This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft
File:                     V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft (raw, json)
Hash identifier:          Po8BOzetx5oo5BOc0riYNcK9OYxRBxnAUANd/ArwYWw=
Subject key identifier:   F8:73:D6:79:F1:96:BC:11:4F:F7:4A:96:AB:18:EA:10:0A:B7:21:73
Authority key identifier: 57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7
Certificate issuer:       /CN=A9132DF5/serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7
Certificate serial:       0F6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft
Manifest number:          0F62
Signing time:             Sat 20 Dec 2025 17:16:58 +0000
Manifest this update:     Sat 20 Dec 2025 17:16:58 +0000
Manifest next update:     Sat 27 Dec 2025 17:16:58 +0000
Files and hashes:         1: V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl (hash: wio930xjScxtqG7EgReOWRO/nOrK5HNE4dpkHqB9Rd8=)
                          2: 3058390A7C4511E984DEA431C4F9AE02.roa (hash: 9rDCv+WsiAPR7NnxfH7AASwbAfQNHmC84LRbeE1lu4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl
                          rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3946 (0xf6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132DF5, serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7
        Validity
            Not Before: Dec 20 17:16:58 2025 GMT
            Not After : Dec 27 17:16:58 2025 GMT
        Subject: CN=6946da0a-2afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:69:6d:31:50:f1:fd:ac:f4:2c:0c:d8:8e:22:
                    99:d2:ca:06:30:5c:22:8e:f6:42:5c:fc:9d:f1:b1:
                    0b:7e:f2:70:32:f1:cf:91:3a:4e:00:f8:76:67:9b:
                    eb:a5:c5:cf:06:65:72:f2:fa:80:af:98:69:be:6a:
                    e9:e0:27:ce:14:8e:45:f0:29:50:2e:d3:81:34:fe:
                    bf:1d:4e:3f:72:25:95:9b:a3:29:10:86:23:49:9e:
                    b0:bd:56:5e:15:89:3a:c8:85:c8:cd:25:59:28:71:
                    49:8d:aa:04:05:74:52:a0:77:80:28:b3:22:00:0e:
                    b9:0d:35:0c:03:b1:5a:f2:59:6d:e4:ae:aa:3c:b6:
                    7e:03:6b:15:47:6e:85:0f:1b:7f:e9:d7:41:59:53:
                    6a:b6:f4:8f:61:16:a1:dd:79:ac:34:95:ce:f3:be:
                    af:62:e1:72:6c:bd:09:51:bc:65:35:da:05:1e:6f:
                    5b:7c:70:ab:6e:68:7d:46:2a:50:0e:34:a5:fc:30:
                    86:ce:bd:c3:43:ad:53:8c:a9:db:fd:eb:b5:07:d5:
                    47:db:75:95:a9:88:94:6e:86:5d:5d:10:8e:49:ec:
                    0f:16:c7:2f:17:33:82:8d:30:b5:66:74:df:f4:2b:
                    87:95:76:bf:06:ed:3b:7e:a2:fa:fc:c1:d2:6e:ff:
                    8b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:73:D6:79:F1:96:BC:11:4F:F7:4A:96:AB:18:EA:10:0A:B7:21:73
            X509v3 Authority Key Identifier:
                keyid:57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0e:70:3e:cf:2e:ce:52:84:57:bc:49:5a:66:d1:4a:fd:77:
         e2:46:21:92:90:66:55:33:ef:8b:2d:3e:d4:33:89:40:a5:b3:
         97:d5:38:e8:92:c5:64:9a:6e:97:5e:d8:2a:e8:64:64:51:6d:
         1f:44:36:14:91:27:21:57:a0:a2:ed:4e:b7:d1:ff:4a:6f:f9:
         83:b3:73:ba:cd:cc:3e:3c:1a:40:aa:81:d6:0f:af:09:4f:e0:
         cd:00:f7:bc:74:9d:82:f4:fd:85:51:78:7f:85:38:b5:0b:4c:
         1a:b8:b4:4c:48:f6:0c:97:ee:f9:af:a9:22:a8:22:7f:20:7b:
         bc:91:e1:7a:76:fb:cc:60:d5:db:ac:bf:6b:4c:6d:3a:0f:de:
         72:f9:48:0f:d8:43:87:ff:ec:86:dd:df:5f:64:5b:18:38:a4:
         18:1b:cc:c1:d5:e7:89:95:ef:5d:a9:f9:31:0c:13:9a:8a:df:
         18:54:69:de:4b:44:2a:4f:ec:f8:90:87:bc:ee:b1:3e:33:38:
         9e:bf:8c:96:e3:b6:a9:9f:a4:8a:b1:43:d8:51:c5:4e:b1:b8:
         c9:8a:7c:50:20:34:0f:40:bb:b0:1d:02:2b:29:b2:ed:03:99:
         59:e3:02:27:34:67:e3:b2:5a:e9:37:5c:fc:6e:24:cd:f8:dd:
         38:2b:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:56:27 2025 by rpki-client