This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
File:                     VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft (raw, json)
Hash identifier:          sAyDYrPHKPVdBCwvVx7+7HVIR1ZWjWxTivBg4HF1w2Y=
Subject key identifier:   E4:3C:40:85:EA:53:4E:AE:C4:B1:0D:39:AC:34:A7:19:59:0A:B6:1E
Authority key identifier: 57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42
Certificate issuer:       /CN=A914597C/serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
Certificate serial:       0206
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
Manifest number:          0203
Signing time:             Sun 07 Dec 2025 00:52:03 +0000
Manifest this update:     Sun 07 Dec 2025 00:52:03 +0000
Manifest next update:     Sun 14 Dec 2025 00:52:03 +0000
Files and hashes:         1: VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl (hash: 0f2mhktbimAxAM+itYBjTuVT4+0hQ4/PUtG3ATB8LVY=)
                          2: 24C95396C48F11F084A49D1CC4F9AE02.roa (hash: Bfhzd+IGZ6R99CYO7LD/i6E83Q9Cxr5l+dNjJDeKCCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl
                          rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914597C, serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
        Validity
            Not Before: Dec  7 00:52:03 2025 GMT
            Not After : Dec 14 00:52:03 2025 GMT
        Subject: CN=6934cfb3-b086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:a9:ec:37:51:3d:c5:1e:e4:ad:64:6c:f5:
                    b5:29:c7:3b:e0:23:80:0f:f0:b1:c0:5a:5d:30:be:
                    17:4a:84:a2:c6:c6:b3:5e:e8:71:0b:56:5e:33:1f:
                    2e:7a:2a:1b:e9:cf:ac:96:85:d8:1e:9a:6d:f6:8a:
                    ec:3e:c4:6f:ad:dd:1e:2f:bd:25:4f:83:34:b0:dd:
                    1a:3f:82:cf:13:17:14:1f:91:72:89:4d:d3:d6:53:
                    64:d1:10:a9:d3:71:7c:db:3a:ec:c5:93:bd:bb:2b:
                    48:7b:e9:cd:97:7a:0d:f6:ea:6f:12:71:9e:87:ef:
                    ae:8c:90:01:02:86:25:5d:d7:48:b0:7c:0a:3d:4e:
                    9c:6f:92:a6:de:03:65:6c:b4:8a:cd:15:63:b5:a1:
                    78:e5:f0:e3:f4:a4:d2:d1:f9:73:fe:23:fc:da:33:
                    ef:26:2d:e4:33:e2:9e:06:5f:7b:50:21:58:1f:9e:
                    9f:c0:09:20:40:32:2e:08:4d:46:b6:6a:ad:e5:8f:
                    7a:aa:bf:d4:79:ff:1a:ec:6f:dd:77:80:c7:ca:21:
                    52:56:de:47:e8:ed:79:ab:fe:c1:71:0c:b6:57:aa:
                    f9:ab:2b:2c:ac:7d:3f:f0:1c:95:fe:b4:df:93:1d:
                    a4:78:8b:1e:11:c6:b3:c9:dc:59:99:21:52:22:49:
                    1c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3C:40:85:EA:53:4E:AE:C4:B1:0D:39:AC:34:A7:19:59:0A:B6:1E
            X509v3 Authority Key Identifier:
                keyid:57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ad:54:76:ee:95:d5:ef:69:79:19:a4:cc:ff:f7:38:9d:71:
         ae:f4:44:03:ba:27:3f:1c:d4:17:cb:15:7f:83:5b:fc:73:5e:
         f1:00:86:15:d4:b0:38:a8:5e:cb:65:8a:9a:ff:d4:c1:f3:d0:
         34:de:cc:ff:63:bc:d3:37:6c:e4:c9:f2:3a:14:e5:63:b9:12:
         a5:5c:6e:fb:ef:14:29:42:0c:06:2f:8c:df:12:d9:31:30:0b:
         29:fc:3d:35:1c:1f:06:0d:ea:18:f7:f0:00:df:7f:95:c9:b0:
         5e:df:b0:35:0f:95:5c:28:27:23:b4:b3:1e:c6:a1:c4:68:c3:
         0d:23:42:9e:61:d5:7e:7b:78:69:5b:38:8e:01:15:1b:cc:d9:
         eb:59:2e:bc:9b:9a:c4:93:15:4c:b5:b4:f0:30:bf:7a:eb:9d:
         33:db:62:52:32:6a:33:63:85:2d:01:11:16:f0:f8:98:90:78:
         37:7b:8c:37:3e:76:7f:e8:19:4b:47:51:01:b3:75:2d:54:21:
         04:14:85:62:f9:8f:fc:d5:64:64:4b:1d:ce:a7:4d:7e:de:f0:
         16:7b:9e:f3:a5:93:73:e6:d2:4e:37:23:1d:a7:b2:15:af:70:
         44:af:0a:2f:80:fe:e8:2a:10:08:26:6e:65:f2:95:9c:e8:ed:
         99:e8:d1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:19:48 2025 by rpki-client