This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
File:                     p93zVatoEjcBpb3RX2W6lktd4DU.mft (raw, json)
Hash identifier:          4nHS0xtUxojaYO6lgUR/SUmZV/QBuBkjumZf9qlGhIc=
Subject key identifier:   E1:B4:D1:8B:1C:AE:B4:CF:D0:AB:2C:42:29:A0:0E:05:61:7C:BB:6E
Authority key identifier: A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35
Certificate issuer:       /CN=A9195A1A/serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
Manifest number:          E6
Signing time:             Fri 05 Dec 2025 03:28:12 +0000
Manifest this update:     Fri 05 Dec 2025 03:28:12 +0000
Manifest next update:     Fri 12 Dec 2025 03:28:12 +0000
Files and hashes:         1: p93zVatoEjcBpb3RX2W6lktd4DU.crl (hash: uuaLZRfbpWBuZMrzPHRxPmd3HwOqz9X1gAn59/lfv/8=)
                          2: 77BC7D3A74F411EF8B9E1067C4F9AE02.roa (hash: mESHoDDD272jt3z7nTPlBgSVIzPmv3+ih+n+sctk5Ws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl
                          rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195A1A, serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035
        Validity
            Not Before: Dec  5 03:28:12 2025 GMT
            Not After : Dec 12 03:28:12 2025 GMT
        Subject: CN=6932514c-7e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:8e:15:b1:b1:9d:3b:73:42:9d:ae:db:92:
                    8b:bd:ff:b0:2c:de:28:f1:28:73:98:ed:fb:11:8f:
                    b8:1d:99:92:e2:e1:63:bc:1d:9f:14:7c:c2:bb:2a:
                    f8:fb:95:d3:98:bc:5f:d9:b2:66:36:23:9e:4e:4c:
                    3f:8e:cb:97:35:14:7e:4a:d6:53:b9:89:85:34:3e:
                    09:25:0d:28:1a:1d:f4:0e:d6:6b:d8:62:fd:9c:37:
                    c1:16:03:bd:8e:8e:18:03:e5:ae:e1:ca:5c:7c:71:
                    55:49:45:7e:53:81:52:c3:9a:2a:05:a4:ed:ae:2c:
                    36:45:4e:3f:a9:66:af:77:a9:8c:8a:15:8e:17:c7:
                    da:e7:21:9b:ee:8b:26:33:61:a4:5b:4b:97:7d:45:
                    9f:21:de:0b:35:f0:62:cd:18:1d:59:e6:e9:00:a0:
                    77:40:31:61:68:ff:c1:4f:67:b8:87:42:d0:98:88:
                    ee:0d:c5:c1:1b:12:48:37:b6:42:08:e4:e6:c8:f9:
                    5d:17:0b:4d:9f:23:21:2d:94:b8:b7:4d:b4:c8:1f:
                    c7:5d:c8:bd:ce:da:b2:89:03:79:ef:94:f5:f0:f6:
                    e5:55:c4:b2:91:bf:60:82:37:c0:41:de:b1:71:13:
                    f0:97:ae:fe:de:af:10:84:d2:f1:fb:86:62:22:a8:
                    64:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B4:D1:8B:1C:AE:B4:CF:D0:AB:2C:42:29:A0:0E:05:61:7C:BB:6E
            X509v3 Authority Key Identifier:
                keyid:A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1e:9f:b7:76:9c:2b:0e:7b:15:8b:d1:10:74:95:ee:54:2b:
         94:28:64:54:c4:97:df:a5:5b:a4:fe:94:1e:29:f3:32:d8:10:
         71:3b:b9:87:30:ea:6c:f3:7c:4b:8c:87:14:f8:04:c3:f0:0d:
         52:1b:44:46:6c:19:df:89:0e:ed:d1:3e:37:09:3d:5d:1a:e6:
         6f:b1:67:c1:91:19:bf:d9:b9:c1:f6:70:18:0e:6d:d9:8c:15:
         f8:0f:4d:45:bc:2c:54:85:e2:a8:bd:79:99:69:48:8e:2f:22:
         fe:1a:60:45:d7:44:82:6d:81:28:b8:f6:5e:c7:8d:d0:c3:ba:
         af:f2:3c:31:f4:ba:b5:76:eb:27:56:e7:5f:0a:09:7c:44:b9:
         12:c1:a1:bb:f3:6a:f7:4c:ff:cf:11:a6:db:8b:1a:ce:f2:bf:
         32:cc:c9:d6:65:3d:0e:fa:a9:7c:7c:a6:a2:68:0e:e4:8c:70:
         da:42:85:24:99:4c:a1:aa:90:c5:da:25:42:65:d0:7a:ab:c1:
         74:68:36:eb:32:13:82:29:5c:73:53:a0:ef:5f:60:05:ea:fe:
         3d:79:54:cb:1e:6b:4c:20:93:87:e9:b8:18:90:1b:c0:4c:90:
         52:04:ad:50:76:dc:d2:4e:07:91:77:29:7d:7a:17:31:82:ec:
         46:1b:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:07:32 2025 by rpki-client