This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
File:                     VQiKMVvLUJi-72Zaqcvf0yogWCA.mft (raw, json)
Hash identifier:          KJkSG7sDdgvrccIu1yMpw2aKGWZZc13miUQ1AEzUyWs=
Subject key identifier:   80:C4:A8:08:AF:A2:8A:BC:7D:5E:1A:21:ED:91:D8:A8:2D:15:D1:FF
Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20
Certificate issuer:       /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
Certificate serial:       0708
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
Manifest number:          06F0
Signing time:             Thu 04 Dec 2025 20:54:49 +0000
Manifest this update:     Thu 04 Dec 2025 20:54:48 +0000
Manifest next update:     Thu 11 Dec 2025 20:54:48 +0000
Files and hashes:         1: VQiKMVvLUJi-72Zaqcvf0yogWCA.crl (hash: kJ2XNEtkJYvOMGb/wDq0CRUQgxg3KjxV+5CZWsS7o0k=)
                          2: 4AC85EBC8E1511F083A5EB46C4F9AE02.roa (hash: HpSbnGJEafe0Cwqy3fqQEE7tGOKywS9PLDhr9ZIWw18=)
                          3: A9B5CDC4B97111F089BA4733C4F9AE02.roa (hash: e7NB/rZJ7soW34sGauamE9L/Mh5Ro39SnWUlgmJO+4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl
                          rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800 (0x708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119F89, serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
        Validity
            Not Before: Dec  4 20:54:48 2025 GMT
            Not After : Dec 11 20:54:48 2025 GMT
        Subject: CN=6931f519-d25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:0b:7a:8b:65:8e:c8:a1:d4:2c:ec:81:2e:
                    80:da:d2:85:cb:05:77:bb:d8:f6:8b:ec:4e:7e:a3:
                    cf:33:b1:52:35:0c:4f:d0:25:6a:87:00:00:47:24:
                    3f:0e:91:25:42:e8:19:27:e0:16:9a:10:ac:7b:ed:
                    8d:59:92:d1:2d:7f:07:be:f5:81:34:71:a0:fa:e6:
                    72:be:2d:2b:df:16:75:87:64:d0:07:1e:72:7c:df:
                    13:f8:c1:4d:7b:ac:fd:1f:60:da:2b:5a:81:78:de:
                    e3:e9:09:c6:8f:67:9c:5b:0f:32:9a:98:13:b7:70:
                    d2:b4:05:12:98:b6:cc:1d:cf:38:0e:67:dc:04:fe:
                    bc:c7:34:19:96:0c:3b:52:52:d8:fa:6a:e5:d7:47:
                    27:29:8d:5f:ed:8c:47:87:8f:4c:7b:33:05:1f:04:
                    90:5e:1b:75:4a:61:4b:98:62:30:e1:64:bf:53:c2:
                    7d:d4:bb:fe:3b:d2:46:f2:83:3e:76:af:22:00:ac:
                    62:03:ed:e4:2e:eb:f6:04:88:e6:71:c3:57:da:0a:
                    d6:20:02:d0:d1:71:20:ef:df:08:12:47:cc:8d:19:
                    4d:43:1d:fc:7d:42:bb:72:44:0d:c1:ba:9c:cb:a0:
                    e8:78:e9:2a:b9:3b:5c:79:a9:d4:35:e4:a5:03:cc:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C4:A8:08:AF:A2:8A:BC:7D:5E:1A:21:ED:91:D8:A8:2D:15:D1:FF
            X509v3 Authority Key Identifier:
                keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:24:da:8f:67:68:3e:fa:29:b4:71:5d:a8:b5:30:48:2c:b9:
         fe:72:8e:86:de:b5:68:f6:6f:ac:4e:d0:17:5d:3a:9b:64:75:
         20:54:05:db:7e:6f:1b:3e:5e:78:5a:d7:4e:bc:da:60:53:bc:
         71:84:2e:c2:4c:7f:38:da:04:74:31:f5:78:8b:d9:b3:ac:04:
         61:7b:17:59:30:8e:25:35:7f:71:d4:6a:5e:f3:a1:e5:94:70:
         cd:6c:43:92:1d:1e:1d:ee:a5:37:db:6f:8c:7b:d0:5d:a9:fa:
         4e:29:30:d9:7d:d0:b7:4d:be:e6:e4:a0:7d:69:35:ab:21:56:
         00:19:20:c9:ac:51:52:84:92:de:2d:05:1c:21:13:aa:4c:81:
         c4:10:bc:f0:f1:8a:f3:33:ee:c4:d0:7c:cb:1e:4d:7c:ad:f3:
         0b:fc:e6:de:6f:13:2a:f4:9a:93:ae:55:4c:9a:66:eb:93:dc:
         6d:4b:be:7f:a1:c9:f0:eb:98:ee:92:3c:78:0e:45:43:dd:c8:
         9e:63:e7:b3:d7:5e:58:ee:64:5b:d4:4c:af:56:10:9c:f5:cf:
         ee:73:95:a7:21:0e:20:6c:60:ef:58:5a:db:42:98:30:e1:10:
         53:ad:6e:37:eb:98:45:2b:fe:7d:b3:0b:91:f2:6a:62:5c:30:
         63:b8:99:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:27:33 2025 by rpki-client