This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
File:                     VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json)
Hash identifier:          cdnOow/pjwY4I1hP7vFUJkSeZwx5n8CYCqWRtW1v7i4=
Subject key identifier:   E0:27:7C:76:1A:32:27:8D:AE:49:49:07:00:BC:43:D2:86:EB:F5:E5
Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
Certificate issuer:       /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Certificate serial:       0B7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
Manifest number:          0B6E
Signing time:             Thu 04 Dec 2025 18:26:15 +0000
Manifest this update:     Thu 04 Dec 2025 18:26:14 +0000
Manifest next update:     Thu 11 Dec 2025 18:26:14 +0000
Files and hashes:         1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: ruO7fDo+W/NVg25EKSfOfZYLqJd6MbngHuq/U1DcSw8=)
                          2: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: nX/3MrGsr2dg/wDbjfsMNISArkomLCu8vleG60nxaCo=)
                          3: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: hh8FXn3wtUHvVDluwdXexVvV43DLCUIYfTNHc1BzjNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
                          rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2941 (0xb7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
        Validity
            Not Before: Dec  4 18:26:14 2025 GMT
            Not After : Dec 11 18:26:14 2025 GMT
        Subject: CN=6931d246-313a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:f3:56:b4:a3:aa:ab:02:ca:a8:e9:a6:90:
                    57:21:39:72:04:6c:5d:60:92:4d:c8:ec:a4:1e:f2:
                    6a:7a:b6:7e:70:55:fe:13:b0:1f:9e:98:cd:ab:15:
                    90:25:ec:ab:15:c3:90:08:c2:67:e3:a5:50:bb:9d:
                    de:38:98:e6:5d:90:1a:ad:a5:27:4d:1b:02:aa:cf:
                    59:38:48:9b:07:03:5a:69:0d:9e:dc:94:93:4f:22:
                    b0:10:13:33:c3:ab:65:19:98:c1:d7:61:3c:ad:ce:
                    69:30:9d:74:6c:68:8e:51:2b:3d:ae:84:4f:18:9e:
                    b9:28:c7:00:9e:a2:4d:86:52:4d:10:4a:e5:62:5a:
                    c9:8a:8b:54:3a:15:66:a4:d0:c9:2b:fe:94:37:ab:
                    8a:16:d2:e3:3c:51:95:1c:18:73:e3:e4:10:bd:62:
                    82:97:f1:1a:47:9c:47:aa:0f:3f:00:8e:3b:18:16:
                    46:c3:09:1c:7c:84:35:5a:ea:55:95:f4:4a:43:80:
                    3c:c9:4d:0e:a8:13:4b:76:90:17:09:0b:a1:5c:0f:
                    0d:4f:85:dd:e3:da:71:0d:a2:a5:a7:34:43:cf:48:
                    53:e8:97:02:ad:50:92:63:12:a1:8f:db:5e:36:60:
                    43:68:ce:a2:34:12:bc:04:33:2d:0e:02:6e:84:99:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:27:7C:76:1A:32:27:8D:AE:49:49:07:00:BC:43:D2:86:EB:F5:E5
            X509v3 Authority Key Identifier:
                keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:41:32:7b:7c:70:ae:31:04:db:61:2e:50:0f:1f:41:be:f6:
         a8:51:3c:4f:fb:99:a0:dd:16:1d:ea:6d:dd:e4:8f:4e:52:f4:
         a7:b2:04:30:ee:c1:ce:21:6a:21:e9:fb:fa:79:1f:78:f3:b0:
         9d:a3:4e:20:6e:02:cd:24:ca:6d:98:97:71:25:e8:27:7c:80:
         43:be:e2:c3:c3:1f:99:8e:b1:17:ca:f1:05:0a:4b:f3:aa:e2:
         8b:a7:62:67:59:88:fe:c0:1c:65:3d:64:d6:63:9e:1c:0c:6d:
         58:73:2a:cb:d9:61:20:82:8d:13:59:b6:f0:f6:0e:64:6f:dc:
         13:85:e3:ad:e5:ad:8f:75:16:a5:37:f4:59:a4:39:f0:cb:15:
         76:fc:1b:a9:fd:72:0c:59:76:33:88:4c:56:89:5d:5b:55:21:
         92:13:25:e7:1c:2a:de:9f:44:04:34:c4:e3:26:e3:e6:51:12:
         e7:3b:73:94:ff:eb:9f:4a:ab:00:e1:b7:ea:96:bd:c7:c8:39:
         50:d7:8c:ea:eb:b7:c4:fc:69:3c:33:22:86:ba:09:5d:f7:c0:
         b1:61:95:2c:72:36:2b:36:8f:8e:25:f8:28:07:ea:fb:c0:d1:
         a4:aa:2c:33:3b:6b:5b:4f:00:5f:2a:05:71:4a:14:9c:ee:47:
         ef:83:9b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:02:38 2025 by rpki-client