This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
File:                     vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft (raw, json)
Hash identifier:          91txRwn/cig8iskt2aHn+cfpcYdT+C2U0USYc3re1Q8=
Subject key identifier:   18:58:4A:C3:8F:6E:7B:94:A2:60:0C:D5:F0:35:B2:04:51:5C:50:8E
Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
Certificate issuer:       /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Certificate serial:       07EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
Manifest number:          07D8
Signing time:             Sat 06 Dec 2025 20:19:36 +0000
Manifest this update:     Sat 06 Dec 2025 20:19:36 +0000
Manifest next update:     Sat 13 Dec 2025 20:19:36 +0000
Files and hashes:         1: vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl (hash: 6hEbeakzv27KiwE7bbiAUUE19C3CQIGex1OJRjYiUuU=)
                          2: 1714A7D489BD11EC9550C184C4F9AE02.roa (hash: xISFxkTIy1/sW6ONq88vOHfhrQ/CIElHTxq+CkeoHlY=)
                          3: FEA1EB7219FA11EBA0F82851C4F9AE02.roa (hash: oM34oRYmNdIz+m8JLuKrZRd7kyOsDYalUtCq4U2sv/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
                          rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2031 (0x7ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B36DC, serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
        Validity
            Not Before: Dec  6 20:19:36 2025 GMT
            Not After : Dec 13 20:19:36 2025 GMT
        Subject: CN=69348fd8-3178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:a7:01:77:1c:f6:24:c5:d9:80:22:b0:13:
                    27:79:ce:52:dc:31:6c:15:c3:77:6b:a3:51:67:d5:
                    0e:d0:13:ab:9a:f5:28:c3:a7:84:cf:14:09:7e:53:
                    39:12:ec:c0:36:9d:78:23:8c:48:88:a3:46:8b:71:
                    58:a0:3d:06:7d:dd:22:3a:ad:65:7b:08:23:78:a2:
                    71:be:60:21:ec:54:d3:2f:15:0d:ce:40:7e:b1:7d:
                    53:21:af:6d:e7:2f:9b:b9:67:d3:b4:98:39:76:d7:
                    83:33:3f:0e:57:6d:66:2e:91:09:ce:89:d7:ac:a6:
                    6d:0f:47:c0:32:da:10:5d:dc:2e:d9:49:e5:61:7e:
                    ed:1c:6f:9d:26:7a:b1:e0:05:df:d3:c2:93:ce:80:
                    7f:06:28:a1:2d:b4:b2:78:50:18:74:8a:52:5f:e6:
                    e8:e5:ce:78:dd:f0:ac:a9:1c:44:97:6d:65:b6:c6:
                    7e:ac:f5:64:4f:a9:39:ee:f2:93:c4:de:14:04:0d:
                    a3:8a:af:5f:43:99:75:b9:36:ea:d5:6a:ac:b6:8b:
                    2b:e8:92:00:ac:7e:27:74:da:7a:d3:b6:42:a8:5b:
                    b5:ff:a9:9d:b9:ad:df:8b:f8:7d:98:97:8e:a6:58:
                    79:ae:d0:c9:93:43:b5:2c:8b:ad:a0:a2:ff:46:3d:
                    2d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:58:4A:C3:8F:6E:7B:94:A2:60:0C:D5:F0:35:B2:04:51:5C:50:8E
            X509v3 Authority Key Identifier:
                keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:58:12:43:a7:25:b7:71:d9:97:d0:68:83:94:2a:5d:68:e4:
         d0:0a:f5:6c:7d:d8:7a:b3:1c:2e:d3:cc:2d:80:d2:1f:dd:43:
         54:0b:ea:73:21:c6:74:35:3a:dd:77:8a:1d:7d:a2:e6:da:95:
         d4:fb:0c:e1:c3:08:96:2c:f5:2b:01:1a:d1:d8:e8:8e:d1:a7:
         3c:d2:d4:ac:ab:a0:60:45:37:e7:36:59:06:0a:dc:1f:f5:f5:
         13:80:96:b3:03:f6:79:08:db:2e:f0:11:6d:06:b3:5b:8c:60:
         9d:94:04:db:3c:30:c1:56:b4:96:62:11:fc:55:95:94:49:4a:
         42:e7:70:19:f4:e6:26:0d:65:93:f0:fb:dc:a9:90:5e:50:a0:
         fe:a4:a7:35:a3:7c:04:98:59:6b:7f:29:52:3e:41:97:25:d5:
         bd:d9:d7:3a:71:f3:0c:d0:14:16:9e:5a:5a:eb:9d:33:97:43:
         fc:51:b7:57:18:c3:82:cf:c3:ef:4e:47:13:47:63:58:2d:d6:
         a4:a5:32:8d:31:75:65:73:8b:bd:b9:88:ea:db:97:a2:f9:a6:
         e6:59:02:ec:47:e5:76:44:b6:83:81:f4:78:6e:55:fa:86:ab:
         ad:1b:e9:5f:e2:fb:0a:b3:f8:26:67:d9:d3:e5:f5:56:3b:09:
         d1:40:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:55:07 2025 by rpki-client