This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
File:                     VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json)
Hash identifier:          5bsIn9Cm6Wi0ka7kHSQDiWc9yEjQvVWziU6/qQrH6MQ=
Subject key identifier:   03:E5:BD:70:A4:0A:9E:82:C5:52:E7:03:5D:F1:70:8C:BE:D7:2C:CD
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Certificate issuer:       /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial:       0496
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
Manifest number:          047C
Signing time:             Sat 06 Dec 2025 22:51:50 +0000
Manifest this update:     Sat 06 Dec 2025 22:51:50 +0000
Manifest next update:     Sat 13 Dec 2025 22:51:50 +0000
Files and hashes:         1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: bANpQE2d6FKTWLODPb2RWow0hXz409nw9RCfLIfpXZE=)
                          2: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=)
                          3: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: FmTdhb6JOatjzFGpUujz0yqqemXgtcfk0JQ/+/a77U0=)
                          4: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: wF1Z2aa2PTEiRRPCp23vYrxyf7/d64gIm78PkkwoFEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
        Validity
            Not Before: Dec  6 22:51:50 2025 GMT
            Not After : Dec 13 22:51:50 2025 GMT
        Subject: CN=6934b386-59f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:87:ac:9b:82:e9:ee:72:a1:bd:73:0e:b6:
                    35:08:e6:36:68:2a:3d:30:a9:91:8c:04:8f:47:cf:
                    f8:12:25:45:ef:f4:af:8e:83:dc:12:fc:2d:ed:7d:
                    c3:9d:03:80:20:15:29:80:32:13:54:27:1b:5e:a0:
                    cd:ea:d9:1f:f0:1e:4d:87:fb:1e:1a:be:ec:1e:88:
                    67:6a:03:78:16:20:eb:fd:84:e7:60:1f:bb:c2:f9:
                    8b:88:d1:1e:ba:71:a9:b1:e1:8c:de:3d:7b:a2:9f:
                    73:9c:b5:bd:d8:30:79:cf:7b:54:2a:33:1c:2c:fb:
                    a1:44:fd:71:58:a3:78:4f:87:d6:d2:ec:a5:03:1f:
                    90:6b:3e:b8:76:2e:ed:95:af:55:4f:53:17:a6:9d:
                    28:6a:26:2d:3a:78:60:58:58:39:1e:14:9e:e3:9c:
                    b5:6a:54:f9:3d:71:00:5e:61:2c:44:99:64:13:cc:
                    8c:40:da:3e:30:8f:a0:c2:64:d3:f1:a6:ff:3c:a5:
                    ea:38:27:db:80:6a:4c:f3:c8:0f:ec:b5:e8:76:42:
                    70:38:46:9f:81:5b:ec:c1:6a:05:10:00:8d:13:4f:
                    f4:0b:de:f7:39:06:16:75:d9:95:02:20:bf:b6:7b:
                    af:65:00:6b:3c:90:cc:74:b8:31:32:19:b8:07:b6:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E5:BD:70:A4:0A:9E:82:C5:52:E7:03:5D:F1:70:8C:BE:D7:2C:CD
            X509v3 Authority Key Identifier:
                keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1e:8c:3a:96:8e:4a:b7:b8:3a:0b:71:f7:89:51:16:a7:a0:
         4a:d2:75:c9:f3:87:8f:54:27:09:92:e3:ce:52:b7:db:52:03:
         c4:ff:d8:83:3c:af:81:fa:22:75:2b:41:a6:57:7c:5b:4e:a9:
         95:29:55:5a:9f:a2:79:c4:9e:82:04:e6:05:50:0a:45:b1:59:
         5a:70:4d:ec:94:71:82:18:d6:e4:3b:76:1d:f0:86:7d:41:97:
         64:da:7f:9f:3c:07:78:be:b4:dc:67:0d:df:c0:d0:d7:2f:13:
         e2:da:f9:80:a3:70:d0:22:06:58:61:17:2f:78:2e:10:43:79:
         fd:ce:16:54:ef:7f:ea:5d:b5:74:61:3a:2b:64:2c:25:6a:3e:
         74:fb:58:58:1d:4a:23:49:09:a8:72:42:21:31:50:3b:f6:bf:
         f0:ca:de:41:52:3c:af:02:70:d3:d6:0c:97:69:4d:4d:d1:6e:
         7c:af:3b:80:d6:f2:0b:d1:6f:44:62:2d:14:0d:dc:f4:2b:fc:
         ba:23:3d:87:9b:bb:9b:cc:f3:79:a6:2b:9a:88:f2:ea:db:bf:
         9c:2d:09:32:9e:42:7c:76:f1:f8:90:2e:55:98:8d:cb:04:d1:
         b6:f0:08:fc:bc:df:5a:41:50:31:23:0f:5b:ad:45:a3:71:75:
         b1:1c:be:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2
NjkzNDZBMEUwHhcNMjUxMjA2MjI1MTUwWhcNMjUxMjEzMjI1MTUwWjAYMRYwFAYD
VQQDEw02OTM0YjM4Ni01OWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApTGHrJuC6e5yob1zDrY1COY2aCo9MKmRjASPR8/4EiVF7/SvjoPcEvwt7X3D
nQOAIBUpgDITVCcbXqDN6tkf8B5Nh/seGr7sHohnagN4FiDr/YTnYB+7wvmLiNEe
unGpseGM3j17op9znLW92DB5z3tUKjMcLPuhRP1xWKN4T4fW0uylAx+Qaz64di7t
la9VT1MXpp0oaiYtOnhgWFg5HhSe45y1alT5PXEAXmEsRJlkE8yMQNo+MI+gwmTT
8ab/PKXqOCfbgGpM88gP7LXodkJwOEafgVvswWoFEACNE0/0C973OQYWddmVAiC/
tnuvZQBrPJDMdLgxMhm4B7YrswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPlvXCk
Cp6CxVLnA13xcIy+1yzNMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3
QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu
TWR3dFpLY01ZWnhtazBhZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgHow6lo5Kt7g6C3H3iVEWp6BK0nXJ84ePVCcJkuPOUrfbUgPE/9iD
PK+B+iJ1K0GmV3xbTqmVKVVan6J5xJ6CBOYFUApFsVlacE3slHGCGNbkO3Yd8IZ9
QZdk2n+fPAd4vrTcZw3fwNDXLxPi2vmAo3DQIgZYYRcveC4QQ3n9zhZU73/qXbV0
YTorZCwlaj50+1hYHUojSQmockIhMVA79r/wyt5BUjyvAnDT1gyXaU1N0W58rzuA
1vIL0W9EYi0UDdz0K/y6Iz2Hm7ubzPN5piuaiPLq27+cLQkynkJ8dvH4kC5VmI3L
BNG28Aj8vN9aQVAxIw9brUWjcXWxHL5I
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:50:31 2025 by rpki-client