This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
File:                     vLfPRDC7mOoEhRw0BybliBUOE50.mft (raw, json)
Hash identifier:          anj8dTzhdEZqQRBx/RcW1VG46LtKo+4vX5Jr6IFMDNs=
Subject key identifier:   F6:FD:D6:BD:2D:C6:DA:8F:1A:5F:67:96:3E:AA:2C:A4:48:3D:AB:63
Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D
Certificate issuer:       /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
Manifest number:          0139
Signing time:             Fri 05 Dec 2025 02:44:05 +0000
Manifest this update:     Fri 05 Dec 2025 02:44:05 +0000
Manifest next update:     Fri 12 Dec 2025 02:44:05 +0000
Files and hashes:         1: vLfPRDC7mOoEhRw0BybliBUOE50.crl (hash: gyOen5zfDwpj89HSB+D6WFAZftcDj87O9RA1r/jBlv0=)
                          2: BD5B75800C4E11EF85EEFC1FC4F9AE02.roa (hash: yvhUjHAiX+EPlHQdcU4E7154R9m6cxsrAxWsgLI83Mw=)
                          3: F9393E440C4811EF97CBBC31C4F9AE02.roa (hash: MLTTfCwREUsGVfNKsAVzpfz2Sc45FONq7T/5iif0e5s=)
                          4: D6871FC40C5711EFBD14BD5AC4F9AE02.roa (hash: ct7HNnoVMRTu9GGbvMdnAsr99cdgOMQ5g1ojGQzID0Y=)
                          5: BE3E0EE00C4E11EF85EEFC1FC4F9AE02.roa (hash: VQG0WF9XSuXwWbMIIOSS0EFZqyrabhvnJP0dkdCPAVw=)
                          6: 8F64B3240C4B11EFACEF2C6FC4F9AE02.roa (hash: 2CtFG7HWVSfrrJnKmf+0gUAHRHN8PeRmFCcQjXhYXBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl
                          rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91993A0, serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D
        Validity
            Not Before: Dec  5 02:44:05 2025 GMT
            Not After : Dec 12 02:44:05 2025 GMT
        Subject: CN=693246f5-0112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c8:ac:0f:a9:0a:7c:b0:0a:27:0e:7c:09:70:
                    47:a7:6a:d5:43:64:21:be:c1:00:75:65:d9:60:57:
                    78:cd:bd:60:c0:e3:90:cd:eb:05:b7:87:80:39:97:
                    cd:70:d8:02:0c:0b:48:43:ab:de:c9:65:9d:14:5d:
                    6c:c7:b1:3e:ca:7e:1a:15:93:08:19:65:87:97:2f:
                    80:dc:7e:84:5d:52:af:79:cc:43:f0:f8:97:09:5f:
                    e4:c5:6e:8b:60:8d:6d:2f:6c:1c:ae:93:60:a0:7b:
                    3f:54:26:e5:5b:8b:66:da:aa:00:ec:02:d3:ee:7f:
                    14:1c:82:f2:9a:d6:39:35:ff:d2:72:5c:cf:de:85:
                    62:20:ea:54:07:fd:6e:49:c1:3f:b8:9a:1c:c5:23:
                    5c:d6:34:bc:90:16:18:4d:e0:04:61:e0:9a:70:8c:
                    5f:d2:18:c4:9b:93:37:74:08:b0:4c:8f:22:db:67:
                    01:ab:bd:05:66:f7:59:74:77:ac:a1:5d:67:22:b3:
                    57:f2:0d:c3:72:ad:53:31:73:ec:ae:53:b6:25:7b:
                    e1:63:43:26:b3:ad:39:9d:df:4b:13:1d:25:f0:51:
                    f9:8c:a2:a3:1f:eb:62:6f:f8:08:cc:1f:89:84:e5:
