This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File:                     voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier:          quM21dgQ811z0wjwQqP2wUbGNgkw6aputeWn7KJpwnc=
Subject key identifier:   CD:1F:34:9F:A7:94:73:2D:3A:C6:16:85:46:F1:C2:7E:00:09:71:AF
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       04C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number:          04AA
Signing time:             Sat 06 Dec 2025 22:43:43 +0000
Manifest this update:     Sat 06 Dec 2025 22:43:43 +0000
Manifest next update:     Sat 13 Dec 2025 22:43:43 +0000
Files and hashes:         1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: 4pALG37QDfN5RODaZmNfdLHIyJHOw+wOu3ZwJLmSUzM=)
                          2: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: R/nnjeAR+tZePhFeIgEDIZOhg5pi4qQT+4iwQfx8ekU=)
                          3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: KIM/sEwaQaYFPC8qF/5+qRUkUFtySui4RoXzgpLXzmc=)
                          4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Dec  6 22:43:43 2025 GMT
            Not After : Dec 13 22:43:43 2025 GMT
        Subject: CN=6934b19f-120d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ba:73:ab:ad:53:0d:d2:3a:e0:17:7b:05:55:
                    65:eb:0f:5b:96:59:64:e4:dc:1f:6e:1e:4c:75:3f:
                    19:bd:2d:31:84:13:f2:03:1e:34:44:6b:5d:df:5d:
                    74:53:ff:e7:6b:f2:03:cf:bb:4d:d9:ff:b8:d8:83:
                    f7:cb:9c:66:d4:f6:20:29:b3:fb:77:0d:dc:6f:46:
                    f6:73:c8:25:25:63:5a:b0:f0:a0:6d:89:3c:cc:ec:
                    eb:a7:ad:0a:79:23:18:d0:82:a1:44:c0:39:e6:ad:
                    02:ed:1a:d1:6c:78:8b:b0:a4:6c:0a:fe:30:aa:5a:
                    96:18:66:84:7d:ea:9e:9e:45:1f:41:b6:33:11:3d:
                    91:2a:7e:72:bc:82:46:77:f0:e4:f9:67:07:4b:56:
                    95:a8:5c:c2:d4:1f:9c:be:1d:11:80:45:a1:f7:6f:
                    11:ea:98:dc:8c:a7:12:54:99:20:15:27:79:27:5d:
                    b1:68:f3:8b:e3:c6:93:3f:4b:d6:98:49:8f:78:46:
                    d8:52:4f:5e:dc:cb:6f:88:68:16:e1:01:b4:cd:6e:
                    6e:d0:6c:33:a4:f0:c5:6f:72:62:d3:7f:a2:61:69:
                    f4:7a:9a:1a:d2:fb:96:50:14:df:9a:e6:0f:a4:00:
                    8d:8e:1b:c3:b9:35:14:d8:d7:f5:51:06:9a:31:14:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1F:34:9F:A7:94:73:2D:3A:C6:16:85:46:F1:C2:7E:00:09:71:AF
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:06:fe:4b:a7:c5:70:6f:2a:0a:2d:52:0d:46:33:9f:66:de:
         4a:d5:6f:09:d3:18:9b:22:fa:dc:aa:cc:23:e6:42:da:9b:bc:
         a8:1a:51:d9:c4:e5:f2:65:4c:0b:99:4b:15:02:9c:7c:f3:e4:
         97:9f:f4:8d:87:fd:4b:bb:36:b2:41:df:bd:14:3f:cf:db:55:
         73:2b:80:58:72:07:7e:aa:25:33:1c:fa:1f:ac:45:09:b3:04:
         f5:ae:19:6a:e5:b2:a6:4c:00:fd:f7:11:07:20:3e:5c:28:24:
         85:79:3a:65:50:0c:68:64:0e:9b:19:62:f5:e4:e6:36:b7:01:
         46:22:18:be:67:2b:49:91:1c:c0:a7:1d:4d:44:f5:15:1c:a6:
         52:f2:3a:0a:d5:54:83:86:96:64:f1:34:60:e9:83:b0:92:cf:
         99:54:32:d7:7a:f4:15:c2:dd:2c:71:03:d9:16:fd:51:0d:4b:
         45:45:fa:46:4b:49:93:f5:2b:b3:ca:6e:a2:76:27:d1:2e:5a:
         d6:cc:41:14:b5:2b:2e:85:79:32:c5:11:c3:cf:94:7c:5e:9a:
         0a:c0:b9:63:d6:b2:15:59:68:6e:8d:a7:f0:f6:cc:36:b0:3b:
         52:e4:c8:14:c6:81:44:88:a6:49:fb:31:35:5d:ea:09:ec:0b:
         88:1e:4b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:11:25 2025 by rpki-client