This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
File:                     sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft (raw, json)
Hash identifier:          JFahUwnxTuTMNXsMVGB+hToRAvvvvWlu/VjmgI5UOhI=
Subject key identifier:   7B:D1:6F:04:06:74:CD:27:E0:51:14:CE:E4:01:4F:6F:94:4C:A4:18
Authority key identifier: B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83
Certificate issuer:       /CN=A919C203/serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
Manifest number:          0153
Signing time:             Wed 03 Dec 2025 02:39:35 +0000
Manifest this update:     Wed 03 Dec 2025 02:39:34 +0000
Manifest next update:     Wed 10 Dec 2025 02:39:34 +0000
Files and hashes:         1: sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl (hash: /jMaFnwriGDr4oYE4vU9zVr+EHxjw0gl5jsq3l2dS/Q=)
                          2: 1B434E42C58811EEA2A7F049C4F9AE02.roa (hash: eHVAw6t0G0OOVunESIIPqhZXYkGjz7nn6NHSttJw5xM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl
                          rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 02:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C203, serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983
        Validity
            Not Before: Dec  3 02:39:34 2025 GMT
            Not After : Dec 10 02:39:34 2025 GMT
        Subject: CN=692fa2e7-7e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:a2:cc:5f:8c:42:bf:03:ab:41:11:1c:7b:
                    11:59:80:c8:53:3e:9b:79:34:e3:0f:b1:9a:c6:24:
                    20:fc:bb:f7:7d:c9:37:82:df:b3:ea:39:fc:83:ab:
                    d0:8b:70:99:bd:e3:be:e3:35:bb:f7:14:d1:97:01:
                    15:d2:99:97:71:61:29:c0:98:6f:a9:d9:85:e5:72:
                    2a:4c:3c:6c:53:96:e7:c7:15:42:a6:f8:c3:4a:39:
                    77:c7:a6:b0:56:5d:4a:73:b6:3d:67:5c:34:5f:07:
                    10:e0:31:ea:ef:16:5c:98:b3:2e:9e:cf:6e:2f:01:
                    64:5a:c6:fc:48:0f:50:0d:70:1f:74:51:1d:92:8f:
                    f2:59:1a:9e:87:9c:0e:df:3b:96:36:19:fc:14:39:
                    37:53:03:5f:8d:36:a2:77:c1:d2:59:21:f0:5e:cd:
                    f0:85:8d:bf:6f:b1:dc:22:37:d7:e9:db:7c:6b:93:
                    60:f5:21:bb:eb:55:61:64:60:b2:de:51:94:01:2e:
                    78:a0:bb:4c:a1:f1:26:6a:0f:98:0c:46:cb:3b:27:
                    70:5a:1f:d5:38:bb:d0:19:1a:87:e7:e0:43:26:5c:
                    43:a2:c1:fb:8b:fb:de:1f:21:16:84:70:10:8e:cf:
                    fb:ea:c2:38:ce:39:74:fc:4a:cf:8c:70:0b:ae:20:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D1:6F:04:06:74:CD:27:E0:51:14:CE:E4:01:4F:6F:94:4C:A4:18
            X509v3 Authority Key Identifier:
                keyid:B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9d:28:30:25:a8:ee:fe:08:ee:c2:ff:10:00:d8:bd:b6:a6:
         da:dd:8b:22:1e:1e:37:c9:fa:4a:fc:ef:c6:b8:fb:5b:44:66:
         0b:88:79:66:b1:33:ee:71:8e:d0:e4:c2:54:d4:55:c6:98:ca:
         83:53:11:69:c4:5c:19:f1:8f:b7:9e:5b:6f:c2:b1:63:e9:6d:
         b7:18:ef:a0:a5:21:2b:39:fb:ff:0b:fc:88:ba:05:7d:3f:c7:
         9b:02:db:33:9a:8d:db:96:f8:6f:06:df:bf:53:c1:1e:a2:c2:
         a5:55:a3:1f:ba:a2:0c:79:73:80:19:1c:50:29:46:9c:e8:12:
         24:cd:8e:b1:3a:e7:cc:38:91:4a:de:75:01:11:95:b2:95:64:
         4d:c0:d2:06:ce:09:b6:20:d8:76:c5:a4:d4:66:86:d0:e5:48:
         65:3e:99:14:3e:92:00:13:fb:37:62:33:b4:97:17:d7:8e:08:
         bc:8c:29:9b:84:62:da:5b:ba:eb:55:2e:e1:b6:91:5e:fe:08:
         2d:9d:c5:e4:7f:e6:4f:35:83:09:22:1e:08:a9:f6:3a:fb:35:
         e2:8a:48:ba:57:de:38:af:db:ae:c0:ac:14:a5:6b:6d:cc:b4:
         18:54:10:e8:ae:70:73:dd:06:62:6c:3a:6e:9b:be:41:8a:cd:
         23:da:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:59:51 2025 by rpki-client