This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
File:                     votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json)
Hash identifier:          8PQV3RXMd5s/GVLSThFZ8pWrYFiWsgtecCvBV/xUwsQ=
Subject key identifier:   B8:D6:7C:FF:B4:CF:D0:6F:E3:26:18:EB:D9:29:4B:A2:EC:45:4B:76
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Certificate issuer:       /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
Manifest number:          B5
Signing time:             Tue 23 Dec 2025 04:58:28 +0000
Manifest this update:     Tue 23 Dec 2025 04:58:27 +0000
Manifest next update:     Tue 30 Dec 2025 04:58:27 +0000
Files and hashes:         1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: FWfd5uaZ3KvZh46Nsh7II/1svTldMIkM6IhRKrPC/j0=)
                          2: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: q3EE6bhQvO1jqMvzi5TnaMDMrsSHuVeWmQU0kCxzZeQ=)
                          3: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: +20O4NUWPTxqKeXepVeDCO/g+GXNSbJwYfdmkDR6B2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
                          rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
        Validity
            Not Before: Dec 23 04:58:27 2025 GMT
            Not After : Dec 30 04:58:27 2025 GMT
        Subject: CN=694a2173-f25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:4e:ac:6b:72:e7:2f:b0:38:60:4b:d7:cc:
                    95:78:a1:a6:25:0f:bc:b6:e7:8e:31:84:09:3f:cb:
                    92:b9:ab:7a:45:40:7f:c1:ce:6e:3b:9a:e4:58:38:
                    91:7c:2b:15:44:67:1d:09:05:aa:14:75:0b:89:33:
                    c9:55:0a:d5:0b:46:74:44:76:ea:95:ed:c2:27:50:
                    fe:20:4e:9f:7b:dd:d7:3c:8e:2d:60:88:61:87:f3:
                    01:69:d1:43:d2:72:cf:53:6b:15:54:8d:db:26:18:
                    f6:94:2d:84:60:88:a2:c6:de:c2:ff:c6:e3:99:91:
                    a6:03:b0:3e:75:84:71:6b:27:58:01:75:a8:07:09:
                    7e:8c:97:1d:fd:7c:25:d9:6c:5e:c1:83:2b:fc:73:
                    b5:04:37:b1:10:fc:4f:fc:9d:3f:d9:4b:88:ec:2b:
                    bb:79:4c:bd:85:27:0a:41:fc:2d:6e:dd:19:8b:68:
                    6d:aa:9a:5a:4a:dd:63:39:f6:84:6b:37:7b:98:92:
                    17:b6:5b:03:4b:da:a5:9c:4b:8a:32:fe:98:c4:6d:
                    c8:68:bb:8e:9a:c3:f0:11:96:b9:35:a0:79:0f:ba:
                    f3:dc:d3:7e:9e:f7:79:e2:1c:f6:d4:bf:23:57:fd:
                    16:ac:36:eb:03:70:c1:e6:15:c5:43:e6:69:c6:5d:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D6:7C:FF:B4:CF:D0:6F:E3:26:18:EB:D9:29:4B:A2:EC:45:4B:76
            X509v3 Authority Key Identifier:
                keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6b:5a:97:90:21:75:4d:50:46:52:dc:28:c5:ee:30:f1:fb:
         0e:16:a0:7c:df:d9:09:fe:4d:4d:37:c2:0a:8b:a5:d2:2d:4b:
         92:5e:78:df:9f:a0:48:f3:c5:bf:3e:57:61:d0:9b:84:81:10:
         56:12:a6:0c:ff:ec:e3:ba:2e:47:6e:9b:29:0a:92:e3:92:fc:
         23:f6:3d:bd:26:8c:7a:cd:56:8b:c4:1a:12:db:59:ec:a9:f9:
         43:26:eb:7f:e0:37:44:6a:57:f5:94:a4:af:a4:c8:89:69:75:
         20:ca:8f:09:ac:fc:17:8b:48:af:fb:14:14:34:1d:35:de:16:
         87:ee:9c:31:ae:26:39:52:54:92:18:3b:e5:fd:67:20:90:e0:
         ec:ba:bc:0d:e7:f9:52:75:d1:b3:52:44:36:12:a5:87:6f:0f:
         1b:58:b5:32:7b:09:56:ec:5d:a9:5d:71:54:59:68:b0:fb:3c:
         f6:e7:44:e2:fa:f8:47:ea:99:05:b7:0f:2c:8a:bc:ff:45:cf:
         00:4e:b3:db:5d:8b:70:25:03:73:95:f3:d6:19:5b:5c:30:3e:
         60:23:61:0d:96:fb:c4:61:99:15:42:6b:ab:00:33:f9:61:02:
         73:11:c8:76:ec:4b:fe:56:7b:d5:6d:d8:58:93:42:67:ad:68:
         a5:65:c5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:00:07 2025 by rpki-client