This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
File:                     Vd1sG_HER988yGQNERKpasrh-Aw.mft (raw, json)
Hash identifier:          qsQyY/wWlX8HFoekzDm4D23Qka5bhSKo69cUa8tLl9A=
Subject key identifier:   81:7B:B6:09:93:07:C1:4A:44:48:B9:D3:19:86:C4:40:32:03:E1:1D
Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
Certificate issuer:       /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
Manifest number:          63
Signing time:             Tue 23 Dec 2025 05:56:09 +0000
Manifest this update:     Tue 23 Dec 2025 05:56:09 +0000
Manifest next update:     Tue 30 Dec 2025 05:56:09 +0000
Files and hashes:         1: Vd1sG_HER988yGQNERKpasrh-Aw.crl (hash: Ci5mybHEK5vk1Z7d1cucL/9/xICfTo2HmLT4ODrzEVY=)
                          2: 36B587404B0F11F0A2359B4EC4F9AE02.roa (hash: 0tAJU23FvpmwHToSwKHDbcdyjTNi9HpIYl7MTwLrwkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
                          rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
        Validity
            Not Before: Dec 23 05:56:09 2025 GMT
            Not After : Dec 30 05:56:09 2025 GMT
        Subject: CN=694a2ef9-b42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5d:58:9d:89:1a:57:c5:fc:38:9f:f9:46:34:
                    4c:84:31:41:47:84:c6:c9:4b:fc:1c:e4:c7:bd:c8:
                    42:3a:73:bd:6f:69:44:9e:28:5d:6e:8d:d9:24:62:
                    c7:a7:98:80:81:23:3d:75:9c:2d:ac:19:79:cc:85:
                    3b:6b:70:5a:8e:bb:ad:d7:ee:77:15:63:ec:57:23:
                    1d:f6:f9:39:72:bd:bb:de:06:be:b3:1c:b4:5d:52:
                    dd:07:cc:57:fb:cf:57:99:16:dc:13:ad:bb:a6:7d:
                    97:62:f8:68:9e:fb:94:28:0d:12:19:c3:20:0b:3c:
                    2f:7c:47:9b:03:2d:44:12:c7:57:18:d6:59:e1:ab:
                    c2:3e:26:58:0a:41:ce:7a:3f:6d:bd:77:83:2d:49:
                    28:74:0d:0d:b4:b6:40:37:f0:75:c1:78:54:ff:d1:
                    88:c6:46:3e:ff:f5:85:c6:50:bd:0b:a1:b9:0b:1d:
                    94:69:4f:30:df:46:cb:05:00:94:6c:32:2d:cb:1b:
                    e8:a6:ae:c6:a8:c9:12:c2:6a:92:7b:44:7e:51:34:
                    c8:19:e1:ec:c2:3c:9e:cf:eb:19:b1:05:d7:16:3b:
                    0e:89:ee:d3:8d:d0:87:42:3f:97:43:4e:d9:86:8f:
                    12:6f:32:1d:99:32:14:50:a9:cc:f3:0c:a8:60:25:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7B:B6:09:93:07:C1:4A:44:48:B9:D3:19:86:C4:40:32:03:E1:1D
            X509v3 Authority Key Identifier:
                keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4b:66:55:c2:3f:c7:8b:0c:32:7b:2d:ac:3b:0b:32:3d:39:
         d9:c9:7c:8f:40:7d:11:cf:c5:78:54:f2:7e:bc:c7:8b:1c:1f:
         90:27:35:97:46:65:8b:45:dd:6e:31:e8:95:d7:1f:94:16:f5:
         af:c9:95:ef:12:ed:89:63:c0:d3:7c:2f:38:d9:9a:fb:27:e2:
         66:03:24:90:11:f8:42:73:20:f7:ec:f0:ab:b7:e4:fc:21:92:
         50:b9:06:4b:b3:9a:de:29:f9:07:ad:2c:8d:f6:37:03:6f:ce:
         39:7d:2a:2d:b7:c1:08:1d:7b:f5:b6:ec:b6:81:5b:49:8f:56:
         20:96:d2:6d:dc:09:03:a2:93:ce:1c:b7:47:63:da:23:3b:cc:
         e4:5b:92:44:cf:13:37:a4:35:4e:2b:3e:d4:ad:9e:b1:da:c8:
         c5:c0:18:1e:24:33:2f:74:64:a3:11:ac:cd:36:20:64:9c:b3:
         4e:df:bf:31:2c:a2:45:88:19:ff:ab:b4:be:1a:36:16:84:17:
         12:fe:53:09:cb:8b:8e:d0:aa:2a:4e:60:ba:6c:06:6d:f1:da:
         fb:4d:49:9d:c9:44:19:d4:f4:20:ce:16:cf:94:90:49:ea:71:
         ce:c2:a4:36:a7:fe:a1:d8:f5:a0:db:5c:46:30:b5:83:d1:27:
         9d:5d:0c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:08 2025 by rpki-client