This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
File:                     sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft (raw, json)
Hash identifier:          hDTL382IzUf7kZo5NVj/bt8uyPZYFhVrtB88uhsB5YU=
Subject key identifier:   AB:19:F0:60:2B:69:6C:BC:66:B2:55:7F:BA:2D:FD:22:60:48:30:4C
Authority key identifier: B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83
Certificate issuer:       /CN=A919C203/serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
Manifest number:          0154
Signing time:             Fri 05 Dec 2025 02:18:16 +0000
Manifest this update:     Fri 05 Dec 2025 02:18:16 +0000
Manifest next update:     Fri 12 Dec 2025 02:18:16 +0000
Files and hashes:         1: sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl (hash: ozmFBzbxzvFQ2Znn2Wv1leJS/DSJDK0sGS8NSkUG4kk=)
                          2: 1B434E42C58811EEA2A7F049C4F9AE02.roa (hash: eHVAw6t0G0OOVunESIIPqhZXYkGjz7nn6NHSttJw5xM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl
                          rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C203, serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983
        Validity
            Not Before: Dec  5 02:18:16 2025 GMT
            Not After : Dec 12 02:18:16 2025 GMT
        Subject: CN=693240e8-3710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:21:6b:38:2e:54:80:d5:53:1e:8d:42:25:
                    a3:99:e9:4c:dc:c1:5a:af:3c:44:05:47:31:36:e4:
                    b0:a2:c2:66:91:c3:47:bb:fe:68:81:2d:b2:5a:72:
                    fb:f9:f2:99:16:23:9b:c4:f9:8c:67:a2:17:6f:d1:
                    a0:86:9b:74:1e:fe:37:d8:e9:c1:87:16:e5:3b:c9:
                    55:0a:3c:fc:43:e4:17:38:12:f1:e9:23:26:97:e7:
                    53:9f:58:84:3b:60:7a:2b:e0:4e:61:95:16:6a:69:
                    e9:bb:92:ea:27:23:6e:73:32:03:cb:9a:e1:db:a5:
                    8c:4a:fa:06:6c:4c:73:7a:a1:d8:c7:b0:48:0c:e6:
                    c7:c1:64:72:1b:39:63:07:b9:45:b2:55:52:9e:3f:
                    64:fa:82:7e:59:49:3e:55:5d:7f:d5:b6:77:c2:06:
                    2c:3d:89:17:1b:32:ca:f5:63:ae:8b:9d:66:dc:84:
                    44:c4:d4:03:1c:95:cc:3a:28:13:8c:2f:87:ae:e1:
                    92:5e:47:93:1b:32:c2:73:ae:97:b2:eb:a8:2f:19:
                    6f:0a:33:6c:67:d4:9d:e5:d2:6d:36:7f:07:20:c9:
                    3b:63:ea:69:90:b7:33:a7:ae:02:5b:24:4c:33:31:
                    a9:b5:2e:61:05:cf:17:39:9a:39:18:4d:e9:f5:ec:
                    43:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:19:F0:60:2B:69:6C:BC:66:B2:55:7F:BA:2D:FD:22:60:48:30:4C
            X509v3 Authority Key Identifier:
                keyid:B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5e:81:69:8e:e4:8e:f8:4e:d0:3b:4b:c4:fc:04:89:3c:af:
         e3:d4:ae:d3:33:a6:f9:ca:9c:47:5d:f5:d8:eb:42:60:8a:d7:
         22:5f:11:ba:c6:25:c0:1f:56:55:30:95:55:1c:7f:36:ee:49:
         0e:6e:b5:2a:2c:71:25:95:bf:ef:7d:4b:09:38:00:6b:8a:dd:
         5d:a0:f1:55:8a:d6:7a:9f:5b:9a:ca:e7:71:b9:5c:03:66:81:
         f5:49:c4:21:67:a6:c1:50:2b:39:49:50:b0:83:f7:a8:ce:b1:
         36:d2:66:d4:2a:c9:56:e6:94:45:fa:a9:b2:60:95:39:a3:cd:
         b9:34:22:dc:8f:76:d6:dc:47:fc:6c:03:6b:6e:ee:36:30:9e:
         27:62:88:05:38:95:34:8c:89:d7:1a:45:9d:bb:f0:6c:18:02:
         45:ff:d1:96:fa:6e:c8:6f:f1:a5:d0:59:58:9f:32:f6:93:2a:
         f8:8b:bd:b3:4c:92:d5:f1:9a:80:94:12:f5:36:4c:86:c8:e4:
         aa:cb:7a:42:77:11:ec:d5:0d:6c:22:dc:69:22:f8:ba:3c:63:
         5d:c4:f5:1a:58:ee:3d:72:fc:4c:a7:b0:a8:79:ce:b1:44:d6:
         e1:62:e8:79:c8:24:b5:e6:64:e1:ec:73:c2:23:8e:af:29:94:
         67:e8:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:30:16 2025 by rpki-client