This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
File:                     vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft (raw, json)
Hash identifier:          ZZRpPZI4fbJyif2hM3LT7O0QbgXaNF3ZtCjENkCjYmA=
Subject key identifier:   5B:FE:02:AA:36:5F:FC:97:DE:A0:C7:47:97:C1:37:78:F7:85:39:F8
Authority key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
Certificate issuer:       /CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
Manifest number:          F6
Signing time:             Fri 05 Dec 2025 03:23:49 +0000
Manifest this update:     Fri 05 Dec 2025 03:23:49 +0000
Manifest next update:     Fri 12 Dec 2025 03:23:49 +0000
Files and hashes:         1: vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl (hash: cf3LLWOqxsF7mDB5Z8rUoRB+125IrYf6S/UnFml/VbM=)
                          2: 9BC7782069A911EFBF66800FC4F9AE02.roa (hash: A3vIJwUMYtfFutVYOqaUZlkIJqgqL/aJPc4cakn1uMQ=)
                          3: 4978358A70E011EF8CDC2330C4F9AE02.roa (hash: uWOdhRYcncT/3w5J6lEkhO72ABKA151UX0ndXBDbx3E=)
                          4: 9CF17DD669A911EFBF66800FC4F9AE02.roa (hash: bBT8gdGhlwg5r06wlUXlbf1qWwPVmNNVH6Tp4yfxfVE=)
                          5: 9C594FD469A911EFBF66800FC4F9AE02.roa (hash: LB+IcduN6puMn/RBrX77+95EeodFJyL3pQbIzRhkuAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91911EB, serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
        Validity
            Not Before: Dec  5 03:23:49 2025 GMT
            Not After : Dec 12 03:23:49 2025 GMT
        Subject: CN=69325045-e274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:da:c5:e7:1f:7c:a8:20:76:3d:66:c3:1a:
                    d2:a8:6b:45:5f:fa:0a:57:34:9f:5e:99:f4:66:eb:
                    d5:a6:25:39:4f:4a:c0:8d:65:6a:85:96:9c:d3:d6:
                    7a:bc:b7:40:5a:b5:55:84:7a:bf:f2:9a:f6:0b:51:
                    22:90:73:16:54:ad:8c:e3:c7:b6:b0:01:72:b3:20:
                    a9:89:57:9f:ca:c1:17:6e:8c:44:2a:b4:fc:3e:1e:
                    e8:a9:04:6f:da:b7:dc:09:ec:3b:ea:2c:e3:50:9e:
                    29:d3:bd:41:ff:c5:a1:ec:c8:88:87:21:40:72:ed:
                    08:51:aa:2a:9c:51:6b:d4:c7:a2:4a:d3:8a:b1:48:
                    7b:0e:a7:1e:88:cc:88:5c:3c:20:b2:34:47:a4:b2:
                    59:72:04:77:f3:53:4b:9e:28:dc:94:4a:32:0d:f1:
                    43:76:a6:02:ac:aa:c1:1e:6a:2d:6e:c5:f9:fb:04:
                    49:0b:9a:99:34:13:43:22:c9:51:3e:29:3c:74:20:
                    ca:b1:ce:41:d0:2a:5e:b0:db:3f:71:49:03:82:31:
                    85:98:52:7e:0b:d5:2b:90:48:14:d0:c9:9a:d4:1b:
                    a1:c4:17:cf:99:e9:ca:2a:cf:e8:8a:6d:b6:72:c7:
                    38:9c:f8:a7:e0:56:be:40:83:39:0c:39:88:3c:79:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FE:02:AA:36:5F:FC:97:DE:A0:C7:47:97:C1:37:78:F7:85:39:F8
            X509v3 Authority Key Identifier:
                keyid:BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f5:a3:7f:04:18:09:7a:cc:e2:1b:2f:33:04:87:b3:c5:ec:
         00:3e:68:4b:86:ae:9e:4e:87:2c:93:d7:ee:04:e4:06:84:1d:
         4d:84:05:f2:09:93:88:cc:69:1c:0a:f3:53:1e:45:d0:ab:a7:
         5d:63:be:a4:45:6b:ef:fb:3c:f9:62:4f:5a:26:16:89:dd:49:
         01:b5:e7:80:1b:39:42:47:3b:1c:9c:2f:ea:06:d8:88:99:6d:
         52:14:f9:71:ca:35:3e:79:b4:76:d6:b9:1e:96:54:e0:16:52:
         8f:f9:a4:5e:94:62:64:ff:98:65:61:f3:48:2e:25:d8:4a:1a:
         d9:e4:ec:bd:5b:2c:ea:aa:30:b9:05:09:c9:d0:4f:28:cf:37:
         5d:70:6f:c5:1d:c4:87:09:c9:34:f1:df:32:60:d4:60:cc:79:
         73:1a:a5:54:63:c4:93:84:0b:12:ff:4f:50:89:75:a2:73:d0:
         17:08:6d:95:84:10:ed:4e:c5:f0:71:36:d1:7f:2d:44:79:77:
         de:75:a0:3f:cb:ee:c8:8a:bc:5f:4b:ae:65:ad:18:d1:cd:2e:
         a8:0e:5c:12:e3:93:e7:73:c9:20:7d:69:a6:24:0f:66:dc:6b:
         66:eb:db:af:f3:a2:55:01:2a:40:b8:b7:96:5f:bd:7b:a8:df:
         f7:7b:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:31 2025 by rpki-client