This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File:                     vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier:          K1GCI9IpyQkszmvn6lM9D1nuBNWwpnv9zTLsZRZJPqs=
Subject key identifier:   FB:D9:02:BB:D2:30:7D:0A:C0:99:8A:F7:24:32:E8:4E:1F:98:D8:98
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer:       /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number:          0144
Signing time:             Mon 15 Dec 2025 03:54:24 +0000
Manifest this update:     Mon 15 Dec 2025 03:54:23 +0000
Manifest next update:     Mon 22 Dec 2025 03:54:23 +0000
Files and hashes:         1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: GM73wqVsPXsZA9rMaCA7Jt6gxuoE50Rj1D5l/JCRWmA=)
                          2: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=)
                          3: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=)
                          4: E08658208D2D11F09327643FC4F9AE02.roa (hash: 41FC6Qh9FHv4UtlaWBSLbf5ObxYVTSL2scuznbl1Qds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
                          rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 03:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
        Validity
            Not Before: Dec 15 03:54:23 2025 GMT
            Not After : Dec 22 03:54:23 2025 GMT
        Subject: CN=693f8670-0c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4d:b1:92:77:91:33:27:3c:e5:ca:f7:10:49:
                    22:48:3a:1f:ac:17:3d:fd:4a:11:ca:8b:c8:03:a4:
                    4c:5e:d2:95:75:7c:43:d9:a9:d0:4e:5d:ab:4a:00:
                    e5:46:c9:ad:8b:df:b0:ca:7c:88:15:99:b8:d6:2e:
                    56:00:c1:a9:a1:4d:63:5d:85:8b:28:7b:e6:79:8d:
                    41:e1:1f:ed:82:55:36:15:e1:52:9a:c8:11:86:76:
                    ca:e9:f4:0e:3f:04:d0:8e:e8:93:90:82:1f:38:54:
                    2d:c0:a2:ec:5c:1e:46:cf:50:d8:30:57:63:1a:70:
                    d5:69:a2:ca:c2:95:fc:96:6e:03:36:fe:34:9d:07:
                    56:50:f2:2a:4d:c8:a8:4a:2d:76:f7:9b:5d:6e:06:
                    7c:26:e5:83:3c:32:f3:33:7c:95:38:cb:4f:26:ff:
                    5c:62:e6:cd:d8:c7:98:cf:f6:70:75:e6:df:6c:b0:
                    fa:62:3a:6b:e0:74:9e:6b:1c:5e:06:c1:dc:70:23:
                    47:e6:5f:91:b9:79:b2:70:3a:1d:ea:0a:c9:d4:fb:
                    cd:56:7e:e9:3d:f3:e4:b7:4a:94:73:ef:ac:80:2a:
                    88:c7:cd:b0:70:37:45:28:9c:35:20:ee:db:56:70:
                    90:af:05:07:0d:03:96:44:01:16:db:9a:e2:86:fa:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D9:02:BB:D2:30:7D:0A:C0:99:8A:F7:24:32:E8:4E:1F:98:D8:98
            X509v3 Authority Key Identifier:
                keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:53:0b:7b:44:0d:21:70:e3:52:b2:ce:81:54:e7:77:5d:02:
         59:29:6d:21:93:a9:9a:35:ee:c2:57:9e:7d:de:58:7a:89:86:
         53:1a:75:16:ba:69:37:d4:6d:f2:0a:72:bb:e1:59:55:7a:f7:
         d5:7c:67:5a:b2:83:3c:70:2d:7c:1c:cf:36:aa:c4:99:5e:6c:
         14:76:63:34:e7:ff:79:56:41:81:40:89:82:e9:ea:2e:aa:ac:
         a1:19:c1:b3:21:0d:a9:0c:dc:7e:8e:47:7a:4e:5a:ee:3b:e5:
         8d:fe:ef:52:6a:8d:ee:57:e8:f2:fa:30:1d:88:15:93:9c:4b:
         5f:ae:c1:c8:e1:16:fc:d1:f0:a4:dc:8f:f6:03:41:1f:1c:40:
         20:5f:c9:7a:da:38:0e:9e:8f:95:90:65:d9:3c:6f:5c:01:93:
         e8:2e:c9:c4:67:a2:32:b5:de:d2:1d:b5:91:34:bb:09:8b:22:
         51:ae:21:c1:ef:84:4e:b7:cb:39:fe:22:99:b9:f7:13:4e:86:
         5f:a0:89:17:ba:db:c5:0f:83:91:92:9c:6f:f6:e2:fb:20:dd:
         63:5e:54:40:eb:94:6a:61:83:74:d8:a3:93:5e:5c:c6:4e:55:
         41:19:39:f1:0a:b1:cd:af:e2:68:3c:fa:2d:65:22:e4:6f:7c:
         37:f4:45:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:52:13 2025 by rpki-client