This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
File:                     vkMB4qQLT2pH4YWmdX2abo18dEI.mft (raw, json)
Hash identifier:          XvHV8AQcBOu2jfwz2G3vjGNrKKGcSDQBTY44sM92Tb4=
Subject key identifier:   FA:D1:CE:4C:FC:EB:A6:EC:A8:B2:B9:07:D5:A4:FA:8A:25:97:56:08
Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42
Certificate issuer:       /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
Manifest number:          51
Signing time:             Fri 05 Dec 2025 05:11:44 +0000
Manifest this update:     Fri 05 Dec 2025 05:11:44 +0000
Manifest next update:     Fri 12 Dec 2025 05:11:44 +0000
Files and hashes:         1: vkMB4qQLT2pH4YWmdX2abo18dEI.crl (hash: wGu3oDgibcBgTR5yakNKMc5R6sM2BSADLQylo1Wjn4g=)
                          2: 99DC33DA621D11F0B3B28C17C4F9AE02.roa (hash: 9kelna+bn4AOokX7+VNhCMprSYcOppK0alNOtL2P1j4=)
                          3: 9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (hash: qjbaR5DPgSKsm7fnzDHbXrkez/bN/PhLzRqIXdA5oKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl
                          rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442
        Validity
            Not Before: Dec  5 05:11:44 2025 GMT
            Not After : Dec 12 05:11:44 2025 GMT
        Subject: CN=69326990-b1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:b1:63:ef:f7:b9:65:56:3d:36:e9:d0:f2:
                    3e:e8:7d:d7:38:05:1d:aa:e7:b5:fa:d3:8f:0f:2b:
                    c5:c7:3a:8d:5c:2a:59:48:3b:c2:04:46:4a:9c:c2:
                    bb:cf:24:8f:07:7d:f4:5b:dc:5d:c1:e3:f1:72:d1:
                    a8:fa:b4:56:0f:41:16:53:0a:be:17:b2:6b:93:7b:
                    6c:57:0f:8e:df:db:d6:90:37:ef:2d:53:1b:40:51:
                    79:a8:e5:29:7a:2c:ed:0f:59:ad:76:93:99:a5:73:
                    92:1b:1a:a5:bb:15:16:6e:17:2b:27:da:b2:b5:c8:
                    50:f5:05:e4:dd:fa:70:10:41:78:95:1a:99:99:94:
                    ab:94:d2:bc:40:a6:4a:12:43:fe:78:24:b6:f6:f3:
                    a0:5d:dc:e3:25:42:29:69:3f:c1:15:e8:a1:96:f3:
                    9a:04:a2:f3:d1:99:0f:11:13:6f:f7:66:1f:6e:e8:
                    81:b8:e3:a5:17:b7:ca:ae:91:6a:e6:65:ab:69:1c:
                    4a:66:5a:47:a7:da:24:3f:1d:a3:3b:79:d5:9d:4e:
                    3c:50:6b:46:8d:ba:cd:f4:b6:22:dd:db:af:37:89:
                    7e:f4:5e:92:78:03:c3:6c:07:64:f7:ce:d8:11:d8:
                    14:0d:7b:6d:c0:9a:ca:45:7a:51:8a:87:ef:ca:93:
                    61:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D1:CE:4C:FC:EB:A6:EC:A8:B2:B9:07:D5:A4:FA:8A:25:97:56:08
            X509v3 Authority Key Identifier:
                keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ca:05:07:46:c6:83:3a:53:80:5a:88:06:c0:56:05:77:3e:
         15:e1:ec:80:be:9c:b3:d3:01:82:84:75:67:7c:4a:27:b6:e0:
         a3:96:e1:1c:e3:9e:91:98:c1:d5:49:b3:94:70:9d:57:3a:7f:
         6c:2f:c4:83:05:36:95:8d:a9:4b:24:13:dc:af:c1:79:84:72:
         47:63:d5:a7:9e:e2:c7:eb:ef:af:f1:c3:fa:8e:60:d2:4a:15:
         d8:6a:b3:97:2f:3e:e9:fe:e3:20:a3:e6:99:eb:7f:ae:8f:29:
         53:ea:71:ea:cc:c3:e3:c8:15:34:d2:c3:13:43:a5:d7:1a:ea:
         39:e0:b9:62:15:3f:77:5e:3c:bc:ff:08:40:39:db:b9:5b:19:
         d0:2c:fc:36:53:0a:53:45:fd:8f:f3:32:d7:7a:b3:d5:82:30:
         bc:c6:84:fb:97:09:9b:4a:69:c4:67:f5:58:30:5e:3d:d7:82:
         9b:45:d2:9d:eb:4f:1e:32:6d:75:f7:1f:45:1d:8a:c2:d1:6c:
         5b:8c:f3:99:12:41:e1:ff:30:ae:f7:55:99:b5:83:7d:7b:19:
         82:3e:5f:00:aa:30:d2:00:ce:65:00:e0:ef:88:35:ab:dd:4a:
         c8:ef:a2:d4:1c:71:0c:ba:f1:90:a9:e6:90:25:e4:2b:43:59:
         91:bd:d8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:47 2025 by rpki-client