This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
File:                     VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json)
Hash identifier:          doU99v/BURIbEfZT6WHKcVpDvWIbPxHki71en7XupMk=
Subject key identifier:   91:73:48:07:51:43:D7:DC:6C:2E:CC:26:2E:7E:05:41:A9:EA:D0:28
Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
Certificate issuer:       /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Certificate serial:       0323
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
Manifest number:          0315
Signing time:             Sat 06 Dec 2025 23:43:31 +0000
Manifest this update:     Sat 06 Dec 2025 23:43:31 +0000
Manifest next update:     Sat 13 Dec 2025 23:43:31 +0000
Files and hashes:         1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: HvUdz038UstsYil9JxD7r+Wh5lbl74O/oFNC6re0uqA=)
                          2: 8698FF1E541811F0A468570BC4F9AE02.roa (hash: St1PTiOJ45PYVntF564HXDNo7H27/pRNunZfEvyoMiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
                          rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392
        Validity
            Not Before: Dec  6 23:43:31 2025 GMT
            Not After : Dec 13 23:43:31 2025 GMT
        Subject: CN=6934bfa3-8a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:90:7a:42:c8:84:3f:37:4d:af:79:5f:56:
                    2f:e2:e3:d3:2f:e4:ba:17:0e:ea:a2:87:f1:f4:24:
                    0f:6c:e0:f4:96:63:58:73:13:6b:fb:5b:6f:56:9c:
                    61:d7:20:8c:fc:bf:fb:3b:ba:33:68:b4:66:90:42:
                    51:d7:b0:da:e0:d5:82:a8:d4:26:3a:4e:75:79:62:
                    f2:27:b8:3d:71:0d:1b:0f:ed:55:61:8b:ac:dd:50:
                    a8:8a:4f:ac:51:ce:19:97:a7:55:b0:6c:98:8e:de:
                    41:f6:26:ae:b6:fb:d3:c8:54:15:06:d1:12:ad:23:
                    6e:97:fb:be:59:c1:2d:73:67:39:03:d7:af:fc:64:
                    08:55:05:99:f7:31:3b:6d:de:59:99:7c:61:d8:d1:
                    97:41:73:48:42:7d:5d:ea:8b:e5:fe:73:d8:ce:36:
                    62:f4:ed:12:7f:68:09:2a:6d:66:d6:22:b3:15:01:
                    d2:95:29:25:88:2e:6c:31:07:ab:6b:1a:2c:e8:08:
                    cd:c4:3a:40:6c:0b:8d:ac:b4:07:36:69:3e:d3:8a:
                    47:6a:77:b0:e3:56:11:c0:db:2f:ab:97:f4:4f:cb:
                    d1:63:39:e6:ea:9c:c6:af:47:c0:e7:e7:d8:88:c7:
                    21:da:77:a1:04:84:49:0d:31:c0:22:6d:16:78:bc:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:73:48:07:51:43:D7:DC:6C:2E:CC:26:2E:7E:05:41:A9:EA:D0:28
            X509v3 Authority Key Identifier:
                keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:84:b2:42:b2:91:50:fd:0e:ba:0b:0b:3f:08:f5:41:e1:
         c6:1d:bd:3a:f5:e9:58:92:53:34:f2:5a:cf:95:f5:d8:7f:32:
         9c:57:28:4a:00:20:b3:45:19:92:72:2f:75:11:f0:98:61:72:
         bc:fc:17:d2:4e:3d:ec:34:8b:3d:de:86:f2:6a:30:83:da:e5:
         29:52:7c:3a:2e:83:70:c1:3c:35:3c:7e:62:69:b2:6d:b2:60:
         0a:bf:91:b0:70:c5:28:78:8e:95:18:09:79:14:31:86:6a:85:
         72:7a:22:dc:4d:e3:80:5c:ad:ed:3c:c3:fb:7a:18:77:78:63:
         d5:b9:94:3c:b3:20:73:23:6e:db:e3:e9:9f:36:3c:91:75:36:
         ff:a4:40:66:64:6c:5e:4b:75:6d:36:f8:dc:88:fc:79:57:ab:
         2d:27:13:d5:b7:0c:46:a8:41:83:10:02:f3:d3:5e:7d:46:a5:
         47:87:31:4e:b7:e3:60:01:87:2e:27:95:da:19:fa:60:3c:0e:
         cb:d7:64:45:4c:c0:39:67:f4:f6:6d:19:1b:f5:b7:81:7c:47:
         88:52:81:ee:5b:ff:f6:1b:6d:53:4a:bc:bc:2b:27:cb:ad:71:
         cd:94:cc:2d:27:20:55:3d:ab:2d:ea:6f:23:01:4e:4c:e2:9d:
         a4:f2:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:52:07 2025 by rpki-client