This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
File:                     VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json)
Hash identifier:          e3iMH8W5uYgYN88HDzMZnuqY8SbUvVyCtGUBmve0X9E=
Subject key identifier:   EC:EF:D6:88:1D:27:52:C7:38:FA:7A:F5:46:16:53:54:8D:33:A8:C7
Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33
Certificate issuer:       /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233
Certificate serial:       0874
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
Manifest number:          0868
Signing time:             Thu 04 Dec 2025 19:47:09 +0000
Manifest this update:     Thu 04 Dec 2025 19:47:08 +0000
Manifest next update:     Thu 11 Dec 2025 19:47:08 +0000
Files and hashes:         1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: KSsZBUa/cOnqvbJvj4cyOAh+AeyXqITubQSRbEfWCcM=)
                          2: CA290E34341311EFA3C99F09C4F9AE02.roa (hash: F2ehSlNBpZVAOeI83NaC14EsDciABgTNrvpmZu4awNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl
                          rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164 (0x874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91173B6, serialNumber=545887D7719748B469D053FF316A6A57AB996233
        Validity
            Not Before: Dec  4 19:47:08 2025 GMT
            Not After : Dec 11 19:47:08 2025 GMT
        Subject: CN=6931e53d-27a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:fc:d2:18:71:29:5b:a3:64:13:49:bb:1f:
                    6c:ea:91:f0:45:70:9b:25:e6:26:10:73:b5:cf:62:
                    c7:b3:47:db:95:76:60:57:94:09:c5:14:48:6a:57:
                    0f:2f:e6:82:77:42:10:a7:ed:65:fc:22:cc:99:e9:
                    29:ac:1e:8d:30:fb:42:d7:d9:ca:f0:3c:08:a8:ad:
                    5e:9d:88:19:4c:83:e8:89:15:50:3b:7e:82:08:44:
                    b2:bd:f7:d7:b4:ca:23:1b:de:53:ec:8d:14:41:94:
                    3e:ff:56:07:73:19:d4:56:d2:55:a0:b4:e1:42:cf:
                    90:e0:d3:4d:bc:d6:fe:46:76:5f:82:cc:bd:4c:4b:
                    e4:85:2d:5b:01:1a:b8:c2:40:51:1d:55:d6:41:32:
                    97:9b:72:51:05:a3:1c:3f:e2:95:ec:88:4f:53:ef:
                    d1:91:5c:5c:29:2a:b8:97:b0:bb:4e:cf:39:90:de:
                    dd:42:0e:55:e4:bc:c7:d4:85:69:56:99:a9:9b:4a:
                    7f:42:85:a6:78:bc:16:19:45:bb:bf:73:fd:27:eb:
                    d3:87:54:c4:ba:ed:fa:cf:48:22:41:7d:c0:1f:8b:
                    73:d4:84:25:73:ad:5a:52:ab:dd:22:0c:2f:b4:2d:
                    35:8b:aa:27:02:70:40:c9:49:a9:29:25:58:8c:c6:
                    ee:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EF:D6:88:1D:27:52:C7:38:FA:7A:F5:46:16:53:54:8D:33:A8:C7
            X509v3 Authority Key Identifier:
                keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:83:38:51:8d:3a:2e:48:cb:e1:6d:e7:f2:67:36:6a:88:35:
         6c:f6:c7:46:23:47:e6:93:26:6b:03:c0:b5:f9:b1:16:86:19:
         b7:47:cb:9c:77:b2:0e:c8:03:06:49:eb:32:7f:7f:85:55:9a:
         68:73:28:49:40:c4:64:42:11:d4:41:30:43:49:93:1a:b8:e8:
         25:ca:5c:e2:af:04:3b:76:09:e7:37:cc:a5:d5:3c:96:04:d1:
         d8:92:e8:dc:66:f1:55:75:f3:7c:c9:ff:27:5e:69:3d:98:76:
         60:69:5c:36:2a:2b:ec:09:c6:6d:61:9f:17:a5:11:03:c8:55:
         8c:14:62:82:55:0e:07:e6:b0:a5:f7:35:39:6a:9d:cf:42:85:
         45:89:f7:e5:de:82:09:48:0c:6a:9d:e1:95:c7:7a:a4:0a:41:
         d4:16:42:7e:87:3d:f2:35:19:86:58:dd:83:2e:9c:39:6c:d6:
         49:25:e1:a2:43:b5:5f:57:8e:bb:c4:76:ca:8d:49:b4:9e:13:
         40:89:03:7c:fb:dc:1b:66:24:47:88:2d:5d:6d:da:df:d7:d4:
         eb:ad:eb:29:a3:fe:77:bf:02:0c:0e:ef:50:81:2f:f7:4d:a2:
         7a:b6:e2:96:4e:1f:99:ac:82:be:bb:e4:df:d4:65:9f:a2:3f:
         22:9a:cf:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3
QUI5OTYyMzMwHhcNMjUxMjA0MTk0NzA4WhcNMjUxMjExMTk0NzA4WjAYMRYwFAYD
VQQDEw02OTMxZTUzZC0yN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Iv80hhxKVujZBNJux9s6pHwRXCbJeYmEHO1z2LHs0fblXZgV5QJxRRIalcP
L+aCd0IQp+1l/CLMmekprB6NMPtC19nK8DwIqK1enYgZTIPoiRVQO36CCESyvffX
tMojG95T7I0UQZQ+/1YHcxnUVtJVoLThQs+Q4NNNvNb+RnZfgsy9TEvkhS1bARq4
wkBRHVXWQTKXm3JRBaMcP+KV7IhPU+/RkVxcKSq4l7C7Ts85kN7dQg5V5LzH1IVp
Vpmpm0p/QoWmeLwWGUW7v3P9J+vTh1TEuu36z0giQX3AH4tz1IQlc61aUqvdIgwv
tC01i6onAnBAyUmpKSVYjMbuWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzv1ogd
J1LHOPp69UYWU1SNM6jHMB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx
OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzNCNi8xMEY0ODQ4NkUxOUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNM
UnAwRlBfTVdwcVY2dVpZak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCSgzhRjTouSMvhbefyZzZqiDVs9sdGI0fmkyZrA8C1+bEWhhm3R8uc
d7IOyAMGSesyf3+FVZpocyhJQMRkQhHUQTBDSZMauOglylzirwQ7dgnnN8yl1TyW
BNHYkujcZvFVdfN8yf8nXmk9mHZgaVw2KivsCcZtYZ8XpREDyFWMFGKCVQ4H5rCl
9zU5ap3PQoVFiffl3oIJSAxqneGVx3qkCkHUFkJ+hz3yNRmGWN2DLpw5bNZJJeGi
Q7VfV467xHbKjUm0nhNAiQN8+9wbZiRHiC1dbdrf19Trrespo/53vwIMDu9QgS/3
TaJ6tuKWTh+ZrIK+u+Tf1GWfoj8ims8Y
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:48:05 2025 by rpki-client