This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
File:                     vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json)
Hash identifier:          JlDMJ2xpEZCn6H/RL5mLeDhgoqF2szQmGRKplmbTqfc=
Subject key identifier:   3B:B8:6D:C4:CB:25:C0:DD:33:50:A3:33:87:8B:46:5F:E8:BF:D5:22
Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
Certificate issuer:       /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Certificate serial:       0C98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
Manifest number:          0C91
Signing time:             Mon 22 Dec 2025 18:01:14 +0000
Manifest this update:     Mon 22 Dec 2025 18:01:13 +0000
Manifest next update:     Mon 29 Dec 2025 18:01:13 +0000
Files and hashes:         1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: imnVRodsFqpXFCBdWovnErufSJYk1UzS7V7led/c5U0=)
                          2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: sizu4+OIZ/A8x9uQpAud/O4xnlom/Pk+/kkVVxPExzE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
                          rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3224 (0xc98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
        Validity
            Not Before: Dec 22 18:01:13 2025 GMT
            Not After : Dec 29 18:01:13 2025 GMT
        Subject: CN=6949876a-da13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:70:6a:ce:e2:e1:95:d8:54:78:e5:32:a2:
                    0f:ec:c4:c2:e1:f4:f0:4c:77:f0:90:34:1b:0a:52:
                    37:73:3e:2c:d8:2b:07:4f:5d:51:50:84:c7:fb:3f:
                    d0:a6:24:73:93:00:3a:83:ae:35:92:29:9f:47:4d:
                    fb:b9:df:0c:7c:c2:29:3f:62:a3:7d:28:8a:25:be:
                    0c:6f:3e:e5:7d:51:d0:26:28:53:88:a6:e6:14:ba:
                    95:bb:c0:45:7b:6d:f2:f7:c3:a7:3c:98:44:c6:8e:
                    91:1d:7a:10:45:6e:d1:a1:90:ba:17:da:25:ec:40:
                    7c:1f:61:ab:d1:e8:92:25:75:60:ff:0f:c6:28:3d:
                    c3:c5:75:7a:fc:16:77:08:7b:21:ca:69:58:93:0d:
                    c3:5c:93:da:23:78:71:44:d9:3d:81:a2:c2:c5:85:
                    b8:77:cb:dd:a6:0a:79:5e:23:61:88:22:9f:b4:74:
                    e7:91:6b:41:66:88:49:4b:6c:68:00:0a:13:cd:7c:
                    f9:ad:e1:13:71:7e:a3:b2:2e:7f:a2:d7:5f:c3:21:
                    22:d1:f5:f7:2b:a1:e1:64:ab:f4:6f:a5:5f:7d:2b:
                    5a:85:76:93:a3:76:b6:25:9f:f5:1a:11:21:d6:27:
                    ad:64:0c:b9:21:5b:ce:68:a3:54:65:e2:70:aa:90:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B8:6D:C4:CB:25:C0:DD:33:50:A3:33:87:8B:46:5F:E8:BF:D5:22
            X509v3 Authority Key Identifier:
                keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6a:3b:a4:d4:35:58:2e:d2:71:8f:76:08:f3:74:d8:a2:a3:
         7a:71:1a:d1:9a:25:28:f8:bf:69:0f:96:71:5e:92:be:3d:59:
         40:c2:ba:be:27:3f:ef:47:c0:0e:5b:f8:f8:d1:9a:8c:c1:bc:
         14:b2:39:68:55:9b:a3:44:21:ea:12:7f:48:7b:92:55:f8:d8:
         29:8d:4f:e5:fb:d8:27:fd:6b:de:5b:f0:e1:60:8a:8d:12:4f:
         e4:45:5d:31:4e:05:3c:6c:a0:63:ad:d2:2d:bc:da:88:7e:73:
         d6:50:39:09:ec:bc:0e:7a:95:77:48:c6:4a:de:b0:a7:13:fc:
         a0:20:ce:85:62:82:ca:19:12:83:ab:46:30:d5:82:08:f5:03:
         7a:78:0a:bb:fd:3d:db:0f:28:fe:c5:33:e9:8b:cb:36:02:b9:
         41:0b:c1:44:1f:9b:50:a2:0d:6c:56:12:41:29:2b:2f:76:74:
         49:33:2c:c5:52:c9:b2:8f:51:14:69:c6:96:bd:2e:b0:17:17:
         33:ca:bb:91:b5:96:01:1c:a7:82:65:0e:80:51:62:4e:e2:d8:
         cf:fe:c2:d4:d0:10:50:bb:97:9b:e0:c0:47:fb:d3:33:51:b3:
         c3:b5:e6:46:00:d7:38:00:4c:d7:0b:1f:eb:29:09:4b:ca:3a:
         40:d7:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:52 2025 by rpki-client