This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
File:                     V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft (raw, json)
Hash identifier:          9rcdZwc7cugHnVHWK/6zQl/djiOcWGTvOfhLnPJ7/jM=
Subject key identifier:   1D:EC:B7:C0:6B:92:80:2E:78:3F:13:74:44:F0:BD:39:EA:93:10:45
Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
Certificate issuer:       /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Certificate serial:       0421
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
Manifest number:          041B
Signing time:             Mon 22 Dec 2025 23:25:22 +0000
Manifest this update:     Mon 22 Dec 2025 23:25:22 +0000
Manifest next update:     Mon 29 Dec 2025 23:25:22 +0000
Files and hashes:         1: V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl (hash: VE6HX5B4wdmZwg0oLVqEw48X1huRagkYWJMRFKPwUUk=)
                          2: 821CAFEE923811EC955B7A3AC4F9AE02.roa (hash: 9KQWUlz6QNm+2IJYVtG7dsHf8uD3C5dcvLfvCk8SVA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A3F, serialNumber=576C5447C09B597107B770C101C89327F105BD33
        Validity
            Not Before: Dec 22 23:25:22 2025 GMT
            Not After : Dec 29 23:25:22 2025 GMT
        Subject: CN=6949d362-511a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b4:06:d2:1e:db:0a:99:45:4d:6b:2b:f2:f1:
                    93:b5:2f:2b:42:7a:bf:ba:e9:09:68:f1:e8:ad:b9:
                    48:fb:64:3f:c2:e4:e6:57:93:4c:4d:27:ba:5d:6a:
                    f0:57:9a:b8:b1:f8:c6:84:8c:87:5d:62:b6:9d:d0:
                    32:97:16:35:f2:be:8b:8f:88:9d:38:84:91:71:23:
                    c5:39:b0:b6:8b:39:7e:74:cf:ef:3a:51:5c:9b:e2:
                    86:5e:f4:9e:a4:6f:41:bf:df:c7:4b:06:e1:3e:57:
                    7d:fc:d5:27:5f:ba:74:b4:a9:10:b7:00:0c:73:df:
                    14:66:1a:5b:ba:35:5e:0c:fd:30:11:6d:bc:26:42:
                    1f:70:ce:b5:aa:85:f0:10:1d:f2:1c:10:cc:48:5d:
                    ec:b0:f4:1c:03:d3:21:51:9a:6b:c0:db:8b:65:76:
                    94:2d:7d:db:90:d0:fd:bc:12:9d:ac:22:d5:6f:ae:
                    e8:fa:1c:47:99:26:a1:c2:7f:c3:bf:86:0c:67:de:
                    3e:e7:02:f2:10:4f:bf:5d:a3:df:ea:ea:75:d0:da:
                    65:45:10:86:e6:f2:00:76:73:b7:f4:d3:67:8f:f2:
                    7f:9a:ae:4d:50:14:20:0d:a8:04:15:f0:7b:80:50:
                    5a:4e:98:f5:a3:58:7d:62:15:d0:93:ad:44:56:36:
                    4a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EC:B7:C0:6B:92:80:2E:78:3F:13:74:44:F0:BD:39:EA:93:10:45
            X509v3 Authority Key Identifier:
                keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7c:91:f9:cc:38:bf:0a:95:f1:a2:f2:c9:69:b5:21:32:ec:
         39:91:91:09:37:0e:9f:4c:0c:3d:3c:52:de:82:04:41:02:f5:
         75:9e:d9:4d:ca:6b:e0:6a:6b:93:65:bf:ec:ad:db:47:f7:7d:
         8c:2c:83:ed:fe:39:4f:2f:02:61:4e:61:47:d3:ff:f4:e7:9b:
         49:c1:7e:88:a9:50:b9:c4:ef:6f:83:33:eb:b6:15:38:67:df:
         fa:46:08:a8:9a:dd:6f:a3:fa:cf:20:d4:ab:92:0e:80:de:9e:
         3e:8e:2b:ab:d4:69:6a:54:d1:19:de:e9:76:bb:c9:47:3c:b5:
         92:07:8f:48:c8:6f:af:23:0f:74:94:74:3a:77:0d:1f:67:cf:
         b1:32:c8:7a:56:0c:31:3c:03:db:b0:d1:cc:9a:a4:0b:9c:86:
         52:fd:8f:2e:bb:f3:67:6b:40:1e:2d:0a:a9:77:7a:7f:42:74:
         50:dd:cc:e6:ed:9f:f0:b5:13:65:47:f3:be:06:73:69:42:f8:
         50:69:bc:fb:9a:68:ad:92:c1:ae:c0:39:c8:de:d7:92:59:48:
         31:f9:f8:a8:02:93:19:f8:73:10:da:ea:af:6e:8b:4d:c2:85:
         af:bd:05:61:e4:35:9a:d6:23:d9:72:67:c5:a9:ea:ba:a4:5e:
         5a:78:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:34 2025 by rpki-client