This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
File:                     VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft (raw, json)
Hash identifier:          9EKqYddg23hoTJf9CoV+btb7bbOIqG5IxQLND0dpqLo=
Subject key identifier:   FE:20:E4:29:34:2C:23:8F:21:F3:EA:0D:1F:B0:7D:B3:40:E9:71:C4
Authority key identifier: 57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42
Certificate issuer:       /CN=A914597C/serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
Manifest number:          0202
Signing time:             Fri 05 Dec 2025 00:39:37 +0000
Manifest this update:     Fri 05 Dec 2025 00:39:37 +0000
Manifest next update:     Fri 12 Dec 2025 00:39:37 +0000
Files and hashes:         1: VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl (hash: YrKcg0vIbRDxxJqJ38zb5vJVYa/APeZkldzu4qmLwvw=)
                          2: 24C95396C48F11F084A49D1CC4F9AE02.roa (hash: Bfhzd+IGZ6R99CYO7LD/i6E83Q9Cxr5l+dNjJDeKCCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl
                          rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914597C, serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
        Validity
            Not Before: Dec  5 00:39:37 2025 GMT
            Not After : Dec 12 00:39:37 2025 GMT
        Subject: CN=693229c9-3bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:eb:71:cd:00:f0:b0:af:8c:ff:16:97:85:b1:
                    12:84:83:9c:bc:5a:fb:82:0b:96:ff:9b:05:ac:8e:
                    96:fd:e4:7f:41:ec:39:c1:bc:a7:94:7a:4f:33:86:
                    ed:03:5e:ff:46:03:c0:44:26:6b:49:18:c4:b0:95:
                    7e:de:ec:28:bf:52:76:fc:bb:27:0a:81:88:58:32:
                    d9:e6:7a:85:ce:0c:53:2c:d3:25:fd:aa:61:7e:59:
                    54:4f:0e:ff:62:23:fe:dd:46:5e:54:cd:94:ed:57:
                    ff:03:06:5c:3e:88:ff:e7:92:93:af:e7:c9:74:6c:
                    7d:0b:6d:b5:a9:a2:70:ed:aa:b2:93:15:e6:1a:f6:
                    ea:1b:af:61:22:f1:bd:c3:e2:1a:b4:e7:68:93:e8:
                    52:75:da:17:65:62:fd:f0:f5:fd:48:29:ba:5b:76:
                    e6:b3:a4:03:01:92:88:df:0e:cf:6c:8b:1c:51:b7:
                    47:f8:7d:8d:94:03:fe:4e:91:f1:48:c4:87:6b:85:
                    6d:2e:06:dd:18:d7:f5:7e:a6:d6:fa:f8:ec:4f:a6:
                    54:69:fa:57:be:b8:d0:6d:7c:15:87:d1:ed:17:0f:
                    c8:1b:4c:0f:be:07:94:af:d0:57:29:e7:3c:7f:d4:
                    7d:31:6c:e6:c3:36:6c:47:81:cb:10:73:dd:c7:9b:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:20:E4:29:34:2C:23:8F:21:F3:EA:0D:1F:B0:7D:B3:40:E9:71:C4
            X509v3 Authority Key Identifier:
                keyid:57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8c:8a:51:63:26:04:e3:44:2b:cb:c3:9e:29:92:b0:ce:87:
         b1:b2:42:a9:2e:54:40:fb:4f:af:9e:90:75:9c:55:fd:2e:af:
         ae:06:1a:bf:60:bc:7b:c4:13:53:85:6e:17:6b:f9:b0:20:2e:
         5e:58:94:86:d5:10:bb:fe:da:be:23:bf:57:38:7c:2c:fc:2a:
         ae:bf:fc:d9:48:ce:7f:f0:63:f6:57:4d:95:0e:90:da:24:65:
         df:5f:f5:b4:e7:66:88:e4:b8:cd:38:69:d1:f4:0e:35:bf:14:
         84:cc:20:14:ee:6f:e9:92:05:c8:f1:69:46:02:2d:33:7f:aa:
         b6:8f:a8:48:2a:7c:ef:16:47:54:eb:b3:15:36:ae:39:06:74:
         1e:f5:ff:20:c0:ca:76:ed:2b:b1:9c:89:64:e7:c7:4b:5f:b4:
         5d:22:82:b1:02:e3:6c:dc:e8:ef:bc:59:c8:09:d2:c9:16:e2:
         ff:d0:89:c3:b5:62:2f:15:cd:47:f1:e0:97:2e:34:a0:6b:b3:
         86:2c:06:76:80:0f:f2:af:b8:72:90:a3:80:20:0f:e4:db:dd:
         8f:05:67:dc:ff:a4:dc:fe:c6:6b:1c:39:f5:6e:ca:36:9f:15:
         e4:54:9d:c0:85:7d:35:b1:79:84:4a:ac:c7:7c:e8:bb:58:23:
         64:0e:d7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:24 2025 by rpki-client