This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
File:                     vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json)
Hash identifier:          cZmtBn6JvpNb8UFv678OKawyfIjgnG/pWohe6jRgmfE=
Subject key identifier:   5C:FA:16:1B:CE:09:EF:2C:A1:40:11:1F:9E:4C:A9:8E:A3:8D:CC:36
Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C
Certificate issuer:       /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C
Certificate serial:       0623
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
Manifest number:          061E
Signing time:             Thu 04 Dec 2025 21:32:59 +0000
Manifest this update:     Thu 04 Dec 2025 21:32:58 +0000
Manifest next update:     Thu 11 Dec 2025 21:32:58 +0000
Files and hashes:         1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: aMGkTkdWNO43fBM9ldH8TC/lyhbO15OLqiaLMT/ct/E=)
                          2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: OtQrF2ELmU+GbG6fbMpToUTy3D5OXRRs3Yb8jPpEVe0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl
                          rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1571 (0x623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4D37, serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C
        Validity
            Not Before: Dec  4 21:32:58 2025 GMT
            Not After : Dec 11 21:32:58 2025 GMT
        Subject: CN=6931fe0a-b4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:62:82:26:c2:a5:ea:96:80:a8:6c:2e:92:
                    c5:37:35:07:a5:e4:e6:d6:08:fb:eb:55:c5:58:9c:
                    36:b9:fc:af:65:16:d1:99:ee:aa:40:19:14:04:39:
                    94:db:93:b4:33:ca:d1:f8:a8:68:56:73:3b:60:99:
                    99:c8:eb:74:98:ea:6b:ef:48:1e:1b:ff:c3:10:b6:
                    2a:95:21:e4:b4:30:ce:d5:09:bc:d5:cc:59:b3:4c:
                    b3:5d:40:1d:49:c5:3c:59:a9:ee:c5:7c:f0:dd:ea:
                    e0:2d:44:19:fd:b5:75:61:52:0b:5f:37:0a:f8:b0:
                    f3:3a:fd:51:f5:eb:8f:e7:44:1d:a4:d4:fc:01:21:
                    d8:d2:41:8d:65:6d:63:c1:c6:d5:9c:00:b9:da:e9:
                    7c:2f:7e:2f:87:09:42:8a:6e:d6:93:56:3d:66:c5:
                    0d:09:01:d1:ca:ce:ac:41:94:4c:af:b9:5d:26:b9:
                    5e:49:25:28:83:cf:5b:81:32:bc:d4:bf:8e:7e:91:
                    5d:d0:f9:c1:a4:f5:e4:11:fc:23:f1:60:b6:2d:55:
                    e3:ac:fc:cd:d4:6c:df:5c:6d:34:a8:4c:68:0c:47:
                    ae:5c:b4:d9:b7:17:2f:5c:fc:1c:bd:fc:66:10:d8:
                    c2:f5:99:a6:48:0b:00:1e:17:6e:6e:01:68:bc:c3:
                    a0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FA:16:1B:CE:09:EF:2C:A1:40:11:1F:9E:4C:A9:8E:A3:8D:CC:36
            X509v3 Authority Key Identifier:
                keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:84:59:53:6e:6b:12:3a:04:7a:9e:16:ec:cc:b4:01:b4:06:
         b2:7e:61:f5:ae:3f:d9:39:1d:68:47:95:4c:e6:cc:3d:7f:bc:
         07:db:94:b6:a0:c0:bc:90:7d:a0:9e:5d:1c:17:47:30:ce:c9:
         9b:e3:10:78:ed:23:7a:22:60:6d:ab:c0:4d:00:74:af:6a:b7:
         42:fa:52:b2:3a:eb:fe:58:3d:f0:f5:e8:fd:e7:de:8d:3d:2c:
         66:ea:5d:e2:99:9a:41:0d:d5:ef:02:34:96:83:8a:7e:74:18:
         a6:8d:6e:a9:55:7f:2f:38:c8:bf:c8:c3:72:bd:5e:c3:9e:50:
         f9:09:c1:84:47:62:25:58:53:be:b2:e7:84:a5:9d:72:6f:21:
         e6:c8:23:22:88:13:68:96:60:c1:30:74:ab:9b:71:1a:ae:a2:
         e5:a9:af:ce:de:bc:27:d0:98:f0:86:82:ef:2c:d2:33:d2:00:
         6f:ef:bc:e8:63:79:3e:4c:a2:aa:df:f2:89:8c:8e:13:f7:50:
         2c:2a:26:6f:01:b4:3a:04:09:b2:5c:f5:5d:3d:06:58:05:57:
         09:4d:81:70:13:95:bd:d8:16:f3:2e:8c:bb:4f:27:36:93:7d:
         e6:f7:60:bf:5d:82:a3:dc:6c:46:26:c7:99:25:ca:7d:09:c5:
         c4:1f:1b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:22:39 2025 by rpki-client