This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
File:                     vIYhQTCXFsDk3Dff_zPlqwxVStA.mft (raw, json)
Hash identifier:          RLgv3Z3fFoo378fXNJAoqeOQCU+E0YahDmSFZbmP7Qk=
Subject key identifier:   36:7F:E4:11:54:60:CA:4C:3B:C1:D4:DC:2C:58:8F:BD:05:42:F0:32
Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0
Certificate issuer:       /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
Manifest number:          0252
Signing time:             Fri 05 Dec 2025 00:02:19 +0000
Manifest this update:     Fri 05 Dec 2025 00:02:19 +0000
Manifest next update:     Fri 12 Dec 2025 00:02:19 +0000
Files and hashes:         1: vIYhQTCXFsDk3Dff_zPlqwxVStA.crl (hash: NwuRHmujIAR6Gfz8JTaWlkt2ESatnVB0PHSAhqgO3Yo=)
                          2: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (hash: mMG9bEWCN7YmxGDEifOxzTHyHFARTgi2snMHU3b4IPo=)
                          3: 3F2E65045F0811EDB42DC97FC4F9AE02.roa (hash: M+VldN3Zj4ItVsLXsshINI4uEpHeIoXEm9jDZJqFneg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl
                          rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0
        Validity
            Not Before: Dec  5 00:02:19 2025 GMT
            Not After : Dec 12 00:02:19 2025 GMT
        Subject: CN=6932210b-1992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:a6:e3:61:fd:19:f7:d2:9f:60:8e:17:d7:
                    87:ba:07:a9:94:82:fb:e6:28:95:08:e3:ac:40:9a:
                    2f:e4:16:45:bd:00:7b:99:76:58:56:19:b1:8b:ce:
                    d3:9f:f9:71:b3:f9:bb:6e:a1:78:1c:c4:c7:43:cd:
                    21:42:57:65:3a:44:04:5a:fe:43:c4:ba:53:a6:31:
                    71:73:a7:6c:d5:ed:fa:a1:99:38:2c:dc:d9:56:bb:
                    9c:1a:1b:49:bb:44:f9:56:be:cb:77:8b:49:53:7b:
                    03:84:9b:40:12:73:61:ee:72:ab:50:10:ed:42:e9:
                    ac:60:17:bb:b3:5d:60:e0:28:f8:2b:6a:c7:07:af:
                    64:f1:27:80:29:45:49:00:f8:74:99:10:fe:80:77:
                    b6:31:a8:8d:46:69:60:b3:42:95:37:d6:28:fb:05:
                    e8:a8:b5:b5:7e:51:3e:5a:f9:9b:fb:e7:2b:f4:67:
                    82:07:9a:34:76:93:ea:53:09:0e:ed:b3:98:d7:93:
                    29:11:4c:51:ec:83:d9:59:91:6b:fa:04:b2:d6:62:
                    9d:f0:4d:b2:df:9f:ee:0b:10:21:26:f8:7a:7d:a9:
                    bb:fa:dc:65:0a:eb:9a:93:c7:38:36:44:3f:71:89:
                    0a:52:e8:be:b4:35:f2:d1:ff:7e:fa:86:ae:ad:ae:
                    6c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7F:E4:11:54:60:CA:4C:3B:C1:D4:DC:2C:58:8F:BD:05:42:F0:32
            X509v3 Authority Key Identifier:
                keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:25:62:ce:2c:2e:84:b7:a0:d7:4c:2f:ae:15:cb:0e:a2:68:
         1d:79:ce:fb:aa:79:e3:0a:8b:b7:df:30:84:7d:db:b7:07:47:
         fa:5d:8e:d3:19:2d:88:6e:f7:36:9b:cc:1c:f2:42:4c:68:d8:
         3c:99:2b:65:ab:d9:1b:b1:af:2d:d8:17:de:c2:d3:ee:99:d4:
         25:ba:a4:e7:4a:76:75:c5:1d:8b:6a:e0:47:a0:d0:62:4d:a9:
         e9:b6:1b:b7:16:d7:ab:b5:ad:4d:35:77:8e:e2:7e:fe:f5:b1:
         27:9b:30:1f:99:82:c4:02:85:ce:54:79:0b:20:7f:93:7f:88:
         cd:28:cf:6d:d9:34:72:ab:93:1e:f5:fc:53:29:c4:0c:be:86:
         51:0f:25:45:45:92:69:bc:63:aa:a7:a9:32:fc:4d:37:2a:b5:
         f1:14:a1:18:18:52:dd:08:00:53:66:74:12:b8:72:4e:a2:0b:
         d9:9e:af:4d:f5:bf:4c:7f:f2:6a:50:7e:c1:51:ae:a1:9d:87:
         d7:e3:a5:2b:d5:32:33:9f:01:08:84:b7:f8:8c:6c:fc:7f:86:
         d4:bf:07:43:af:70:2b:86:77:77:39:8a:2b:9f:ec:08:51:9f:
         e1:a2:30:a5:66:47:ab:ac:2a:ec:75:f3:94:b0:45:68:e9:7f:
         eb:30:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:21:13 2025 by rpki-client