This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
File:                     VU9dfGbsUOhKiru6mWgXfkcp02Y.mft (raw, json)
Hash identifier:          bK2C4Ylt7rXL6MVikoxWPq1/cQc/dRFMgqfAoh0oUNc=
Subject key identifier:   3E:D6:EB:56:7F:15:CB:01:DE:07:BF:1F:BD:0D:CF:9C:84:1C:55:58
Authority key identifier: 55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
Certificate issuer:       /CN=A91E8BE3/serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
Manifest number:          B5
Signing time:             Sun 07 Dec 2025 04:15:53 +0000
Manifest this update:     Sun 07 Dec 2025 04:15:52 +0000
Manifest next update:     Sun 14 Dec 2025 04:15:52 +0000
Files and hashes:         1: VU9dfGbsUOhKiru6mWgXfkcp02Y.crl (hash: IgLgy8DjoSv3bCRk9kzxFAuYDEk+Q9aDIypC2nk1NT0=)
                          2: 0AC098846EDA11F08D404571C4F9AE02.roa (hash: XUaCHo7ISEfVt8zg4dz4qiHM8RTC6XTgDTg25gi/BRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 04:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8BE3, serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
        Validity
            Not Before: Dec  7 04:15:52 2025 GMT
            Not After : Dec 14 04:15:52 2025 GMT
        Subject: CN=6934ff78-5472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:0d:1a:89:63:cc:f5:75:28:c2:ec:49:8a:
                    93:fa:f4:9e:62:35:9d:cb:52:1e:ca:ea:d6:db:28:
                    44:8b:8a:27:8e:0d:82:04:32:a6:c5:cb:09:2f:25:
                    c7:19:cb:cd:0a:d6:2e:b9:f6:f5:81:f5:eb:a1:23:
                    a5:e9:dd:f1:7f:cd:ab:51:a0:6c:5d:8e:26:b7:bb:
                    39:66:ec:86:8e:01:3f:0d:6f:24:5c:4c:75:68:21:
                    bf:35:1c:c9:cf:31:b8:a0:e3:7c:3a:25:01:d0:cb:
                    98:9e:f5:20:0d:0e:7d:d7:ba:76:df:13:73:18:80:
                    bf:4f:9b:be:02:8c:90:60:14:09:50:4f:b7:07:08:
                    28:e2:a0:0f:32:35:98:e4:95:38:0f:2d:d3:fb:1b:
                    7d:8c:7a:89:85:0c:1e:3f:16:7d:3f:4c:83:ec:54:
                    fd:ca:2e:2d:e4:91:ba:c6:ae:07:1f:c6:0d:66:3a:
                    91:ff:e0:06:36:71:57:5c:97:aa:67:fa:1d:5c:56:
                    a0:93:22:5a:f8:2c:93:b4:e6:b9:5e:4e:6f:69:7e:
                    90:63:9b:6e:82:0d:1a:07:99:b6:f7:c0:4b:4e:cb:
                    87:c0:32:7c:ef:15:d5:4a:16:8a:22:7d:32:10:fe:
                    46:90:53:d0:92:b9:e1:04:c7:6f:08:a1:6d:f9:42:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D6:EB:56:7F:15:CB:01:DE:07:BF:1F:BD:0D:CF:9C:84:1C:55:58
            X509v3 Authority Key Identifier:
                keyid:55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:58:31:74:75:c9:82:e0:f3:ad:66:60:08:a8:25:87:21:e0:
         29:71:9d:b1:57:76:b2:f7:75:23:cc:f4:8e:d0:47:cb:75:25:
         b8:75:ae:9b:f1:28:96:db:28:20:1c:e0:ec:d0:db:55:8a:f2:
         86:22:f2:91:7a:0f:80:fa:ee:da:20:2f:e3:22:d6:01:d2:95:
         e9:85:5e:7a:21:88:83:41:ef:6b:9d:65:6a:fc:a6:c9:f5:73:
         20:63:2c:31:df:89:d7:4b:cb:0d:a9:b4:a7:09:3a:dc:ad:9c:
         0c:7a:7e:1e:3d:42:cf:fa:ef:f1:f1:d5:0a:e8:a9:c3:ed:cb:
         c2:1f:7c:ed:91:f9:24:25:a5:8e:df:c6:26:32:06:d1:1d:dd:
         bc:50:f1:ad:62:16:65:4d:72:a7:cf:e1:c9:1f:a8:eb:58:f6:
         23:a4:2b:14:61:d0:0e:aa:da:24:94:f1:29:22:0b:9a:19:e6:
         eb:11:e2:fa:01:9d:73:ea:24:d7:8a:aa:2b:17:a0:bc:21:e7:
         a0:a2:91:de:56:a9:6b:db:ac:a0:d9:0e:61:2c:57:f5:00:75:
         ca:fa:75:02:21:a0:b5:7c:51:2c:6e:14:00:3f:8a:93:85:1d:
         6c:b5:76:54:98:2f:b4:e3:9d:d0:0d:2a:a1:1e:1d:d7:51:b3:
         90:85:00:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:12:00 2025 by rpki-client