This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
File:                     VFxHwOQxMzjcm0QCwSuty06YV8E.mft (raw, json)
Hash identifier:          C327z444x5rY6dWuhzwFYzdR015929N1zIF9Led6llY=
Subject key identifier:   97:19:EB:05:8E:17:2C:5F:C6:E7:07:AE:5E:53:5C:3B:F8:5C:6A:43
Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
Certificate issuer:       /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
Manifest number:          0180
Signing time:             Tue 09 Dec 2025 01:56:42 +0000
Manifest this update:     Tue 09 Dec 2025 01:56:42 +0000
Manifest next update:     Tue 16 Dec 2025 01:56:42 +0000
Files and hashes:         1: VFxHwOQxMzjcm0QCwSuty06YV8E.crl (hash: htS8vw6zI6XfyLaEcj7Y6FawZILlN8N5K5kKYjvJ5XA=)
                          2: 77F8EAD29CF811EFA2E0CD6AC4F9AE02.roa (hash: Ain3qdd9woinL4inH/8nG99VHakyMNpv4v8rmQWJ1Bs=)
                          3: 0F440AB26E7711EFAA4A1C1AC4F9AE02.roa (hash: O1np95hbIM7tMbwqTYjzC3DrWBrLxkB/hTITnk5MJww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl
                          rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 01:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB103, serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
        Validity
            Not Before: Dec  9 01:56:42 2025 GMT
            Not After : Dec 16 01:56:42 2025 GMT
        Subject: CN=693781da-67b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:a8:a3:e6:05:4f:74:85:52:1d:e7:14:08:
                    b8:1a:ff:92:79:b9:0c:a3:70:dc:b4:4c:9e:6a:43:
                    9f:7e:cc:97:0f:55:4a:36:09:e7:64:f0:70:d5:0c:
                    a7:f4:95:80:3e:7b:ed:b1:25:b1:25:b0:a0:84:d0:
                    89:6f:e8:db:81:4e:31:cb:78:40:4f:b2:5d:89:93:
                    7d:b9:f7:3f:26:e2:af:cc:54:1e:9a:93:f6:fb:b9:
                    71:0d:49:84:eb:4a:0b:7c:14:39:3b:bb:db:ab:49:
                    03:79:84:dd:df:2e:cc:13:88:ff:89:61:ab:b3:4e:
                    a5:6e:8f:40:c1:6e:d9:e9:7e:e8:b6:94:45:34:a2:
                    ef:c1:a5:57:b1:8f:64:86:8f:4d:c6:5c:67:73:c4:
                    70:00:08:2b:16:de:7f:51:a1:2b:56:6d:a4:5a:61:
                    7d:b3:8e:6a:f0:3e:ad:bd:91:79:f4:ad:20:ce:05:
                    c3:23:91:ae:f6:5b:c3:80:f0:c1:04:35:4b:5b:f8:
                    f9:c6:90:8d:03:87:6f:0d:ea:5c:35:7b:3d:c5:12:
                    44:e9:e9:3f:c7:73:0d:9a:67:e6:48:d1:5b:6a:82:
                    3c:4e:92:0b:9a:a0:93:1b:af:d6:4a:55:f9:6e:87:
                    88:a8:86:fe:b5:de:ea:f4:6c:13:51:e2:d1:75:57:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:19:EB:05:8E:17:2C:5F:C6:E7:07:AE:5E:53:5C:3B:F8:5C:6A:43
            X509v3 Authority Key Identifier:
                keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b9:1d:3c:86:3a:41:a7:cc:e2:99:be:fb:3a:1f:9e:dc:44:
         1a:5b:af:25:f8:2a:a5:67:6d:a2:43:8a:41:0b:2e:d3:00:f2:
         a3:ed:24:c9:38:2e:f5:2d:32:3c:87:a1:b4:f3:38:37:ce:39:
         69:0f:4d:86:95:10:73:c4:17:b3:85:1b:b8:ef:7d:e0:ba:b7:
         a9:95:40:16:df:bf:dc:88:4e:c9:46:1a:d3:e3:85:36:7b:75:
         85:8f:07:39:90:9c:1c:16:21:ef:5f:40:ea:6c:85:47:09:cf:
         57:ed:a6:7a:6a:3b:69:12:cc:0a:1c:f8:88:7d:66:64:9c:4f:
         03:f3:48:87:f4:5c:84:e1:f8:3b:67:2b:25:0f:b9:cd:f5:1f:
         0d:32:1d:ba:b0:81:fd:47:73:d4:f3:f8:30:19:4d:4d:0b:51:
         35:46:2d:7d:7d:4c:53:38:ac:e4:02:9b:3f:a9:b5:21:15:c1:
         88:00:91:bc:94:73:3c:67:82:d3:1d:b8:e4:d8:63:c1:ed:7e:
         cc:72:a2:bf:d0:c6:5b:e0:b4:1e:f2:3f:51:a3:e2:df:d1:44:
         f0:c5:4b:40:91:69:6f:e5:8b:c4:02:8b:e8:33:68:aa:98:c1:
         2d:fc:d2:a7:2b:f2:1a:cc:6f:47:55:30:ea:29:78:24:8a:a4:
         32:2c:d6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 08:02:55 2025 by rpki-client