This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
File:                     VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json)
Hash identifier:          Y8r2U+0bKYAf+kXbR0q33vzdPmpmshxxs1vYkOp5Acw=
Subject key identifier:   1F:24:C9:E2:87:EC:FA:F8:F6:75:3E:77:77:9B:97:43:E3:3C:51:22
Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
Certificate issuer:       /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Certificate serial:       0DF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
Manifest number:          0DE3
Signing time:             Thu 04 Dec 2025 17:24:54 +0000
Manifest this update:     Thu 04 Dec 2025 17:24:54 +0000
Manifest next update:     Thu 11 Dec 2025 17:24:54 +0000
Files and hashes:         1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: T8ELpxCwwmb3YV5zTc4FNtFvidbL3782Zlo3a5CwWQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl
                          rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3572 (0xdf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
        Validity
            Not Before: Dec  4 17:24:54 2025 GMT
            Not After : Dec 11 17:24:54 2025 GMT
        Subject: CN=6931c3e6-8546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:37:a7:53:7c:1b:65:8d:93:51:93:45:bb:b0:
                    a9:b7:0c:7b:24:49:69:db:30:73:6e:c5:c0:e2:e0:
                    7b:44:b7:6e:98:15:b5:4f:03:c4:33:ce:3f:7d:05:
                    17:01:55:1e:47:a2:59:8a:43:6f:e3:fb:a2:3c:8e:
                    53:7e:d8:19:08:04:36:96:f6:27:c1:5e:95:d0:91:
                    a1:ad:53:64:5f:1e:2a:3f:a6:b4:b3:fd:59:7a:8d:
                    6d:cf:9f:52:27:d6:90:30:ac:e0:ff:59:fc:14:42:
                    71:d4:71:71:15:5d:1f:c4:ae:c2:97:62:5d:12:ec:
                    14:d8:c6:8a:cf:4e:9e:ed:a3:60:66:de:31:b1:16:
                    63:35:0b:eb:10:89:c2:78:75:a9:f5:af:86:5f:7d:
                    d3:b8:b7:df:2a:a2:18:cc:b7:5c:36:ce:0e:9e:ed:
                    51:1c:25:ab:fd:b1:23:26:dd:73:1b:0c:a4:f7:24:
                    a2:09:0a:3e:87:89:76:b2:93:df:9e:2e:d6:42:db:
                    9c:a2:f1:01:17:1c:da:9d:19:29:69:19:18:a2:08:
                    74:84:1a:0d:af:7b:9b:5a:39:2f:60:26:4e:fd:30:
                    f1:63:db:85:08:91:ed:0d:f5:23:8c:2d:f9:0b:33:
                    e9:4e:3b:9e:e4:b5:a2:06:2d:ae:a7:b0:2d:db:69:
                    38:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:24:C9:E2:87:EC:FA:F8:F6:75:3E:77:77:9B:97:43:E3:3C:51:22
            X509v3 Authority Key Identifier:
                keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:57:23:8a:bf:36:67:09:e6:66:30:1c:15:f8:c7:e8:4d:5e:
         10:e5:82:60:f9:66:c4:fc:cb:04:a2:98:3b:69:c3:08:fb:3c:
         27:a3:89:ab:63:f7:2a:94:b6:e2:6c:1c:28:0b:17:27:1a:f2:
         11:92:88:ba:38:17:34:9c:9e:ee:47:cb:1b:03:fa:de:8f:9e:
         91:ff:44:a7:82:e6:07:78:60:d5:0a:9b:9a:10:1e:40:20:f0:
         78:77:8c:26:1a:db:28:17:25:e8:f2:d4:cd:57:81:8b:01:a7:
         83:18:9b:1e:15:0c:73:47:5a:f2:c2:f2:d0:86:4e:7c:e0:bd:
         fc:11:da:8d:a6:b5:f1:5f:3b:4d:ac:4a:89:de:1e:b9:1c:c8:
         2a:ef:c5:92:a7:2d:dc:41:e6:7b:6d:91:04:9c:03:cc:a6:2d:
         44:ac:46:26:76:f5:ac:e7:61:4d:47:9b:90:7a:c0:31:0d:31:
         97:cd:78:e4:4b:a6:e6:6a:67:d5:dd:0d:c8:02:44:30:12:c4:
         97:fa:35:d9:f8:08:80:c2:1c:cf:5f:93:5f:8f:5c:17:8a:33:
         8e:3b:29:03:37:2f:50:a4:4b:b8:aa:6c:65:41:42:91:ee:1b:
         7b:45:26:38:26:a8:d8:40:de:07:fd:50:08:de:40:46:bf:b7:
         eb:05:2c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:06 2025 by rpki-client