This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
File:                     veQRRX4ny5i0rjD846ivXGcpUJs.mft (raw, json)
Hash identifier:          9zLUAvA7bgNLjxS6zB6oz+nODpDlN0atxaLpuyZ88FI=
Subject key identifier:   B4:8A:7B:76:3A:ED:AC:38:90:58:CA:33:24:06:9D:58:07:35:56:63
Authority key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B
Certificate issuer:       /CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B
Certificate serial:       04CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
Manifest number:          04C6
Signing time:             Thu 04 Dec 2025 22:23:30 +0000
Manifest this update:     Thu 04 Dec 2025 22:23:30 +0000
Manifest next update:     Thu 11 Dec 2025 22:23:30 +0000
Files and hashes:         1: veQRRX4ny5i0rjD846ivXGcpUJs.crl (hash: dEQ+tfHw7/IWG270+dJOi4Vf8LhLAg4iDL0hDLmES4w=)
                          2: 106A9C18500B11EC9430721DC4F9AE02.roa (hash: rjIRVt3ZGujRJRNz4p7iJVb8cLFrDLJrnOWwlAK/nqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl
                          rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912425E, serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B
        Validity
            Not Before: Dec  4 22:23:30 2025 GMT
            Not After : Dec 11 22:23:30 2025 GMT
        Subject: CN=693209e2-4966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:a3:df:fe:41:ee:ff:cc:f0:af:17:08:4d:
                    56:2a:53:eb:15:dc:4e:3a:89:78:6b:74:5b:75:9b:
                    6f:0b:ff:f9:17:93:2d:83:c8:1e:3e:97:51:c1:88:
                    c5:96:a2:71:e7:9f:b6:06:11:47:35:3c:dd:28:f3:
                    eb:bb:6e:73:4d:a2:73:be:52:8c:c9:84:e3:bf:16:
                    0c:f0:d1:00:c4:c4:82:e8:62:b5:20:48:26:e9:7a:
                    71:6e:36:40:0c:7e:3f:f7:ff:37:ab:13:56:ce:57:
                    85:d0:71:3e:da:08:a5:9a:9d:f5:03:48:96:cb:0a:
                    44:82:4f:82:59:bb:9b:9c:1d:1c:42:12:f2:fd:59:
                    6b:54:a1:fe:07:26:7b:e0:55:05:b7:cc:82:33:2a:
                    b0:0d:6c:ba:97:24:0a:e5:07:46:68:11:53:0a:3b:
                    f3:5b:09:d2:8d:24:43:49:00:4f:62:a9:f2:0e:a3:
                    76:91:1f:79:7e:13:6c:f6:34:57:20:3f:49:25:a6:
                    14:93:2f:0a:f0:53:ef:eb:c8:a7:87:c3:43:3a:a2:
                    c0:da:5e:9c:92:f3:57:fa:fa:4f:ac:f0:0c:41:ee:
                    b8:07:19:a0:4f:92:41:74:34:6d:af:d5:23:36:97:
                    df:34:20:79:63:5b:37:76:ab:03:eb:bc:ec:2b:7d:
                    18:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8A:7B:76:3A:ED:AC:38:90:58:CA:33:24:06:9D:58:07:35:56:63
            X509v3 Authority Key Identifier:
                keyid:BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:92:51:65:93:ae:53:f7:ae:34:94:c7:5e:ef:47:33:57:f0:
         25:96:5a:2c:74:41:ba:7f:ef:93:51:9c:a4:34:25:69:a3:26:
         a5:d0:5b:14:0e:a4:b1:ee:ba:28:e1:da:6e:c0:09:86:0e:b9:
         1a:12:6d:60:be:ca:46:20:cf:eb:d2:b6:cf:f2:01:ce:06:8c:
         2e:43:e7:67:7b:50:25:86:f4:8d:6f:70:f1:70:2c:7a:60:0a:
         4e:99:86:69:2e:0c:08:33:99:6a:7d:f3:a0:36:67:72:84:8d:
         a3:ce:ad:2d:da:a3:ff:96:36:86:29:ba:43:7f:9f:c7:bc:fb:
         75:1f:67:e8:4f:cd:a8:ce:55:ca:74:07:6f:b8:80:be:39:67:
         e3:e7:01:f2:8f:0e:49:7f:b0:06:99:17:ba:5b:5d:1e:01:70:
         78:49:ab:f4:a1:f3:2d:4a:69:44:c2:ee:9a:51:50:58:d8:66:
         ae:99:a6:d9:93:f6:08:c7:2b:13:97:da:ee:76:63:72:88:02:
         f9:93:2f:be:f0:fd:c4:12:7d:a8:97:37:60:ea:54:3e:1b:0e:
         ba:e0:c3:ea:26:d9:6a:ab:6b:57:a4:b4:ac:20:c6:50:85:a9:
         fa:ac:e4:b5:96:63:42:33:83:0d:7e:13:37:23:2d:24:d1:e1:
         a3:62:d6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:07:44 2025 by rpki-client