This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft
File:                     vejnZNDzasWboDNpTTo883QGugk.mft (raw, json)
Hash identifier:          b6JiD3DntjLh2B1PVLSteiy5zyEYkgCzw3KHnJg7qGc=
Subject key identifier:   FC:A6:CC:DE:EC:86:E5:54:1B:50:34:30:E9:D2:EB:80:A8:3F:8B:A7
Authority key identifier: BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09
Certificate issuer:       /CN=A914A192/serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09
Certificate serial:       055B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft
Manifest number:          0556
Signing time:             Thu 04 Dec 2025 22:00:58 +0000
Manifest this update:     Thu 04 Dec 2025 22:00:58 +0000
Manifest next update:     Thu 11 Dec 2025 22:00:58 +0000
Files and hashes:         1: vejnZNDzasWboDNpTTo883QGugk.crl (hash: sUvbFmh4QfBr9cQbX6UW5inww/2RjG+ovfOlJX9JDnM=)
                          2: 361EE54811E211ECAF7EDA48C4F9AE02.roa (hash: 44VaCFbAQVHdRM4CKlF3uIYCMt3E3qGIG27GIv1hkNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl
                          rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A192, serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09
        Validity
            Not Before: Dec  4 22:00:58 2025 GMT
            Not After : Dec 11 22:00:58 2025 GMT
        Subject: CN=6932049a-6be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:aa:41:eb:b3:ad:c8:3d:fa:52:52:6b:af:
                    ec:61:f2:ad:31:ee:e5:64:e6:00:36:7f:57:b7:83:
                    47:ae:95:55:29:44:90:7f:a8:6e:ea:04:3e:d3:3e:
                    6a:75:1f:4e:49:a9:09:37:f3:01:69:a8:76:f0:27:
                    4f:28:62:12:a8:83:42:43:98:dd:9e:61:62:3c:32:
                    ba:95:91:eb:53:8e:5b:1f:8e:b5:87:57:af:3f:b3:
                    ac:48:80:4d:86:00:d5:11:d6:06:c7:ca:db:cd:56:
                    e1:2a:f5:f5:79:85:e0:11:cc:dd:ce:c6:eb:5d:85:
                    fc:45:0a:3d:be:7a:6b:eb:0b:dd:ab:c4:cc:b2:35:
                    0f:d7:88:4b:c2:37:84:97:95:27:7e:66:19:f1:83:
                    46:50:8d:64:78:13:9d:9b:bb:01:00:d0:cd:ed:9d:
                    2e:d3:b7:80:7f:e2:8d:2b:96:81:c3:03:a1:d1:e3:
                    48:2c:14:9f:06:11:d6:fb:aa:64:d2:f7:98:f4:00:
                    a5:90:92:9e:d5:10:0b:c9:c3:38:56:ba:7c:4b:12:
                    57:3a:dd:b1:ff:d5:91:13:0a:45:15:8a:ad:be:0c:
                    d7:f9:e0:76:03:48:a1:6b:39:55:01:99:d7:5a:0f:
                    9d:04:50:0a:6f:d7:59:73:35:0a:c3:6f:f5:1c:d7:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A6:CC:DE:EC:86:E5:54:1B:50:34:30:E9:D2:EB:80:A8:3F:8B:A7
            X509v3 Authority Key Identifier:
                keyid:BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9f:2b:2f:b1:27:8c:96:ca:86:58:aa:1c:d1:f0:03:76:40:
         e5:9e:7b:a7:19:78:30:c2:11:6a:23:23:1f:6d:09:04:5f:94:
         b4:65:b1:43:f8:7b:52:3d:21:da:36:f7:76:ca:16:03:c0:9d:
         d7:01:8e:fc:25:95:77:c3:e9:c2:e4:83:59:ff:30:a7:26:cd:
         70:2b:e9:22:2e:b2:18:7a:6c:72:93:a5:f3:55:ec:e9:08:67:
         bf:d2:82:96:cf:07:4f:d0:8f:a9:f8:e2:83:c3:a2:f7:a2:a2:
         02:ac:83:15:fb:a3:36:8f:56:19:6d:4c:a9:c8:03:33:14:7a:
         93:10:9b:b8:f8:88:a2:5e:10:f1:50:71:f9:15:5f:7f:e1:0a:
         00:f6:d0:80:86:74:a9:af:63:0a:55:c8:3a:63:67:31:40:52:
         30:03:bf:f1:50:63:ce:19:c0:7d:95:cf:68:6f:3d:d2:12:05:
         89:25:ea:a6:d9:39:d7:60:18:42:21:13:6c:46:41:e6:a2:97:
         cb:a8:b8:5d:3c:19:b9:2e:d2:b0:c6:3f:c9:c5:5e:17:20:fd:
         ee:b7:98:96:d4:64:78:93:11:57:4e:7f:4a:03:6a:5b:c2:c5:
         37:f5:d0:ce:1a:eb:4d:e6:54:6a:24:84:6d:99:af:1b:2b:b1:
         37:00:92:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:25:28 2025 by rpki-client