This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
File:                     RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json)
Hash identifier:          qiV3U2KOERREMm987z0H0+OAq3eeOxpse+hblcNRKVM=
Subject key identifier:   81:77:FD:3E:45:73:A0:C2:BB:9B:1E:3A:1A:94:D9:A4:9B:78:66:A5
Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
Certificate issuer:       /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
Manifest number:          0192
Signing time:             Sun 07 Dec 2025 02:02:42 +0000
Manifest this update:     Sun 07 Dec 2025 02:02:41 +0000
Manifest next update:     Sun 14 Dec 2025 02:02:41 +0000
Files and hashes:         1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: XuLpWg4bWg9W8Zo9dRlrSKn72K47rj31EdQYalalITU=)
                          2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: Is2ym6G52Gd8iJAmBag68kzO/t9tRYX/H4mMynU8bi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
        Validity
            Not Before: Dec  7 02:02:41 2025 GMT
            Not After : Dec 14 02:02:41 2025 GMT
        Subject: CN=6934e041-6cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:73:07:3e:b5:5a:7b:ae:0d:2a:14:6a:e4:
                    42:bf:6a:88:4d:42:50:01:c2:0c:d5:96:5c:24:50:
                    82:09:73:6d:c6:17:d7:c2:52:ac:ba:5c:76:af:1b:
                    be:b0:f9:63:87:08:f3:97:24:92:78:a4:e5:be:7e:
                    db:78:84:bc:62:e7:a2:5e:84:ab:01:17:28:3e:73:
                    7d:15:48:00:a5:47:5c:e6:49:e5:5a:88:30:97:f8:
                    a2:54:37:f6:db:27:0d:62:16:a2:d1:cd:46:62:65:
                    21:4c:8e:31:60:9a:fc:27:e2:c3:bc:df:68:e6:67:
                    28:cc:6a:27:01:7c:c3:04:45:6a:23:af:41:f3:af:
                    27:75:78:e9:4e:d0:f6:3f:72:5d:ac:3f:19:88:08:
                    1b:77:7b:25:aa:8f:93:52:52:db:3c:fe:40:48:26:
                    7a:d5:3f:8a:29:43:ce:bc:85:c3:64:6b:c2:8c:ef:
                    ca:19:28:fd:90:6b:f7:4a:52:b6:36:96:bc:ae:43:
                    d3:f5:f2:5a:04:b7:6c:01:b5:bc:3c:ab:62:35:77:
                    ff:34:38:04:73:50:17:7f:91:85:46:21:6a:74:71:
                    f2:cf:ad:64:61:28:32:df:ba:86:bd:a1:8b:3d:23:
                    e8:a9:8a:6e:fe:25:5b:d2:12:83:2d:be:a0:b3:f8:
                    fd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:77:FD:3E:45:73:A0:C2:BB:9B:1E:3A:1A:94:D9:A4:9B:78:66:A5
            X509v3 Authority Key Identifier:
                keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:03:d0:85:b9:4e:90:5d:1a:a8:6f:a4:39:8f:d9:d8:c0:6e:
         e9:85:db:f9:5f:83:d9:f3:ce:b1:0b:39:18:33:7c:af:74:5a:
         1c:67:1d:67:41:58:00:c1:9f:ab:2c:96:6c:84:05:32:ff:69:
         88:2b:0a:b3:f5:2a:d4:2f:7d:32:0d:8f:1a:d3:86:d1:7e:9f:
         6a:28:a3:1e:04:83:6a:3c:0c:41:10:fd:40:98:d9:70:75:dc:
         6b:20:9d:fe:51:2f:f8:bb:61:dd:c4:40:01:e0:dd:a9:7b:76:
         56:f3:43:4c:89:d0:6f:8a:a9:a3:d3:38:1f:fe:4f:b7:05:a2:
         bf:1e:eb:74:8e:03:d7:2b:c5:7e:c6:ae:a0:28:a1:b9:ba:bb:
         26:8b:0e:51:fe:21:70:6b:28:07:43:04:21:a3:2a:4d:77:f5:
         b4:86:5e:40:ef:0b:27:35:a0:06:12:b2:9d:78:ea:9b:41:54:
         9e:36:87:07:73:ba:34:1e:36:72:23:c4:96:fa:6f:b3:f7:2d:
         97:70:05:a3:cf:13:2a:3d:c9:4a:5f:f3:7e:e5:4d:eb:ca:69:
         77:96:47:1b:04:71:2e:77:ed:df:9e:e0:d6:7a:d8:2a:3a:c1:
         9f:36:48:21:1e:31:72:39:91:28:de:ea:23:31:87:d2:d6:0f:
         5f:f1:ec:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYzMUQxMTAvBgNVBAUTKDQ2MDBDMThENjJDNkY3MjRENUM5NTUwNkY0MUI4Qzk1
RkMzOTBEQzAwHhcNMjUxMjA3MDIwMjQxWhcNMjUxMjE0MDIwMjQxWjAYMRYwFAYD
VQQDEw02OTM0ZTA0MS02Y2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs/dzBz61WnuuDSoUauRCv2qITUJQAcIM1ZZcJFCCCXNtxhfXwlKsulx2rxu+
sPljhwjzlySSeKTlvn7beIS8YueiXoSrARcoPnN9FUgApUdc5knlWogwl/iiVDf2
2ycNYhai0c1GYmUhTI4xYJr8J+LDvN9o5mcozGonAXzDBEVqI69B868ndXjpTtD2
P3JdrD8ZiAgbd3slqo+TUlLbPP5ASCZ61T+KKUPOvIXDZGvCjO/KGSj9kGv3SlK2
Npa8rkPT9fJaBLdsAbW8PKtiNXf/NDgEc1AXf5GFRiFqdHHyz61kYSgy37qGvaGL
PSPoqYpu/iVb0hKDLb6gs/j9cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIF3/T5F
c6DCu5seOhqU2aSbeGalMB8GA1UdIwQYMBaAFEYAwY1ixvck1clVBvQbjJX8OQ3A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjMxRC8wNTVBQjU0NDdE
RjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5VFZ5VlVHOUJ1TWxmdzVE
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JnREJqV0xHOXlUVnlWVUc5QnVNbGZ3NURjQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjMxRC8wNTVBQjU0NDdERjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5
VFZ5VlVHOUJ1TWxmdzVEY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgA9CFuU6QXRqob6Q5j9nYwG7phdv5X4PZ886xCzkYM3yvdFocZx1n
QVgAwZ+rLJZshAUy/2mIKwqz9SrUL30yDY8a04bRfp9qKKMeBINqPAxBEP1AmNlw
ddxrIJ3+US/4u2HdxEAB4N2pe3ZW80NMidBviqmj0zgf/k+3BaK/Hut0jgPXK8V+
xq6gKKG5ursmiw5R/iFwaygHQwQhoypNd/W0hl5A7wsnNaAGErKdeOqbQVSeNocH
c7o0HjZyI8SW+m+z9y2XcAWjzxMqPclKX/N+5U3ryml3lkcbBHEud+3fnuDWetgq
OsGfNkghHjFyOZEo3uojMYfS1g9f8ewz
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:07:54 2025 by rpki-client