This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File:                     vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier:          Ax/GuqwJzI5UJIZq0FFEdMng0E7TrkpwimmZTyMfQ0w=
Subject key identifier:   BE:26:ED:2D:1F:2A:19:B2:66:07:F4:33:48:22:04:06:25:CF:61:46
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer:       /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial:       043B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number:          10F1
Signing time:             Sat 06 Dec 2025 17:36:16 +0000
Manifest this update:     Sat 06 Dec 2025 17:36:16 +0000
Manifest next update:     Sat 13 Dec 2025 17:36:16 +0000
Files and hashes:         1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: lB4Z0fx6EEYH4596sag6tjqUmsYRYUZshRFTrIqzLB0=)
                          2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: mgb6NflmQm35vBEH6/rdIKJ5eJitJ9zemuTs4qdaAl8=)
                          3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: 5GGssBwo34kMxY1fgtwCfjU7+p5mfAazSfRBFfVGB/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
        Validity
            Not Before: Dec  6 17:36:16 2025 GMT
            Not After : Dec 13 17:36:16 2025 GMT
        Subject: CN=69346990-0b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ea:3c:8a:a8:99:fb:9b:8e:fb:c9:ea:00:4f:
                    95:9e:96:f3:17:0e:3d:2e:1c:18:6c:b7:88:52:36:
                    3c:c3:df:70:99:29:c5:1d:b5:85:ca:14:dd:64:cf:
                    2f:5f:d8:94:3f:84:c4:60:1a:ea:6a:c6:f4:57:7b:
                    ec:71:cd:a1:d9:cd:e7:6b:89:a4:cc:15:08:0d:ec:
                    c8:ac:da:05:7a:64:b0:8e:5d:1d:b3:ca:66:02:51:
                    6c:36:cb:e4:d8:65:86:33:e1:63:bf:bb:fc:cf:b2:
                    1d:94:66:e7:18:8b:1c:ba:2a:9a:02:18:6b:07:2e:
                    b2:b1:3f:f2:4c:74:89:f2:d5:36:be:2e:43:28:31:
                    c9:04:4e:86:9c:31:40:fc:85:a7:b1:e3:bc:32:31:
                    21:27:5e:ab:1c:a8:7a:55:18:24:b3:ba:dc:57:ab:
                    1a:54:73:18:6f:8b:18:ea:98:cc:42:82:7e:82:9f:
                    91:99:3e:ad:b0:fc:d7:81:2b:8d:40:da:0b:09:b1:
                    97:15:bf:06:58:53:58:05:26:b0:ae:04:7f:92:bd:
                    6d:26:8a:a2:9a:39:80:64:99:14:30:f4:81:0b:45:
                    34:1e:00:fa:48:8f:97:be:e9:d8:f2:ba:37:6e:c8:
                    da:02:74:de:71:fd:47:79:af:d8:2f:37:8a:58:0b:
                    93:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:26:ED:2D:1F:2A:19:B2:66:07:F4:33:48:22:04:06:25:CF:61:46
            X509v3 Authority Key Identifier:
                keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:be:79:59:62:07:ce:ac:a7:ed:66:e0:66:ee:29:51:35:de:
         10:0f:53:85:fa:70:7b:cc:2b:b7:e1:57:09:64:b0:73:31:18:
         09:57:e0:08:6c:85:07:52:2b:ec:b7:51:2f:20:be:94:9e:e4:
         69:2c:66:36:46:a7:f3:c7:11:3e:40:4c:80:6a:fe:9f:b1:9f:
         9f:08:9e:2c:4b:bb:00:8b:f6:dc:21:81:be:59:27:44:65:d9:
         f8:87:18:61:a3:23:0b:fc:99:bb:7e:5d:e8:b4:17:e3:cb:bc:
         6d:b2:82:c8:98:e3:1f:40:98:63:aa:66:92:12:51:3b:83:2f:
         98:d1:f0:c0:77:62:8b:1e:ff:77:91:b7:0f:1b:58:f7:7c:1d:
         e1:71:79:4c:f0:f7:64:af:82:4b:25:5f:8d:f7:e4:80:61:9f:
         9c:9b:35:b8:03:d4:8f:d0:bc:86:e6:8b:c8:87:6d:38:4f:f6:
         44:50:ba:c1:b7:c1:f3:b6:7a:c7:1e:d5:37:26:e4:b9:8e:46:
         d7:a0:e3:d3:6c:1b:6f:c2:a6:46:7c:cb:32:18:56:b4:45:10:
         43:56:44:58:2d:cf:06:07:74:fc:63:13:be:46:23:d4:02:dc:
         1a:4f:16:73:b9:ba:82:60:ad:92:37:cb:ae:8d:e1:e3:e8:38:
         33:41:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:40 2025 by rpki-client