This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
File:                     VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json)
Hash identifier:          wEmF5u4qbQcMQ1GFcOonK7QVHaU3THmptEwMQopLotc=
Subject key identifier:   E6:7A:E0:E5:51:CF:BE:80:16:46:65:51:C5:2B:19:F5:B5:8F:25:62
Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E
Certificate issuer:       /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
Certificate serial:       05FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
Manifest number:          05FD
Signing time:             Sat 06 Dec 2025 21:44:35 +0000
Manifest this update:     Sat 06 Dec 2025 21:44:34 +0000
Manifest next update:     Sat 13 Dec 2025 21:44:34 +0000
Files and hashes:         1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: YHBbNffY1LUMM4aUlsEnYLk84pLF7Uy3JgELag7Em+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl
                          rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B878, serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
        Validity
            Not Before: Dec  6 21:44:34 2025 GMT
            Not After : Dec 13 21:44:34 2025 GMT
        Subject: CN=6934a3c3-c187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:5d:09:37:75:e3:92:40:70:93:4b:43:2e:
                    71:68:82:1c:b8:bf:17:d8:f4:01:b0:19:0d:25:0f:
                    a4:4f:b6:3f:ff:39:6b:6d:0e:9f:c4:ba:e9:e6:0c:
                    bf:75:0d:c0:6a:0c:4b:ad:a8:ee:8b:ba:ad:54:13:
                    d2:38:f5:9c:33:e0:fc:25:73:04:5b:ab:05:b6:dd:
                    10:13:cb:24:e1:1b:b0:98:e5:e4:42:3d:1c:d4:1a:
                    b0:90:7b:2e:03:b1:15:d6:0a:a8:db:1f:a6:c5:b6:
                    09:c1:0e:89:73:ae:6c:94:f9:78:e3:68:20:30:a0:
                    11:87:be:fe:20:4c:94:55:29:30:bd:51:70:c2:bb:
                    58:a0:69:7f:b1:05:af:77:8f:29:26:ce:03:55:4b:
                    ba:0a:af:b9:5d:e5:5d:15:0d:71:4c:71:2b:0f:91:
                    dc:a1:22:ac:c9:94:33:16:20:b5:2a:bc:df:b0:65:
                    74:1c:bf:6a:54:eb:46:c3:07:a4:c4:13:6c:2b:e2:
                    77:c4:04:0a:6a:72:9b:19:17:b1:8d:dc:59:48:18:
                    06:cd:92:a7:d1:30:9a:b8:0e:d1:f1:32:ac:18:ce:
                    51:26:f8:aa:e7:f2:2b:04:88:81:ec:e8:0a:5a:58:
                    48:34:24:fe:4a:71:a2:d2:2f:5a:b0:c6:0a:11:8a:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7A:E0:E5:51:CF:BE:80:16:46:65:51:C5:2B:19:F5:B5:8F:25:62
            X509v3 Authority Key Identifier:
                keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:80:11:5e:75:04:01:2d:b1:d8:05:29:31:49:c9:57:44:93:
         2c:49:f7:91:ec:0c:a5:08:77:d3:a5:23:af:81:d1:3d:fb:33:
         a7:d4:f6:a1:62:e6:0c:a8:19:b0:18:a8:45:c7:05:96:e9:8b:
         ae:cf:7e:dd:fa:62:be:4a:3f:c1:53:02:b2:e0:ee:60:b2:83:
         66:25:f5:bb:16:63:54:c0:14:d6:a7:96:db:f9:b8:e6:9e:50:
         26:f5:ba:fa:4a:93:ae:bd:40:b8:35:ac:da:17:91:1e:0f:b8:
         61:6f:5f:6e:1c:7f:4e:af:df:57:fb:dd:cb:5f:b7:da:26:3e:
         47:43:c5:84:f3:f0:e3:1d:cb:25:f8:2c:13:df:68:d8:c5:38:
         75:66:fc:e8:50:fe:85:1b:ee:30:d2:2c:35:79:75:37:5d:a2:
         a6:f5:90:bb:12:55:6f:b7:df:09:e9:aa:7a:86:c7:79:3c:0b:
         68:9f:35:2e:05:f5:2a:b0:e7:70:77:9e:47:07:6f:f1:d9:32:
         e3:8f:b1:b7:54:02:27:29:c0:c9:5b:e0:ff:bd:46:f3:ed:7b:
         26:dc:27:95:26:f6:19:80:81:1b:08:74:32:35:00:fb:87:86:
         4e:94:b0:86:ee:86:59:e0:1f:3b:2e:4b:28:17:f5:3f:2a:bd:
         2c:b0:ff:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:20:14 2025 by rpki-client