This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
File:                     M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json)
Hash identifier:          SA3ho49ZR0Te8jJse7JtAYGR5TzWlUN8ByVTmtr5Ozs=
Subject key identifier:   C8:D2:FE:E1:72:CA:3E:0E:71:F7:C0:B6:35:BF:B9:A9:C3:97:C7:C6
Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Certificate issuer:       /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
Manifest number:          0168
Signing time:             Tue 23 Dec 2025 02:59:07 +0000
Manifest this update:     Tue 23 Dec 2025 02:59:07 +0000
Manifest next update:     Tue 30 Dec 2025 02:59:07 +0000
Files and hashes:         1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: +pN3erjgF84X+Qv+BoiCG723zoQ/JK16U/tTrXTtTpM=)
                          2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: LUJnGhbUriDz5PEXzwqHVqGRqenH5+Jp3evLId0QNQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
                          rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
        Validity
            Not Before: Dec 23 02:59:07 2025 GMT
            Not After : Dec 30 02:59:07 2025 GMT
        Subject: CN=694a057b-d7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:96:df:2a:87:f1:34:ed:10:39:bb:57:2f:
                    f0:1e:fc:56:61:42:ca:6c:a3:c3:49:df:e7:12:ec:
                    ef:50:f3:32:3f:34:16:44:11:9a:0a:ae:ab:ba:d4:
                    b1:28:7d:8b:79:d0:8a:72:16:7a:94:f0:01:cb:90:
                    5b:87:88:35:e8:49:63:c3:97:27:17:a0:18:b4:99:
                    21:5c:8c:7e:7d:d0:40:24:ad:cf:a3:42:05:d4:73:
                    47:2c:8c:ea:51:e8:91:4a:cc:3e:bd:c8:8f:ca:b0:
                    92:ea:14:38:46:ee:b9:99:d1:1a:85:a2:11:f5:b9:
                    3b:1f:ba:ec:1e:fd:dd:e9:40:ef:75:25:c5:2e:82:
                    a5:ca:39:47:1f:32:c6:ed:5f:fc:d6:f4:5f:64:6f:
                    fa:0f:a7:03:2c:52:b3:a9:cf:85:0c:2f:2d:e3:d1:
                    fa:29:11:b8:4f:db:08:8d:2b:56:fb:58:7c:b5:60:
                    d3:51:c4:86:83:45:5b:83:16:94:6a:a5:7a:35:96:
                    3a:92:f1:ba:55:7b:34:c8:98:fc:e4:43:0a:0a:e2:
                    23:38:db:61:7c:42:c0:94:78:9f:a3:87:84:54:c2:
                    fb:49:68:80:b3:b7:02:bf:57:84:f1:6c:62:3f:10:
                    a8:94:46:f5:1d:b1:ef:1b:6c:a8:a4:8c:9b:34:39:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D2:FE:E1:72:CA:3E:0E:71:F7:C0:B6:35:BF:B9:A9:C3:97:C7:C6
            X509v3 Authority Key Identifier:
                keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:cc:82:98:b8:bc:a4:60:03:b9:37:20:17:23:b7:5e:a1:
         28:9e:83:82:7f:21:90:b2:d9:05:77:e5:6a:d9:c5:ca:4c:66:
         30:91:3d:9a:1f:b3:77:32:a0:96:c3:56:2f:4b:c9:12:31:49:
         39:ef:7c:d6:8e:55:2a:1e:bc:68:56:b3:93:7a:90:07:ad:f2:
         de:2c:10:99:7a:5a:86:d5:82:6c:5d:95:15:21:b2:24:f3:0b:
         2c:52:0f:0a:78:f6:b2:a1:54:7b:d9:3a:0b:20:73:1f:13:09:
         c0:04:69:c1:59:8a:58:c1:55:bb:7f:70:1c:c8:d9:fd:bf:aa:
         1b:2f:20:32:d2:82:8a:54:aa:42:5a:b7:c8:45:58:64:28:8a:
         21:94:2d:6d:09:a3:2d:db:36:08:6c:b4:d8:5d:9c:5c:69:87:
         50:ce:b1:81:82:0f:97:94:38:a4:d2:11:22:48:a3:26:27:0b:
         2c:e9:a3:f8:96:8f:f1:1c:27:29:fb:64:f6:f2:4e:aa:fa:60:
         6f:0b:79:4c:ec:62:a2:b1:81:8d:29:09:26:9e:4a:7f:4d:18:
         73:4f:b0:c6:32:81:e5:ac:b1:fa:e2:20:02:f3:aa:7b:00:24:
         fd:6f:cf:28:61:73:12:94:17:85:88:07:9b:23:6e:d4:d0:d8:
         f8:4b:7f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:14:12 2025 by rpki-client