This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
File:                     pVqOdK-92uYpENDGe6Ip1p4eyXg.mft (raw, json)
Hash identifier:          i2r2lcqg10ruKWziQ6LQANfDxAn+d2d6G5DPnqrpiiU=
Subject key identifier:   E2:05:5D:E7:0D:BD:5B:5A:76:F6:E3:C6:9E:0E:D8:90:6A:FF:55:70
Authority key identifier: A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78
Certificate issuer:       /CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978
Certificate serial:       0772
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
Manifest number:          0771
Signing time:             Mon 22 Dec 2025 20:53:36 +0000
Manifest this update:     Mon 22 Dec 2025 20:53:35 +0000
Manifest next update:     Mon 29 Dec 2025 20:53:35 +0000
Files and hashes:         1: pVqOdK-92uYpENDGe6Ip1p4eyXg.crl (hash: 7U4qa61deEWNRuqkc3cP1v1WPIyRCenELqf3SGENRWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FC6, serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978
        Validity
            Not Before: Dec 22 20:53:35 2025 GMT
            Not After : Dec 29 20:53:35 2025 GMT
        Subject: CN=6949afd0-30b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:c9:64:a9:0b:fb:fa:79:5b:84:9d:e9:12:
                    87:2f:14:1d:f5:ef:44:59:e6:fc:a2:d6:d7:10:1b:
                    61:3b:52:48:6a:c1:f5:3b:b9:b6:e7:f5:02:0a:33:
                    54:b6:29:75:3e:52:a0:5a:af:2f:71:d3:9d:c7:4e:
                    8e:ea:89:ad:93:14:84:7e:0e:e1:88:2c:8f:29:0e:
                    80:4e:3d:3d:e8:06:36:39:8d:3b:a5:a9:ab:40:d7:
                    d7:67:34:2e:56:6e:21:31:23:0c:86:eb:3a:2a:43:
                    85:d6:53:f8:8c:00:46:a2:21:3a:fe:86:bd:1e:27:
                    10:cc:05:53:79:f2:73:3e:19:0d:f8:da:6f:9f:5f:
                    63:76:29:5d:93:b3:ef:01:61:86:a7:05:54:23:24:
                    37:a5:c9:a0:1e:81:13:00:0e:f4:4c:1b:b5:0f:c3:
                    f4:f6:86:c3:95:bc:a6:80:9c:f7:65:3e:a0:b9:bd:
                    07:95:95:63:00:51:71:f9:91:22:cc:93:30:bb:b8:
                    bc:d5:c9:e9:ea:ef:2a:a2:39:0c:36:28:27:ea:4a:
                    8e:e3:6e:da:5a:17:54:1e:7d:da:8a:25:fd:8f:3e:
                    03:6b:ee:15:d0:fe:ac:db:31:84:b6:c8:a8:25:68:
                    0b:0c:cf:d1:3f:c8:68:a9:4e:c1:1b:c7:7c:df:08:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:05:5D:E7:0D:BD:5B:5A:76:F6:E3:C6:9E:0E:D8:90:6A:FF:55:70
            X509v3 Authority Key Identifier:
                keyid:A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e1:f4:69:e8:93:c3:a5:7e:84:e7:3c:78:d2:36:85:42:f2:
         f8:de:ad:0c:db:5b:44:a2:00:ae:81:e3:36:10:77:c7:d9:13:
         64:fb:61:3f:28:51:ce:42:01:01:99:dc:9e:57:2d:cc:4b:08:
         2f:42:db:2a:f2:db:3f:a8:62:04:af:65:e9:b5:bb:51:1d:45:
         63:d7:95:c0:dc:f1:42:ff:3f:6e:73:92:d8:51:e2:99:fb:9d:
         88:af:6a:a5:ff:41:2e:49:02:3e:c9:d9:60:de:ff:0e:46:57:
         a4:8e:29:39:cd:ec:52:39:d5:5c:4d:b6:2c:dc:23:ea:fd:00:
         94:fc:5b:2c:5f:8a:c7:6b:8d:fc:e5:80:39:be:31:ad:81:bd:
         f4:29:a7:4c:22:92:12:7f:e2:0c:e6:3c:d7:9f:1a:5f:c9:3b:
         2a:bf:3b:50:b8:9c:e6:c4:5c:49:1f:20:e0:ad:7e:2d:c3:80:
         aa:41:56:19:66:b8:12:8c:d5:b8:df:d6:9c:03:45:83:e6:bb:
         41:75:10:94:47:85:75:94:a6:4b:b9:7a:d5:4b:e4:6a:2f:c5:
         88:9e:5a:35:12:4d:5e:e4:54:6b:50:03:45:d7:4c:45:12:0a:
         2e:de:7f:a4:0f:20:eb:ab:6f:1e:63:86:87:2b:39:4a:48:a6:
         09:ce:d3:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNGQzYxMTAvBgNVBAUTKEE1NUE4RTc0QUZCRERBRTYyOTEwRDBDNjdCQTIyOUQ2
OUUxRUM5NzgwHhcNMjUxMjIyMjA1MzM1WhcNMjUxMjI5MjA1MzM1WjAYMRYwFAYD
VQQDDA02OTQ5YWZkMC0zMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyUPJZKkL+/p5W4Sd6RKHLxQd9e9EWeb8otbXEBthO1JIasH1O7m25/UCCjNU
til1PlKgWq8vcdOdx06O6omtkxSEfg7hiCyPKQ6ATj096AY2OY07pamrQNfXZzQu
Vm4hMSMMhus6KkOF1lP4jABGoiE6/oa9HicQzAVTefJzPhkN+Npvn19jdildk7Pv
AWGGpwVUIyQ3pcmgHoETAA70TBu1D8P09obDlbymgJz3ZT6gub0HlZVjAFFx+ZEi
zJMwu7i81cnp6u8qojkMNign6kqO427aWhdUHn3aiiX9jz4Da+4V0P6s2zGEtsio
JWgLDM/RP8hoqU7BG8d83whLqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIFXecN
vVtadvbjxp4O2JBq/1VwMB8GA1UdIwQYMBaAFKVajnSvvdrmKRDQxnuiKdaeHsl4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZDNi8wMTlDMDI3RTNG
NjUxMUVCOEJFOTVBMjJDNEY5QUUwMi9wVnFPZEstOTJ1WXBFTkRHZTZJcDFwNGV5
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BWcU9kSy05MnVZcEVOREdlNklwMXA0ZXlYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0ZDNi8wMTlDMDI3RTNGNjUxMUVCOEJFOTVBMjJDNEY5QUUwMi9wVnFPZEstOTJ1
WXBFTkRHZTZJcDFwNGV5WGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAt4fRp6JPDpX6E5zx40jaFQvL43q0M21tEogCugeM2EHfH2RNk+2E/
KFHOQgEBmdyeVy3MSwgvQtsq8ts/qGIEr2XptbtRHUVj15XA3PFC/z9uc5LYUeKZ
+52Ir2ql/0EuSQI+ydlg3v8ORlekjik5zexSOdVcTbYs3CPq/QCU/FssX4rHa438
5YA5vjGtgb30KadMIpISf+IM5jzXnxpfyTsqvztQuJzmxFxJHyDgrX4tw4CqQVYZ
ZrgSjNW439acA0WD5rtBdRCUR4V1lKZLuXrVS+RqL8WInlo1Ek1e5FRrUANF10xF
Egou3n+kDyDrq28eY4aHKzlKSKYJztMY
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:32 2025 by rpki-client