This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
File:                     Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json)
Hash identifier:          ftCi8OsjYTYinbhedw5HlEdoDmw6pwqTEaBKK4lVsu4=
Subject key identifier:   E0:14:89:89:8F:8A:07:86:1D:41:9E:A0:C1:07:9E:4D:A3:E3:91:56
Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00
Certificate issuer:       /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
Certificate serial:       026D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
Manifest number:          0261
Signing time:             Mon 15 Dec 2025 00:59:12 +0000
Manifest this update:     Mon 15 Dec 2025 00:59:12 +0000
Manifest next update:     Mon 22 Dec 2025 00:59:12 +0000
Files and hashes:         1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: Lax81NoORFbcBJdTLfmx2yI/iGmodXaIyVz0y1dSzh4=)
                          2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: y3OZF+3yS21va8DTETIk41Nb13Feo85xufsVmJd2vzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 00:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
        Validity
            Not Before: Dec 15 00:59:12 2025 GMT
            Not After : Dec 22 00:59:12 2025 GMT
        Subject: CN=693f5d60-cee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ff:2e:48:2b:6d:48:ca:f9:84:e1:ef:96:af:
                    8f:4d:6d:5a:34:f1:2f:87:4d:43:c2:d3:42:54:b8:
                    fd:8d:bd:68:5e:0b:f8:4a:38:9b:a6:02:d8:61:8b:
                    33:23:e2:85:c7:47:2b:30:f1:c7:70:9d:18:41:1c:
                    76:3f:b0:74:18:9a:b4:9b:fd:f5:9c:ae:45:02:56:
                    e4:19:90:bd:ae:91:ad:b1:90:8e:0a:d5:a4:ad:36:
                    b1:e9:b6:a7:f1:20:3d:d7:8a:47:7f:92:73:55:ba:
                    ed:50:6c:34:8a:27:58:9d:24:ae:e9:bf:4a:c2:c7:
                    2b:c0:dc:22:18:92:e4:17:c5:e0:04:44:b2:ae:7d:
                    50:7c:20:29:17:2c:51:65:a2:c9:04:70:bd:21:ea:
                    29:9c:8e:03:e4:4e:06:2f:a3:28:a3:da:d3:11:aa:
                    6e:7f:e6:ea:ca:da:e8:53:41:48:3a:32:7c:10:ec:
                    dc:73:e3:78:38:a8:e7:f6:55:49:f1:c6:b9:2f:63:
                    e5:2a:f2:69:a1:69:87:ed:29:cb:d6:ac:db:c3:2c:
                    2f:bb:c0:88:0c:36:4b:79:54:7c:89:f2:56:a3:2c:
                    50:8d:8c:99:a8:ac:39:b2:1c:00:7b:5c:2c:5e:80:
                    ea:38:75:f7:26:1b:bd:55:b7:a6:1d:32:c0:d5:76:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:14:89:89:8F:8A:07:86:1D:41:9E:A0:C1:07:9E:4D:A3:E3:91:56
            X509v3 Authority Key Identifier:
                keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5f:f8:8f:d8:5b:22:7b:f6:db:ca:5c:ce:c9:50:d3:05:89:
         9a:c1:a7:05:62:ec:af:06:26:85:a8:d5:70:56:4e:70:92:42:
         2c:7c:8b:1d:af:35:77:d0:1c:ab:5e:81:7d:b9:e4:5e:52:95:
         f6:3d:fd:46:bf:79:41:a6:9b:88:67:33:59:e6:a0:25:cd:94:
         fd:5c:0d:e3:84:a2:0e:70:bf:76:be:04:0b:17:65:2f:de:71:
         b5:90:e0:7a:f2:dc:36:bb:c7:fe:21:37:52:31:8a:15:bf:d1:
         a7:f8:0f:39:9f:a1:ed:bc:b0:1d:f8:ba:21:b8:de:30:4c:ee:
         ff:bd:e0:4b:01:f3:11:6b:b7:a0:68:11:f1:f7:3e:3f:61:bf:
         a0:d4:17:64:30:cf:c0:c9:80:08:d9:bb:44:6c:bb:2b:7c:71:
         19:6a:71:88:ca:d2:f1:5d:e2:b3:87:14:f5:72:ac:62:76:a9:
         5a:02:29:77:1c:40:4f:5a:fc:7a:f1:16:44:de:46:52:48:48:
         77:f6:32:11:da:dc:a9:42:a5:fc:42:8f:0e:00:72:22:5b:a7:
         96:57:ea:51:75:8b:28:98:bf:9b:be:69:ed:78:b0:2b:e5:02:
         1a:c6:58:89:7c:64:44:37:3f:40:b8:0e:ad:51:b7:3c:44:dd:
         50:8a:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:52:54 2025 by rpki-client