This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
File:                     vAWTxH2s9senekHgfeuaBhYxpIQ.mft (raw, json)
Hash identifier:          mRT7MOw4joKj/dA0rrowSKtlKf5UFvqfT0ps1N23S44=
Subject key identifier:   6E:4B:31:95:31:BA:B5:AE:25:7F:44:B2:65:1B:F5:06:90:93:2C:04
Authority key identifier: BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84
Certificate issuer:       /CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
Manifest number:          010B
Signing time:             Fri 05 Dec 2025 03:01:11 +0000
Manifest this update:     Fri 05 Dec 2025 03:01:10 +0000
Manifest next update:     Fri 12 Dec 2025 03:01:10 +0000
Files and hashes:         1: vAWTxH2s9senekHgfeuaBhYxpIQ.crl (hash: YPU5J01f/AZHj9PJeiQKjQ7R2Wwf8WaOCwpxoh8z3t8=)
                          2: 0D5C00AC38E311EF99F62432C4F9AE02.roa (hash: xQMEY6P6f4jmqeDgv/TImb1ka64GtPCQvQqQLQx2M8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B40, serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
        Validity
            Not Before: Dec  5 03:01:10 2025 GMT
            Not After : Dec 12 03:01:10 2025 GMT
        Subject: CN=69324af7-da3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:2f:7c:43:04:36:56:e9:cd:32:fb:80:86:
                    d8:69:c6:f5:e4:d7:ec:92:78:94:65:43:c0:4f:a3:
                    66:6e:e7:4f:60:22:90:08:e9:56:6e:63:a8:a1:ec:
                    ae:88:81:62:19:4e:f6:39:33:b1:5c:90:4d:f4:d8:
                    5d:5b:80:a6:05:bd:8a:b3:cd:08:5f:5f:a9:74:89:
                    c2:7f:83:b2:d1:8a:20:7a:46:4e:8e:1a:eb:8e:64:
                    d7:7a:b4:a0:e1:15:dd:ea:cf:83:db:12:30:bc:d4:
                    06:3e:1e:6a:92:83:c0:dd:4a:98:f5:53:ff:4b:86:
                    93:6f:eb:18:ec:a1:7a:d6:ba:41:b3:44:7f:5a:93:
                    6b:22:ed:16:66:10:85:16:1c:a6:74:54:35:67:1c:
                    c7:3a:df:80:0a:39:d5:b7:ea:c6:cc:f3:98:d4:2e:
                    e9:46:69:6c:75:ba:b7:b4:a2:a5:83:55:0b:a8:e5:
                    46:63:ec:33:b8:92:8f:a5:f3:a3:4c:44:0d:2b:47:
                    f1:5a:e7:a3:4a:f2:2a:65:04:fc:c2:41:c2:29:b6:
                    7f:1d:52:9a:dd:39:57:ea:a2:e3:ba:5b:fc:cb:b3:
                    f3:9c:c5:0f:23:49:22:1d:cf:9f:50:a0:24:95:43:
                    47:07:20:fb:e1:7f:d3:f2:5e:aa:35:4b:cc:89:2b:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4B:31:95:31:BA:B5:AE:25:7F:44:B2:65:1B:F5:06:90:93:2C:04
            X509v3 Authority Key Identifier:
                keyid:BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:8c:62:4e:34:b1:d2:83:d2:c1:8b:d9:e8:8b:11:28:9e:3e:
         15:8c:29:2f:07:aa:6b:72:3a:87:30:e8:cb:ed:a6:71:56:7d:
         3b:4c:18:ca:1c:53:9a:c1:fb:f7:2c:3e:c5:61:0d:2f:18:70:
         59:2c:de:7e:60:d4:80:00:29:23:e5:27:42:a2:a3:23:a1:93:
         bb:cb:57:33:a5:ee:b8:2f:11:ca:4e:a2:f0:40:11:2b:ba:ef:
         27:bd:a6:6a:89:71:4d:63:ac:ec:d6:ec:85:09:7f:30:47:9b:
         fa:83:c0:33:79:bc:2c:9a:18:6a:fa:2d:c6:22:b4:12:13:c7:
         c3:37:42:3c:6c:4a:62:11:ba:f1:eb:12:ce:1a:8f:50:6c:1d:
         d8:23:2c:4d:18:c8:a5:9d:b3:72:47:46:96:79:f2:10:17:4d:
         fa:18:4c:b3:c6:f4:1e:cf:43:34:11:1e:3c:cd:dd:e5:cb:82:
         35:a8:c6:1e:f8:1d:38:3f:d0:bc:ce:1a:df:82:c1:7f:ed:00:
         94:9e:c1:e3:76:5d:62:e2:69:82:d5:08:76:df:01:1f:1e:fc:
         dd:19:c3:19:c8:27:07:5d:a7:da:f5:ef:96:89:2a:33:63:57:
         a2:58:d8:af:0e:4d:87:ea:48:2d:10:48:bd:ca:ee:07:2a:33:
         c7:f2:04:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBCNDAxMTAvBgNVBAUTKEJDMDU5M0M0N0RBQ0Y2QzdBNzdBNDFFMDdERUI5QTA2
MTYzMUE0ODQwHhcNMjUxMjA1MDMwMTEwWhcNMjUxMjEyMDMwMTEwWjAYMRYwFAYD
VQQDEw02OTMyNGFmNy1kYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSgvfEMENlbpzTL7gIbYacb15NfskniUZUPAT6NmbudPYCKQCOlWbmOooeyu
iIFiGU72OTOxXJBN9NhdW4CmBb2Ks80IX1+pdInCf4Oy0YogekZOjhrrjmTXerSg
4RXd6s+D2xIwvNQGPh5qkoPA3UqY9VP/S4aTb+sY7KF61rpBs0R/WpNrIu0WZhCF
FhymdFQ1ZxzHOt+ACjnVt+rGzPOY1C7pRmlsdbq3tKKlg1ULqOVGY+wzuJKPpfOj
TEQNK0fxWuejSvIqZQT8wkHCKbZ/HVKa3TlX6qLjulv8y7PznMUPI0kiHc+fUKAk
lUNHByD74X/T8l6qNUvMiSsXXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5LMZUx
urWuJX9EsmUb9QaQkywEMB8GA1UdIwQYMBaAFLwFk8R9rPbHp3pB4H3rmgYWMaSE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8yODQwQzhBNjM4
RTAxMUVGOTRCODREN0ZDNEY5QUUwMi92QVdUeEgyczlzZW5la0hnZmV1YUJoWXhw
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZBV1R4SDJzOXNlbmVrSGdmZXVhQmhZeHBJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEI0MC8yODQwQzhBNjM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi92QVdUeEgyczlz
ZW5la0hnZmV1YUJoWXhwSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDGjGJONLHSg9LBi9noixEonj4VjCkvB6prcjqHMOjL7aZxVn07TBjK
HFOawfv3LD7FYQ0vGHBZLN5+YNSAACkj5SdCoqMjoZO7y1czpe64LxHKTqLwQBEr
uu8nvaZqiXFNY6zs1uyFCX8wR5v6g8Azebwsmhhq+i3GIrQSE8fDN0I8bEpiEbrx
6xLOGo9QbB3YIyxNGMilnbNyR0aWefIQF036GEyzxvQez0M0ER48zd3ly4I1qMYe
+B04P9C8zhrfgsF/7QCUnsHjdl1i4mmC1Qh23wEfHvzdGcMZyCcHXafa9e+WiSoz
Y1eiWNivDk2H6kgtEEi9yu4HKjPH8gR4
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:46:49 2025 by rpki-client