                    ba:59:5b:57:c3:f2:81:83:56:1c:67:40:41:92:4a:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FD:D6:BD:2D:C6:DA:8F:1A:5F:67:96:3E:AA:2C:A4:48:3D:AB:63
            X509v3 Authority Key Identifier:
                keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:90:d4:3b:9a:32:30:f0:92:6f:6e:5b:47:16:ef:a3:e9:8f:
         de:09:f3:f3:5e:04:14:83:72:c3:18:2d:42:98:a0:7b:a4:72:
         c9:18:04:a4:5b:d0:30:e3:70:36:d9:22:0e:75:66:b4:0f:6e:
         61:0c:2d:5a:73:4a:e8:62:2e:b3:64:14:8f:7f:ee:a6:ad:5d:
         f0:f8:f1:ea:07:1b:1c:f4:8a:5b:7e:8b:ed:a2:d6:87:43:71:
         f3:b8:63:9f:2a:4c:53:cc:6e:80:96:dd:b5:9b:00:d3:5c:11:
         0c:83:4b:cf:e2:90:83:03:28:fe:43:c9:04:9d:d1:05:5e:46:
         db:65:c4:a9:13:bd:df:0e:5a:a7:a1:28:8f:24:06:5c:7c:30:
         2f:8a:77:e0:72:f6:2a:ab:eb:3b:b3:78:9d:12:cf:cf:e8:32:
         34:b6:97:f0:72:1a:f2:ac:71:9a:41:80:b0:b5:50:24:d1:f3:
         73:f6:3f:35:fc:12:eb:8c:09:2c:5e:28:b7:f1:86:50:5e:ba:
         2c:d4:45:fa:24:48:10:11:e2:40:4f:a6:95:09:a7:a9:b3:74:
         a0:52:6d:e9:f4:e6:f1:2d:77:8b:6c:ed:8e:bc:e0:47:d3:7d:
         99:45:2f:01:3c:31:cd:b6:bf:a3:77:ba:f5:bc:1a:43:39:c4:
         4e:44:ef:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkzQTAxMTAvBgNVBAUTKEJDQjdDRjQ0MzBCQjk4RUEwNDg1MUMzNDA3MjZFNTg4
MTUwRTEzOUQwHhcNMjUxMjA1MDI0NDA1WhcNMjUxMjEyMDI0NDA1WjAYMRYwFAYD
VQQDEw02OTMyNDZmNS0wMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzMisD6kKfLAKJw58CXBHp2rVQ2QhvsEAdWXZYFd4zb1gwOOQzesFt4eAOZfN
cNgCDAtIQ6veyWWdFF1sx7E+yn4aFZMIGWWHly+A3H6EXVKvecxD8PiXCV/kxW6L
YI1tL2wcrpNgoHs/VCblW4tm2qoA7ALT7n8UHILymtY5Nf/SclzP3oViIOpUB/1u
ScE/uJocxSNc1jS8kBYYTeAEYeCacIxf0hjEm5M3dAiwTI8i22cBq70FZvdZdHes
oV1nIrNX8g3Dcq1TMXPsrlO2JXvhY0Mms605nd9LEx0l8FH5jKKjH+tib/gIzB+J
hOW6WVtXw/KBg1YcZ0BBkkrR5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPb91r0t
xtqPGl9nlj6qLKRIPatjMB8GA1UdIwQYMBaAFLy3z0Qwu5jqBIUcNAcm5YgVDhOd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTNBMC9BNTk1NUU1NjBD
NDUxMUVGOUU3RTA1MURDNEY5QUUwMi92TGZQUkRDN21Pb0VoUncwQnlibGlCVU9F
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZMZlBSREM3bU9vRWhSdzBCeWJsaUJVT0U1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTNBMC9BNTk1NUU1NjBDNDUxMUVGOUU3RTA1MURDNEY5QUUwMi92TGZQUkRDN21P
b0VoUncwQnlibGlCVU9FNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGkNQ7mjIw8JJvbltHFu+j6Y/eCfPzXgQUg3LDGC1CmKB7pHLJGASk
W9Aw43A22SIOdWa0D25hDC1ac0roYi6zZBSPf+6mrV3w+PHqBxsc9IpbfovtotaH
Q3HzuGOfKkxTzG6Alt21mwDTXBEMg0vP4pCDAyj+Q8kEndEFXkbbZcSpE73fDlqn
oSiPJAZcfDAvinfgcvYqq+s7s3idEs/P6DI0tpfwchryrHGaQYCwtVAk0fNz9j81
/BLrjAksXii38YZQXros1EX6JEgQEeJAT6aVCaeps3SgUm3p9ObxLXeLbO2OvOBH
032ZRS8BPDHNtr+jd7r1vBpDOcRORO+N
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:00:45 2025 by rpki-client