This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
File:                     Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json)
Hash identifier:          QFI038L+WOw7fokXKXnvLQ0OA4Y0g94oS7fm1x6AExY=
Subject key identifier:   D8:AD:99:8C:CB:4A:DA:1D:33:25:48:FE:BE:5C:7F:31:4D:53:2D:82
Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF
Certificate issuer:       /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
Manifest number:          01D9
Signing time:             Fri 05 Dec 2025 01:01:24 +0000
Manifest this update:     Fri 05 Dec 2025 01:01:24 +0000
Manifest next update:     Fri 12 Dec 2025 01:01:24 +0000
Files and hashes:         1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: Mi4qV68dmfMz0ZSff/Q9YwDavKr9SPQr/XLQBzW39vk=)
                          2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: jnuMHWmzh0Mkxo/UqfQiHQK9zwVM6oBly72+HKRXMlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl
                          rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
        Validity
            Not Before: Dec  5 01:01:24 2025 GMT
            Not After : Dec 12 01:01:24 2025 GMT
        Subject: CN=69322ee4-12a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:aa:67:28:ad:e0:61:78:75:b5:b1:8e:b0:41:
                    6c:57:01:ed:1a:a8:14:59:27:a5:a1:14:f9:34:96:
                    20:24:ea:52:18:18:f4:81:94:da:3e:7c:55:22:37:
                    66:05:a8:26:4d:25:5f:3a:9b:ca:10:a5:ef:dc:ff:
                    4b:3c:81:48:e9:2d:4c:97:31:01:e8:a2:e2:ee:94:
                    fd:bb:2a:dd:78:f5:b3:d7:1e:44:2b:91:f7:14:4c:
                    58:e8:0f:bc:da:3d:cf:2e:92:42:1d:3a:93:1d:5b:
                    44:0d:4d:e4:f8:c9:71:9c:90:49:c9:8f:6a:dc:8f:
                    66:d4:32:01:f4:0c:06:aa:00:71:74:11:7e:67:97:
                    ba:fe:6d:60:24:5c:87:0e:ea:fb:0e:37:7b:76:0a:
                    ec:e7:aa:b3:12:10:e6:3f:04:8c:74:db:c3:c7:4b:
                    14:6e:9d:58:f3:1a:58:c5:24:f9:96:cc:01:90:3c:
                    f7:e5:99:d5:27:32:8a:7f:30:8b:aa:b5:1e:8c:f4:
                    4f:a4:6c:6a:a5:07:8c:b3:57:c4:74:d1:bd:f3:97:
                    c9:26:24:3e:57:12:c9:0f:68:e5:d2:f4:ee:0c:25:
                    4f:c0:a6:89:b8:21:45:1a:5c:6e:0c:7b:77:a6:6e:
                    f7:ba:14:3a:55:39:20:2c:24:65:ad:a8:9f:b3:61:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AD:99:8C:CB:4A:DA:1D:33:25:48:FE:BE:5C:7F:31:4D:53:2D:82
            X509v3 Authority Key Identifier:
                keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6b:f9:b6:ba:1e:68:48:70:87:26:bc:10:c1:ad:47:51:d6:
         a1:75:6a:38:d9:4a:8c:ab:78:61:48:da:07:2a:8c:1b:59:a0:
         0f:e9:fe:ab:75:e4:e1:09:46:57:c6:42:57:da:b3:9d:ae:95:
         b0:f8:46:97:2b:10:0e:48:9b:ac:a8:3e:2b:57:f4:12:cd:81:
         bc:3d:48:cc:50:72:5b:07:4b:04:22:33:a9:07:09:83:10:5d:
         5c:c4:9e:30:9c:33:fb:98:67:14:e4:9e:c2:79:03:b9:1c:31:
         71:8d:06:f4:4a:48:ca:af:d4:34:50:46:12:5c:72:ec:f1:c3:
         43:d4:e5:e8:c6:03:e4:5d:8f:dc:10:da:94:3a:d7:20:28:28:
         dc:91:f1:cd:56:49:7f:d7:d9:bc:3b:f7:96:18:d8:ae:03:2e:
         b2:34:6a:9d:7a:fb:09:96:72:ba:0e:95:95:1c:80:4f:e8:5c:
         93:ce:ef:16:5b:1d:32:86:d5:08:f1:4b:04:7c:26:f0:1f:21:
         fb:ce:da:56:5a:d4:fc:65:21:65:02:db:6b:0e:02:21:65:1a:
         72:fa:d8:5b:16:0d:a6:c4:e3:ff:8c:27:b9:04:1e:1d:6b:50:
         bb:60:94:a1:ea:a7:b9:92:1b:3b:e1:91:2a:ae:75:a9:1b:c1:
         e6:02:f1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:26 2025 by rpki-client