This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
File:                     VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json)
Hash identifier:          fenyPv9w9347tVVtkg4hfBfciOeC6ScReKy61SxaJoA=
Subject key identifier:   8D:86:B9:6A:7A:42:B5:AB:E8:3D:8D:DE:1F:B5:92:BA:6E:B3:1C:31
Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A
Certificate issuer:       /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
Certificate serial:       03BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
Manifest number:          03BA
Signing time:             Mon 22 Dec 2025 23:41:14 +0000
Manifest this update:     Mon 22 Dec 2025 23:41:14 +0000
Manifest next update:     Mon 29 Dec 2025 23:41:14 +0000
Files and hashes:         1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: JHiWv3CbwWe3IQG33U9bkSMONKrnKxlvViIrqJQe9wA=)
                          2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: KlAC54soZmN85lgdd13wHGCcsR/XbE59aQyhJMVb4zs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
        Validity
            Not Before: Dec 22 23:41:14 2025 GMT
            Not After : Dec 29 23:41:14 2025 GMT
        Subject: CN=6949d71a-ed51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:2b:b3:d4:aa:e1:63:11:33:bb:97:85:09:
                    4a:4d:b3:c4:63:41:d2:69:cf:22:1f:57:7d:26:a3:
                    04:aa:e9:6a:dd:78:9a:68:38:fa:86:7e:11:4d:0f:
                    b1:a5:a0:9f:2f:57:ac:91:cb:eb:da:f8:ba:2c:9c:
                    43:40:6b:61:14:cd:ed:78:dd:54:98:da:d1:66:91:
                    e5:ad:8a:b3:35:d5:a2:03:14:f4:d9:11:92:6c:bb:
                    85:58:a7:05:8d:da:3c:c0:7a:bf:c5:47:6f:21:27:
                    87:47:5c:03:10:e4:83:bb:37:23:ed:08:15:5c:24:
                    b2:6f:d1:d9:b8:41:25:5c:97:cc:e6:94:84:51:83:
                    f7:0d:87:18:e1:44:cb:01:bc:13:fb:45:6d:52:42:
                    d9:37:17:bc:0a:83:30:5d:1b:eb:00:52:0d:be:6c:
                    90:da:8c:97:78:3c:f0:ac:55:53:08:9f:b2:d7:8a:
                    18:ea:97:18:fe:cd:eb:0e:0c:78:5c:05:05:55:15:
                    c6:a8:11:71:06:08:dd:a3:18:5e:ef:16:b3:79:90:
                    5b:73:3a:89:29:5d:ac:f8:15:37:f2:ba:97:ba:11:
                    31:8d:38:cc:ec:69:4c:ae:cf:35:4f:95:24:eb:a6:
                    d9:08:e7:14:11:98:ec:e0:ea:e6:ca:a9:c9:ed:49:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:86:B9:6A:7A:42:B5:AB:E8:3D:8D:DE:1F:B5:92:BA:6E:B3:1C:31
            X509v3 Authority Key Identifier:
                keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:63:70:31:01:5c:c0:6b:12:ba:54:a2:86:5e:b0:8a:8a:7c:
         18:77:a2:c2:1b:74:11:86:2b:44:6b:bd:f5:68:b2:2b:ff:77:
         9c:69:a4:cd:5b:07:70:9b:eb:ff:23:01:07:13:41:d6:e5:6e:
         95:e8:be:34:96:f1:66:5f:35:d6:08:6d:12:ac:83:52:b9:fa:
         4c:64:27:07:cd:b0:26:30:04:76:0f:01:46:ed:4b:f7:d0:db:
         93:ae:31:f1:d1:05:6a:44:64:88:11:1b:6b:65:40:5f:37:d7:
         93:f1:c3:42:96:c8:ab:77:00:a2:1a:1d:35:b0:b8:e3:60:7d:
         4b:67:40:b0:5f:dc:bb:39:ea:0d:c8:1d:7d:bc:ed:ac:7c:e9:
         80:70:65:7a:b1:c9:b1:7c:da:09:ff:fd:49:a7:43:0b:bf:65:
         54:c4:47:38:e7:80:22:51:af:2f:4d:67:ed:7d:97:72:a3:a8:
         09:92:e7:89:d1:20:b9:ab:95:6d:a6:25:4f:93:2a:3e:6b:7d:
         9d:20:c8:df:8c:28:cc:7b:c8:70:37:d9:89:fd:cc:ba:53:90:
         9b:30:99:73:d1:36:e3:da:82:b2:f5:ee:49:23:60:af:84:65:
         35:46:77:a1:40:eb:e5:35:e9:84:2c:d1:0d:ab:73:ef:cf:61:
         d2:60:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:40 2025 by rpki-client