This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
File:                     ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json)
Hash identifier:          VKdjVqDIdUnA6oH9OPWJkuGvdv/JYnX2jftUT+mRYho=
Subject key identifier:   21:CB:3A:A7:49:DF:51:C1:2F:82:AD:D2:1B:BD:8D:81:52:4A:95:0A
Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
Certificate issuer:       /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
Certificate serial:       06D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
Manifest number:          06CE
Signing time:             Sat 06 Dec 2025 21:03:55 +0000
Manifest this update:     Sat 06 Dec 2025 21:03:54 +0000
Manifest next update:     Sat 13 Dec 2025 21:03:54 +0000
Files and hashes:         1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: wHAagsoZ8R901i6GYcIvSy8js0ekmLxkzIqSMCojeWg=)
                          2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: 2hOid2u5TsPs2BD6knP6FFumSUPv3Pl24PKpE2g7tdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751 (0x6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
        Validity
            Not Before: Dec  6 21:03:54 2025 GMT
            Not After : Dec 13 21:03:54 2025 GMT
        Subject: CN=69349a3a-8f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:eb:e0:71:00:49:9d:2e:39:85:f7:17:93:
                    72:20:a0:76:a6:c8:95:a2:9e:06:3d:44:4a:8c:11:
                    66:73:44:85:4a:85:9c:f4:fe:7b:f0:16:86:5f:d1:
                    0c:40:eb:ea:0c:09:22:55:df:76:b6:ab:53:42:3f:
                    d5:6e:ea:fc:8a:d1:9b:ea:ed:02:b4:da:83:b3:2c:
                    06:c3:f2:4a:bb:0e:5a:8a:6d:ca:c4:91:6a:66:ab:
                    6e:c0:98:46:a8:04:da:04:e3:30:ce:a8:0f:a5:a4:
                    5a:1f:4f:cf:fe:3b:93:ba:a3:bd:32:22:d8:a5:45:
                    23:f3:a2:26:90:54:b3:57:57:93:27:de:ff:a0:29:
                    68:51:e8:0d:ca:73:41:c6:2c:58:36:db:6c:2b:64:
                    f8:af:10:89:c3:5a:d1:98:3a:6a:a6:ad:20:3e:01:
                    d2:ca:1e:0b:b9:47:78:c9:0d:79:0a:a4:c4:42:3e:
                    b5:f3:23:f3:46:07:bc:ed:d9:5b:07:5b:c9:6d:40:
                    5b:6e:3c:26:6a:73:a2:52:1b:fc:71:9b:f7:80:bb:
                    09:71:ed:ec:f9:c6:72:74:df:e6:1c:a2:b8:62:13:
                    b4:3a:05:e6:f1:60:7b:cc:7b:ea:a7:e5:f8:79:a5:
                    75:64:c6:6e:0f:63:64:88:6d:d1:6a:83:61:6a:7a:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CB:3A:A7:49:DF:51:C1:2F:82:AD:D2:1B:BD:8D:81:52:4A:95:0A
            X509v3 Authority Key Identifier:
                keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:83:76:9b:bd:7e:6c:c9:19:bf:11:92:92:d9:7a:4d:5d:
         88:f8:dd:68:03:d0:6d:bb:b0:94:8a:f7:a1:ce:91:bb:e4:66:
         ce:a7:ec:69:1f:d7:98:ca:09:26:4d:75:cc:65:a4:e0:8e:95:
         84:5f:eb:5f:64:19:d0:32:36:be:ad:0d:38:86:97:81:f6:03:
         1c:61:c8:d4:ca:4e:24:34:30:5b:24:3f:2f:18:89:18:a0:35:
         91:f8:47:d5:25:30:1f:96:80:f4:ba:ab:49:0b:8b:4b:a6:d3:
         1f:ee:49:82:8e:08:35:f0:45:58:ba:0c:92:7c:db:3e:62:99:
         6c:7e:c2:51:0c:1b:4f:09:6b:75:eb:e5:fd:5b:c1:9c:93:77:
         2b:dc:de:dd:dd:99:27:74:14:ff:f4:fa:86:08:9a:c7:6a:1f:
         0e:8d:61:03:41:61:b9:fa:3c:da:df:88:f5:26:0d:61:51:c8:
         41:54:b4:b2:b9:e4:b6:f8:89:f9:9b:14:c2:85:41:45:cd:9b:
         7f:7c:b6:71:d7:cc:fe:eb:96:5f:26:ac:0f:ab:ed:6c:21:fc:
         cd:43:8e:d1:3d:b8:8b:f8:38:e3:e2:0d:cf:3d:5a:5b:bc:73:
         0b:d9:c4:71:89:02:54:e0:9c:b6:22:56:b9:3e:c6:da:fc:7d:
         3f:90:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:18:58 2025 by rpki-client