This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
File:                     vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json)
Hash identifier:          LWwYzrsI0ZFBwVaafp8te8sWEyS+3OKMPCk0Giz5wm4=
Subject key identifier:   7D:BC:19:88:D6:B4:12:E7:58:D0:55:41:60:EF:1E:43:29:C0:D8:BE
Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
Certificate issuer:       /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
Manifest number:          F6
Signing time:             Fri 05 Dec 2025 03:20:40 +0000
Manifest this update:     Fri 05 Dec 2025 03:20:40 +0000
Manifest next update:     Fri 12 Dec 2025 03:20:40 +0000
Files and hashes:         1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: n6G1vCgykOt5kmuxAdxDXEMEHCYR6zFxvtRunC5sJv4=)
                          2: DEF27D12B32111F0B1CD4673C4F9AE02.roa (hash: KSK87NNXC+G0msQF41JpGQoKY5onOaTJMTRkPWJH/M0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl
                          rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
        Validity
            Not Before: Dec  5 03:20:40 2025 GMT
            Not After : Dec 12 03:20:40 2025 GMT
        Subject: CN=69324f88-d991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:10:b5:7e:89:1f:4d:4d:2f:4a:07:d7:3a:
                    ac:a7:75:1e:2a:da:53:34:b0:21:5f:99:4d:03:59:
                    c5:60:3e:5f:52:2c:40:c0:97:a9:74:1b:87:b3:ea:
                    32:1f:d1:d6:53:b5:60:05:5f:c3:3a:8b:c4:ee:19:
                    b5:70:0f:85:39:15:b1:30:ac:54:98:2a:7d:43:de:
                    d5:cb:1c:8c:4b:3c:4d:43:24:4b:78:ce:30:64:e9:
                    06:46:9f:24:1c:95:c9:e4:be:99:94:46:e8:88:00:
                    de:9f:c1:71:a7:a4:78:08:b2:b6:67:49:1a:cc:11:
                    7f:37:4d:71:86:5c:46:59:f9:fe:64:ff:4e:f3:ba:
                    37:e9:6a:2f:92:de:ce:4e:30:29:ad:b9:ee:c2:14:
                    9e:5c:ef:8e:20:36:a5:12:35:92:44:6b:0b:b7:95:
                    3c:04:82:bd:1b:a5:35:62:4c:f0:a1:ba:d0:44:39:
                    a1:5e:dc:b6:a4:2f:47:6e:05:09:9d:3f:61:a0:18:
                    0a:6f:12:d1:e9:89:31:6b:f7:d0:74:40:a6:55:25:
                    7d:a5:db:02:f9:b3:b9:a6:fe:50:61:4e:5b:1d:4c:
                    3a:37:ce:76:50:8f:5c:6a:ae:81:5c:2e:d8:c2:9d:
                    02:e0:5c:e2:aa:17:87:d3:8b:de:fb:ea:90:7c:51:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BC:19:88:D6:B4:12:E7:58:D0:55:41:60:EF:1E:43:29:C0:D8:BE
            X509v3 Authority Key Identifier:
                keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b0:90:cc:42:a6:c6:88:73:2c:71:2f:14:d7:63:c3:ed:37:
         0d:fc:d2:84:65:1f:b5:c5:19:a3:83:b4:71:fc:20:8b:0c:13:
         4b:4d:99:d8:05:3d:61:51:4e:5c:6c:16:86:63:5f:23:6c:28:
         09:3e:4a:a0:7e:4b:5b:db:76:c6:30:17:40:88:1b:57:bc:35:
         0e:ef:9c:b4:8a:3a:5b:85:64:65:4c:ab:7c:50:5a:ac:b8:c2:
         2b:f3:23:99:b1:eb:7d:2f:1b:73:39:26:ac:50:0b:0d:93:41:
         73:32:9c:5f:4f:f5:3b:6f:f8:94:bb:4a:fd:0d:e7:8e:06:47:
         95:5c:44:d6:1c:6a:13:f2:d6:4c:84:5c:01:61:bb:19:4f:02:
         34:e1:f3:95:49:5a:79:f3:71:1e:7a:b8:59:5f:d5:89:c7:4d:
         ea:7f:6b:bb:7a:02:6d:a2:10:5b:05:0b:4b:8c:73:2f:c8:c8:
         07:ea:a8:36:ef:1d:3e:57:cf:45:8a:ea:cd:08:c3:24:0c:40:
         dc:81:f9:15:6b:a1:38:ee:31:43:c9:48:b1:c7:3e:fb:d8:16:
         ca:c9:5d:4c:60:45:37:58:cd:42:65:6c:78:30:ed:16:8b:4f:
         bf:63:e7:c3:f9:51:76:a0:12:ef:c4:1a:f9:04:e4:c2:8f:4b:
         90:72:51:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:42:36 2025 by rpki-client