This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
File:                     vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft (raw, json)
Hash identifier:          JRccsjGUOk9iSFSnoIhbDb7/qUsYCaX1f6Rx+7a/ZFQ=
Subject key identifier:   2A:BE:7B:B1:0B:7E:3F:EB:D4:03:C9:B3:B1:92:89:BE:CB:29:E3:7A
Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
Certificate issuer:       /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
Manifest number:          13FA
Signing time:             Thu 04 Dec 2025 17:55:12 +0000
Manifest this update:     Thu 04 Dec 2025 17:55:11 +0000
Manifest next update:     Thu 11 Dec 2025 17:55:11 +0000
Files and hashes:         1: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl (hash: nev+oyugKdvyOSXGUOeyTkL+QoPBTYEZ8pWs1s/54hU=)
                          2: 46090834705811F099A0C739C4F9AE02.roa (hash: 91h+0MKmxTQw+EKZwCvLFi01zzuUTUbrMhsMmvqjr8Q=)
                          3: 7C0FB3666B7F11F0A9B64752C4F9AE02.roa (hash: AJvVHLLVI0k0xrsfIwNqKfZq9YBrWgoFRJ5kItU0vtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
                          rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 17:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
        Validity
            Not Before: Dec  4 17:55:11 2025 GMT
            Not After : Dec 11 17:55:11 2025 GMT
        Subject: CN=6931cb00-bb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:8b:fe:2c:22:b2:35:fd:7c:2e:a2:3d:73:
                    b1:07:1b:d3:31:49:1d:21:11:45:9c:90:ba:4b:72:
                    c2:6f:68:b3:4b:24:93:bd:20:e4:68:23:28:ab:11:
                    6f:88:8e:ab:0d:a4:7b:82:b1:66:3d:c5:9a:cf:54:
                    c0:d4:4e:81:9f:07:1c:1a:17:dd:47:1c:46:61:a5:
                    d5:d1:31:ca:c0:09:f8:60:a0:cf:e5:93:b7:0b:df:
                    f7:29:ce:0f:51:19:f3:46:e8:30:f2:1b:60:e5:7a:
                    1b:40:48:3f:43:43:2b:79:9a:5c:9a:e6:70:c0:c6:
                    a1:fa:0a:e6:f2:73:bd:3b:ef:52:a9:5b:22:96:35:
                    17:1b:45:95:e9:47:63:0d:d8:a5:d0:95:2f:d2:fc:
                    2d:66:57:37:1f:79:b7:e3:c6:ba:43:b0:39:dd:c4:
                    46:44:82:64:fb:45:a9:22:c9:99:71:21:69:23:e4:
                    5e:b4:15:21:30:eb:60:58:c9:eb:2c:a0:8b:fc:27:
                    06:32:56:16:a3:13:1c:a5:fa:3f:6a:bf:92:72:85:
                    4e:b4:95:0a:d4:6b:e9:22:ca:39:f6:1f:62:65:25:
                    a5:f5:94:83:9e:3f:85:0b:88:e9:61:e7:a6:d2:10:
                    ae:92:45:8a:0e:db:c7:c8:c8:b1:d7:5e:ae:f7:4a:
                    58:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BE:7B:B1:0B:7E:3F:EB:D4:03:C9:B3:B1:92:89:BE:CB:29:E3:7A
            X509v3 Authority Key Identifier:
                keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:36:ac:94:2d:d2:c2:bf:2b:f4:89:be:23:0f:32:a4:73:43:
         46:02:c4:cc:68:51:63:96:ab:5a:03:59:a2:35:4d:9a:0e:10:
         bc:1d:ad:28:d8:75:52:d2:0f:77:0f:32:48:ad:7a:b3:3b:bf:
         f4:5a:fc:9f:b8:b3:85:96:7d:ff:80:69:c9:4d:3c:5b:5c:1c:
         a6:f9:fb:ad:c9:4d:3d:3b:79:f6:5e:ef:84:29:b2:96:e8:66:
         bd:0e:6c:e7:c6:f1:e3:74:d4:f4:2b:00:4f:d8:3e:02:cf:1a:
         0b:e4:89:39:a0:86:21:59:51:75:5e:14:9b:fd:05:c5:5f:e5:
         e0:43:0a:7c:ee:a6:f2:de:1d:60:a1:06:fc:eb:39:94:f6:d9:
         24:3e:de:12:de:55:dd:ad:c8:1a:47:bc:cd:19:05:d2:a1:5e:
         24:68:46:94:88:cc:ac:50:ad:da:1c:9c:25:2f:e9:68:6c:6f:
         24:8c:1e:71:1c:76:24:6a:4b:49:dd:e0:33:8f:65:9f:d8:43:
         fb:f8:1e:21:6e:29:cf:11:80:3c:9c:9f:08:1d:6f:3f:fc:de:
         9d:71:be:2f:dd:d2:e9:03:17:f7:7b:6c:e2:e8:ef:6e:7e:7a:
         3f:3b:f8:dc:07:78:a9:17:b4:2e:9c:0f:94:ea:e0:4a:5a:9b:
         4f:35:e1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:45 2025 by rpki-client