This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
File:                     vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json)
Hash identifier:          7ZbFs4iCGQNbQwxOsYBCIbn98v1GCi6UE1Vohg8wxPk=
Subject key identifier:   36:CF:BD:97:99:35:F9:D7:E9:7C:FC:CC:F2:8C:8C:54:53:20:29:CE
Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B
Certificate issuer:       /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B
Certificate serial:       06FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
Manifest number:          06F8
Signing time:             Mon 22 Dec 2025 21:11:04 +0000
Manifest this update:     Mon 22 Dec 2025 21:11:04 +0000
Manifest next update:     Mon 29 Dec 2025 21:11:04 +0000
Files and hashes:         1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: ekqwJXjMdk8ljwlidOlstt1RPiBoLns/PUhQLFSjbUc=)
                          2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: I+eEa2BCG1ocgDoHBOIM7GqSJBtmqFy6z+9Rb7P5WKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl
                          rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1789 (0x6fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B
        Validity
            Not Before: Dec 22 21:11:04 2025 GMT
            Not After : Dec 29 21:11:04 2025 GMT
        Subject: CN=6949b3e8-c49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:7d:7b:23:90:c9:fa:24:53:ba:32:71:82:
                    2e:74:9a:b5:07:3f:45:ad:67:d7:ed:be:ca:46:88:
                    0f:65:e2:48:fa:ca:fd:4c:c0:fe:d7:ad:da:a2:5c:
                    2d:eb:21:59:38:ea:7f:f5:02:77:4f:0c:64:bb:6d:
                    0f:f4:ab:f0:e3:1f:f9:d7:cc:00:15:73:ec:24:6b:
                    8a:74:33:84:4b:41:e5:42:56:ce:36:0a:05:12:6e:
                    c3:5a:6a:27:18:d6:0a:34:cb:58:d3:be:cf:a1:4e:
                    15:5b:f4:b4:81:7e:29:ae:2f:6d:d9:a8:69:46:49:
                    dd:f9:ad:89:0c:f5:ad:70:9d:40:58:b6:06:cb:fd:
                    d4:66:2b:9d:e6:02:31:49:29:f0:9c:da:eb:d4:d1:
                    02:ee:8a:ed:77:4d:d7:38:0b:e7:e4:8e:4d:2b:03:
                    ea:b9:c0:d7:f4:6d:08:5a:ea:f8:db:62:20:d2:63:
                    d4:63:9a:cc:00:42:04:cc:9e:42:9f:90:b3:64:b8:
                    f4:fc:e4:d8:a2:61:79:37:c6:ef:eb:70:55:ba:2c:
                    5c:4c:1a:32:75:07:ca:e7:fb:0a:ae:ea:0b:82:cb:
                    80:12:06:f7:3e:ec:9f:f4:51:d9:e3:26:63:91:22:
                    88:14:59:b3:83:dc:6d:a4:43:88:21:e2:94:84:7c:
                    4c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CF:BD:97:99:35:F9:D7:E9:7C:FC:CC:F2:8C:8C:54:53:20:29:CE
            X509v3 Authority Key Identifier:
                keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f3:6d:5f:1d:28:fe:de:bb:bd:78:a8:fe:43:e6:91:ce:64:
         11:3f:cd:11:f3:85:73:f2:ea:f6:df:87:75:17:09:4b:77:fd:
         f9:bf:7d:2e:89:e2:15:ab:76:15:68:43:2c:94:e7:d9:cc:e9:
         40:96:c9:d3:cf:57:4c:b0:c8:58:4e:b4:f3:3c:d4:bf:39:5c:
         58:e6:c6:c0:6d:a9:da:92:2a:4b:6f:7e:9c:de:86:18:70:a4:
         6d:bb:be:2f:c1:8c:ed:d8:2d:f0:28:2a:f7:71:d2:e3:d8:7a:
         b0:6e:fe:ea:04:ff:a4:af:50:8f:95:67:ab:76:4c:77:58:44:
         d7:8b:18:b0:81:36:ae:0f:53:ad:75:df:31:44:d2:1d:d1:0c:
         10:5a:09:bd:9c:9a:2b:dd:1f:96:9c:ba:af:21:3c:9f:49:33:
         5d:46:e6:0b:29:63:1f:22:34:ed:ee:36:40:06:c3:97:da:fa:
         35:e6:11:83:2b:ec:96:53:5e:63:c9:89:99:35:3b:f6:c9:af:
         63:01:a3:d4:e0:e0:0d:fe:b4:02:ae:ba:2f:06:9d:a8:e1:ae:
         07:a8:a9:43:91:47:2f:7a:92:55:ef:57:cc:b7:d7:fe:97:ac:
         5d:dd:95:bb:8c:49:24:7a:6d:ff:39:1e:ce:c4:dc:2e:91:93:
         74:14:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:31 2025 by rpki-client