This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File:                     VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier:          LCjbMWlxpAlQdzpjMhEJdfEBNfOmPreq4a9TM5fGBgQ=
Subject key identifier:   CD:33:1F:74:B3:65:99:81:E0:57:ED:B0:A9:74:50:3C:15:5E:D4:1A
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer:       /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number:          4E
Signing time:             Fri 05 Dec 2025 05:09:07 +0000
Manifest this update:     Fri 05 Dec 2025 05:09:06 +0000
Manifest next update:     Fri 12 Dec 2025 05:09:06 +0000
Files and hashes:         1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: 0yb8l/iTkn4FGbnw9916Sqv/p/HXlJAHrfmvaxOQJYk=)
                          2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: jNtI6MU0sZHqYp7Kk2MVm6eivoJ/pZtQE9T6LQkZ7uY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
                          rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
        Validity
            Not Before: Dec  5 05:09:06 2025 GMT
            Not After : Dec 12 05:09:06 2025 GMT
        Subject: CN=693268f3-1f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:94:05:70:4d:19:6d:8b:68:4d:62:8e:40:
                    b0:16:2e:43:6e:5b:1c:79:26:9b:66:18:1a:89:99:
                    c3:4b:10:5b:db:45:eb:ec:8a:8c:11:db:1c:7a:c8:
                    d3:58:9f:49:5b:bc:0a:1a:80:1a:d7:c4:7e:59:bb:
                    d0:f2:96:43:28:dd:25:6d:e4:ec:72:ed:32:6d:b8:
                    cc:2f:58:c6:c3:16:08:b0:e2:5e:91:67:44:1a:66:
                    8e:d9:f9:84:bc:dc:91:c7:52:d6:06:34:fb:fc:59:
                    22:4d:3f:9c:c6:14:01:11:4d:ba:94:2f:84:fd:e7:
                    7e:04:d7:6e:4e:6b:fd:b3:c1:63:02:e7:9c:1e:59:
                    ca:0c:b6:18:12:ec:e2:38:e1:87:77:cf:fd:d7:a9:
                    2e:ea:0a:58:db:a4:3b:c7:81:58:1e:b7:16:e0:4e:
                    95:a0:5f:49:ea:e1:1c:43:1c:f7:3b:5f:b4:5e:68:
                    56:6a:5a:31:a6:09:b6:03:9d:5f:ad:9f:a1:b9:c6:
                    45:01:2b:d3:23:c7:d9:f7:91:2a:ac:4b:70:c4:21:
                    47:5f:7c:a9:07:bb:1e:91:5a:bb:10:35:9b:88:40:
                    ee:12:e1:f5:f0:21:d1:3e:3d:b7:d3:8c:60:f6:c0:
                    b3:64:a3:98:37:c2:d0:e2:2a:f4:8a:53:ed:80:7b:
                    6f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:33:1F:74:B3:65:99:81:E0:57:ED:B0:A9:74:50:3C:15:5E:D4:1A
            X509v3 Authority Key Identifier:
                keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:92:d2:b7:2f:8a:44:95:b5:9c:99:5a:64:1e:e0:a6:21:fe:
         35:9b:04:15:8c:60:e3:45:04:76:7d:b1:83:dc:ef:19:a6:1e:
         2d:a6:82:54:22:e4:78:ec:46:3a:8f:34:c6:29:33:e9:bf:40:
         6e:6a:80:ae:c0:9a:e0:79:3c:5d:d9:4e:d1:ac:21:ee:f5:20:
         3d:ac:33:87:00:33:e8:13:1b:39:36:68:5b:b1:c0:ca:a0:1d:
         44:f4:d6:f5:46:51:d4:db:9e:42:47:74:00:b2:7d:19:ab:38:
         ee:5c:72:a6:76:aa:0a:9b:bf:57:27:8e:4d:b6:ba:fc:5b:cb:
         f0:a1:d5:ed:79:c8:b5:be:ff:70:10:77:5a:e8:4c:77:b7:b4:
         6c:27:26:95:4a:80:fb:91:8c:c0:7a:1e:5a:1a:cc:ca:0a:b4:
         f4:76:11:c6:76:96:a4:80:3a:da:61:ae:86:a3:91:a7:dd:55:
         38:9b:8e:da:18:44:8a:ab:a3:80:c5:3f:87:2c:52:2f:a0:9e:
         a1:2e:3d:d3:e2:c5:cd:8a:01:b7:c2:dd:dc:b5:6b:09:37:be:
         89:45:0c:3a:b3:3e:76:02:76:3c:1a:0e:c7:06:3a:16:d8:da:
         f1:9f:c8:7e:fa:47:4d:62:c6:18:b1:49:89:11:17:b0:d2:1d:
         0c:6f:de:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:55:16 2025 by rpki-client