This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
File:                     veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json)
Hash identifier:          lwG0ylxwPVQmiFEpVHq7JL7fImpOVB2sICum+SZueeA=
Subject key identifier:   BB:02:01:6F:9A:ED:FA:71:CF:FA:82:0F:D3:67:E7:80:88:69:FF:B1
Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
Certificate issuer:       /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Certificate serial:       0B16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
Manifest number:          0B0F
Signing time:             Sat 06 Dec 2025 18:36:15 +0000
Manifest this update:     Sat 06 Dec 2025 18:36:14 +0000
Manifest next update:     Sat 13 Dec 2025 18:36:14 +0000
Files and hashes:         1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: MxM5OahoLCKd9rmugFH+HR5T4MVy6jLHtisTbZt1mr0=)
                          2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: QRIDYBqtTuT5aBwWGaGhz+TBnDkutY1YQfqChJSa2+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
                          rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2838 (0xb16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
        Validity
            Not Before: Dec  6 18:36:14 2025 GMT
            Not After : Dec 13 18:36:14 2025 GMT
        Subject: CN=6934779f-909f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:9a:a9:22:91:ca:40:8a:43:29:1a:9d:d1:
                    d5:9f:e7:12:cc:27:cd:68:cf:56:ee:19:92:ed:6d:
                    a1:24:5e:9e:d4:dc:16:d4:fa:f4:41:fa:ed:b1:86:
                    97:51:b8:84:00:fc:40:b5:ce:53:ac:5d:31:4a:d4:
                    a1:67:42:80:b4:d4:73:79:59:db:61:ba:34:05:53:
                    19:fd:f4:20:29:da:a5:9c:55:50:4e:ee:fe:94:63:
                    8d:e3:c9:3a:00:b7:05:c8:9b:61:81:42:72:17:80:
                    92:2c:94:36:00:59:4c:d0:e5:65:70:19:82:7b:93:
                    07:7e:3d:65:73:26:b9:ba:3a:e0:1e:51:05:bd:1d:
                    4f:5c:8b:c8:08:39:a2:16:23:5e:df:f9:22:1c:ea:
                    4e:ca:f4:3d:25:b1:4e:33:9a:28:3f:6c:c1:15:12:
                    8d:5b:8b:af:6a:23:8e:ac:18:5f:a4:e9:23:0c:ba:
                    d9:7c:43:cb:e7:e5:f7:7a:7e:52:1f:ff:cc:88:19:
                    a3:01:df:a4:5f:bf:21:ec:bd:fa:90:eb:60:f6:29:
                    e6:40:68:35:a3:eb:52:00:27:7d:62:8c:fc:0c:5a:
                    9c:d6:53:3a:71:2a:bf:35:d7:9a:93:bf:79:e0:8f:
                    79:35:8d:07:26:e0:1a:47:59:09:6f:66:9b:b6:ac:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:02:01:6F:9A:ED:FA:71:CF:FA:82:0F:D3:67:E7:80:88:69:FF:B1
            X509v3 Authority Key Identifier:
                keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:97:f3:77:4f:ed:f0:89:35:20:5d:d1:4e:eb:d7:9c:1f:38:
         88:54:c0:9c:6f:8e:f2:64:70:66:33:80:dc:5d:54:d4:7f:8c:
         63:77:2f:ce:74:ba:f8:35:ac:6b:b1:58:01:ec:6f:ec:cb:b9:
         8c:01:0c:5f:e6:d5:95:d4:b3:9d:18:82:47:27:35:5c:92:a1:
         0f:14:cf:66:2d:08:ee:9a:bd:0a:df:86:17:18:1b:90:c7:6a:
         a4:0c:61:6d:56:d3:40:08:88:78:03:f8:15:79:7b:a2:04:89:
         d8:e5:d0:9c:54:13:a4:62:a9:18:d7:2e:1f:23:20:78:74:ce:
         cd:52:f2:97:36:d8:8c:8c:27:c3:02:58:bd:44:cb:b8:ef:36:
         c4:6c:7f:40:d6:c4:60:5c:2a:c8:e2:2f:b1:28:d7:b2:cd:8b:
         93:9b:d7:c0:2e:44:8c:33:44:b6:eb:53:23:be:51:ce:df:57:
         1d:15:dc:ad:9d:d0:bf:4d:19:e4:fa:63:1b:c1:4e:96:17:53:
         3e:9d:3a:8f:ce:31:ca:4f:4f:eb:4d:06:9b:ab:35:5e:bb:f6:
         73:3c:94:24:54:49:92:d1:6c:7e:25:3e:ce:42:e6:de:da:de:
         3f:87:91:cd:d9:86:4d:71:aa:c5:02:d1:f3:48:3f:ec:59:cf:
         d1:a8:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:50 2025 by rpki-client