This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
File:                     AgtgbdnoiYp9XfXqHKPZlgKOddk.mft (raw, json)
Hash identifier:          Q8AxJAps3XPeyFDURfUAG+SSt4f/mW5GxJjM+ODkrgs=
Subject key identifier:   BB:91:FE:D4:6A:9A:8A:A5:1C:8C:CD:35:FD:E8:A0:62:C2:7A:91:23
Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9
Certificate issuer:       /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
Manifest number:          0266
Signing time:             Sun 07 Dec 2025 00:11:31 +0000
Manifest this update:     Sun 07 Dec 2025 00:11:30 +0000
Manifest next update:     Sun 14 Dec 2025 00:11:30 +0000
Files and hashes:         1: AgtgbdnoiYp9XfXqHKPZlgKOddk.crl (hash: aSlFhxcvz3k6KoOw76Kagzrwf/trnjduNAtvMLgtjWM=)
                          2: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (hash: KFPYG7z3ovj/gDTTmWKC0rC1bedBGEtuFgPr4XMRScs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl
                          rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 00:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9
        Validity
            Not Before: Dec  7 00:11:30 2025 GMT
            Not After : Dec 14 00:11:30 2025 GMT
        Subject: CN=6934c633-1127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c5:fa:7a:f4:af:51:26:a2:0b:a4:73:8c:e1:
                    33:7c:db:00:b5:d5:07:e8:23:a6:18:20:db:36:9a:
                    db:28:2a:46:f2:5a:98:9c:0d:02:e3:ad:c2:96:49:
                    87:33:cf:d4:db:f1:2d:e8:12:9c:61:66:ec:c9:cc:
                    b0:d8:98:e1:b0:00:88:db:6b:22:29:c2:f9:7c:e6:
                    16:b7:35:72:83:4e:ee:be:3a:8d:8e:81:d2:e1:02:
                    06:9b:87:29:e9:8d:74:84:a0:d0:cf:b2:24:63:7f:
                    10:33:56:07:97:fb:f6:82:d3:f5:fd:2c:21:ec:5b:
                    49:b0:c4:1c:cc:98:f9:41:dd:7e:69:d7:d5:62:ef:
                    b5:32:97:40:4e:6e:f3:ea:c5:6d:ef:c9:20:ad:53:
                    a9:70:75:cb:8a:02:1c:2c:89:5d:54:bb:a5:0b:a7:
                    24:be:e3:3b:cd:8e:3d:02:4e:fa:8d:88:0c:5f:b7:
                    31:72:e4:2c:2d:a0:31:4a:09:39:af:2d:a0:77:76:
                    34:f3:05:10:77:61:6e:0f:d4:e8:f1:18:2a:e9:03:
                    a7:d4:d6:89:fa:97:80:b3:be:29:9e:ce:62:c8:d4:
                    cd:e6:c3:b3:0a:4b:72:39:8f:f6:3e:0e:76:e1:72:
                    04:65:eb:6f:2c:ff:bc:5f:e6:99:8f:95:12:d1:ec:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:91:FE:D4:6A:9A:8A:A5:1C:8C:CD:35:FD:E8:A0:62:C2:7A:91:23
            X509v3 Authority Key Identifier:
                keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:ff:a3:5c:45:2d:25:ac:de:61:d5:85:47:4f:13:2f:1f:
         b5:cd:8b:88:9e:cd:f7:a9:6f:a9:ee:85:c5:f9:d1:6e:e5:f7:
         9d:04:fd:1b:17:41:7c:ca:23:0a:08:36:e3:26:3f:a8:f0:16:
         f2:99:c0:55:b2:43:8e:59:f6:1f:00:fb:52:5d:a7:8e:5b:36:
         e1:ae:b4:1e:f0:01:65:18:b7:51:2d:44:2c:c1:80:b7:9d:f3:
         b9:96:ba:85:db:d9:67:97:89:8f:55:d8:ff:2a:72:02:6c:db:
         10:57:82:85:c8:2d:cf:ef:8a:0f:fc:44:a1:99:98:e6:10:db:
         65:3e:88:8b:20:d9:ca:45:d8:c9:4d:b6:fe:56:a2:6e:8a:ea:
         27:04:f0:c9:f1:a3:ca:14:6a:d0:f7:86:1a:5d:6a:9f:0b:66:
         e4:04:99:21:61:c1:11:5d:63:c5:74:ee:2a:d8:2f:cd:eb:c0:
         bd:75:08:0b:0a:dc:e8:06:d5:62:a5:f9:a5:6f:f6:1e:3f:6f:
         5c:ab:b1:9e:07:ce:c9:60:fd:51:59:de:b0:00:cb:64:ef:47:
         43:30:69:17:99:fb:c9:ac:48:04:77:14:61:b3:f0:23:d4:b4:
         16:1c:3b:f0:ad:61:fc:98:42:bc:5d:cd:ad:b0:08:50:d7:ff:
         ac:59:c4:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2
MDI4RTc1RDkwHhcNMjUxMjA3MDAxMTMwWhcNMjUxMjE0MDAxMTMwWjAYMRYwFAYD
VQQDEw02OTM0YzYzMy0xMTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6cX6evSvUSaiC6RzjOEzfNsAtdUH6COmGCDbNprbKCpG8lqYnA0C463ClkmH
M8/U2/Et6BKcYWbsycyw2JjhsACI22siKcL5fOYWtzVyg07uvjqNjoHS4QIGm4cp
6Y10hKDQz7IkY38QM1YHl/v2gtP1/Swh7FtJsMQczJj5Qd1+adfVYu+1MpdATm7z
6sVt78kgrVOpcHXLigIcLIldVLulC6ckvuM7zY49Ak76jYgMX7cxcuQsLaAxSgk5
ry2gd3Y08wUQd2FuD9To8Rgq6QOn1NaJ+peAs74pns5iyNTN5sOzCktyOY/2Pg52
4XIEZetvLP+8X+aZj5US0ewQKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuR/tRq
moqlHIzNNf3ooGLCepEjMB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF
NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k
ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTIzRi9DNjRDQUFBNDNFNTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZ
cDlYZlhxSEtQWmxnS09kZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfNv+jXEUtJazeYdWFR08TLx+1zYuIns33qW+p7oXF+dFu5fedBP0b
F0F8yiMKCDbjJj+o8BbymcBVskOOWfYfAPtSXaeOWzbhrrQe8AFlGLdRLUQswYC3
nfO5lrqF29lnl4mPVdj/KnICbNsQV4KFyC3P74oP/EShmZjmENtlPoiLINnKRdjJ
Tbb+VqJuiuonBPDJ8aPKFGrQ94YaXWqfC2bkBJkhYcERXWPFdO4q2C/N68C9dQgL
CtzoBtVipfmlb/YeP29cq7GeB87JYP1RWd6wAMtk70dDMGkXmfvJrEgEdxRhs/Aj
1LQWHDvwrWH8mEK8Xc2tsAhQ1/+sWcRP
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:43:04 2025 by rpki-client