97:b5:3d:1b:57:5a:57:
         a9:56:c4:54:e2:4e:2b:67:30:b3:68:5e:74:aa:3b:e9:77:e1:
         ce:e7:eb:aa:dc:b9:bc:fc:81:60:66:1a:6e:da:99:17:49:a7:
         c7:15:19:f5:5e:ab:96:0d:1b:3e:8d:69:99:f1:5c:51:0b:8f:
         ae:57:0f:90:fe:7d:27:1e:77:9c:6e:b7:74:79:98:e1:71:ab:
         0e:3e:b6:8f:2e:e2:72:19:e7:3c:1c:cb:5f:8c:66:4e:2d:2e:
         89:5b:0d:0b:f7:b7:de:ad:2f:08:eb:94:d7:de:c1:c2:88:26:
         8d:c9:91:0a:5b:59:0b:c2:74:f1:2b:3a:9e:a8:c6:03:2d:d0:
         cf:5e:6b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:21:20 2025 by rpki-client