This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
File:                     VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json)
Hash identifier:          Sdcry6kQ2ltLNEHm+S8Y/7zth2VRFNHVXbApAs5MC/0=
Subject key identifier:   29:CF:35:1A:5D:8F:AA:D6:A3:21:13:CE:C3:1E:6D:76:08:6B:69:F0
Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A
Certificate issuer:       /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
Certificate serial:       03B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
Manifest number:          03B1
Signing time:             Thu 04 Dec 2025 23:06:59 +0000
Manifest this update:     Thu 04 Dec 2025 23:06:59 +0000
Manifest next update:     Thu 11 Dec 2025 23:06:59 +0000
Files and hashes:         1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: TnF29EvzSCmxl0wt0zeTIyRX/NoFG4H+zcyc33ebvFM=)
                          2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: KlAC54soZmN85lgdd13wHGCcsR/XbE59aQyhJMVb4zs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
        Validity
            Not Before: Dec  4 23:06:59 2025 GMT
            Not After : Dec 11 23:06:59 2025 GMT
        Subject: CN=69321413-25a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:cd:3f:76:59:10:2a:c2:b6:a6:04:46:c4:e7:
                    e8:46:26:26:66:5c:c6:79:2e:9a:d1:3d:a3:e7:5f:
                    b0:54:49:71:00:18:91:4c:45:2e:5b:7c:6a:6e:47:
                    c5:91:4f:80:ce:27:08:74:22:47:ed:26:91:b6:be:
                    0d:03:47:d3:cd:24:2b:b8:2d:00:5e:45:87:cb:29:
                    46:a3:1a:e4:63:99:5d:3e:78:52:d2:f9:1f:23:b4:
                    8a:38:34:b3:9d:91:13:f6:bf:13:19:14:4a:27:dd:
                    dc:c7:0e:6b:54:9b:71:ea:e8:be:c3:9f:0e:ba:51:
                    72:0f:40:91:87:9e:31:b1:5d:27:6b:ba:ea:64:8e:
                    e5:98:ef:83:78:22:91:70:da:2e:ca:d3:36:f0:08:
                    e3:27:ce:57:d9:cd:82:b4:2d:11:5b:b0:7f:54:8a:
                    11:07:e7:6f:76:bf:b5:4e:5d:79:57:31:21:c4:29:
                    24:37:21:a0:67:00:ae:46:17:55:dc:c9:d8:14:85:
                    61:a6:d4:60:b2:56:94:1f:ec:90:2f:ca:28:5c:b8:
                    b6:4e:34:20:19:cc:30:6a:1d:96:3e:3c:8d:f2:f9:
                    31:35:7c:01:aa:e1:14:db:c0:d3:56:0f:47:f9:7d:
                    c3:7e:05:31:00:a0:dd:34:cd:f6:41:97:8f:3a:3e:
                    bb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CF:35:1A:5D:8F:AA:D6:A3:21:13:CE:C3:1E:6D:76:08:6B:69:F0
            X509v3 Authority Key Identifier:
                keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8a:f9:1d:6f:9b:b4:19:f4:6a:5e:95:d1:eb:b5:89:e5:83:
         c3:c5:f0:69:37:c9:ea:81:49:9a:e6:d0:5a:5c:bb:bb:71:a5:
         08:bd:ec:7f:2e:0b:73:96:cf:2f:6f:26:bc:32:19:30:92:82:
         c0:7c:b2:9d:d6:0b:ca:7c:d0:58:c7:4e:fb:82:37:6f:e7:83:
         78:ab:ee:3a:1d:e9:a4:bf:59:b2:95:16:18:fc:9c:7b:6a:09:
         d8:c6:73:30:6f:7c:ca:62:1d:65:96:41:e5:87:a9:11:e8:59:
         99:c6:b5:03:25:c6:bc:f1:8c:c0:4b:aa:7d:ce:00:2d:d6:05:
         bb:18:a5:4e:20:f4:9e:95:b0:12:63:0e:9d:7d:0b:87:6d:b7:
         96:b3:f2:bd:80:3e:f6:07:a1:40:34:28:0c:31:e7:97:72:d1:
         73:32:a2:a9:4d:3c:49:48:cd:32:06:51:75:89:07:09:ea:f3:
         0d:a1:09:b9:74:48:29:3f:c7:4b:d7:83:0d:d2:61:72:71:76:
         90:f9:a1:ed:a9:55:4f:d1:9f:b8:24:c1:1c:79:fc:df:d8:fa:
         0c:9d:ac:52:b5:0f:3d:c6:8b:6c:bb:04:08:06:37:4f:51:ec:
         11:31:c8:fb:bc:d2:c3:38:86:49:ab:3f:1b:94:6d:38:90:2c:
         1c:50:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:14:35 2025 by rpki-client