This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
File:                     VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json)
Hash identifier:          0h4EiEldi3f9h2s/NWdCMN+yvNMNF2I9nqhuc4JS2Fk=
Subject key identifier:   AC:DB:0B:F3:D3:0D:5F:2B:66:D3:29:A9:42:17:E4:6F:2C:90:D2:2A
Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
Certificate issuer:       /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
Manifest number:          019C
Signing time:             Fri 05 Dec 2025 01:37:29 +0000
Manifest this update:     Fri 05 Dec 2025 01:37:28 +0000
Manifest next update:     Fri 12 Dec 2025 01:37:28 +0000
Files and hashes:         1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: u/bAtmajoWaHnHQ7FSxvq8sOhIljwmjtZaZjMMdrdXc=)
                          2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: y4oU/tmfDIcfKqPlw3m/SWCw2QZiYO8Vo2XRM+uGFBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl
                          rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3F3C, serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
        Validity
            Not Before: Dec  5 01:37:28 2025 GMT
            Not After : Dec 12 01:37:28 2025 GMT
        Subject: CN=69323758-5ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:42:70:4c:6f:ad:8a:3c:ef:a6:91:93:c0:
                    1a:d7:3f:d7:17:6b:b9:3c:08:2f:6a:16:63:18:dd:
                    7f:47:ee:5e:22:87:e6:a2:21:be:53:ed:a5:94:d7:
                    86:93:0e:92:51:9d:04:18:98:4b:01:be:2f:04:a8:
                    10:b4:0f:30:f8:10:00:c8:8a:f0:a7:5c:c3:f0:5d:
                    fa:5a:5c:a5:46:4c:de:05:f9:e9:75:35:05:6a:a4:
                    ca:6a:88:0c:ce:92:17:7e:2c:0f:11:70:b7:60:7c:
                    9f:27:dd:30:89:4c:6e:2f:a4:19:b3:11:df:18:2c:
                    3c:d5:07:3a:04:38:24:9b:d0:f3:a5:09:62:0a:3f:
                    b6:3d:1a:89:4a:7c:16:f5:e2:49:9a:10:60:b0:aa:
                    f4:c8:89:a3:39:94:1c:f8:e6:a4:4a:30:10:3f:04:
                    d5:f9:4a:77:0c:cd:a2:42:c7:41:cb:21:b5:8e:ee:
                    96:76:4e:3a:90:b5:94:86:82:f9:3d:6a:b8:1b:01:
                    77:ff:6b:79:b1:e0:94:87:b6:df:83:d6:c4:c2:cc:
                    61:5b:fa:c9:84:c8:78:29:62:02:2e:12:94:91:2f:
                    3f:7f:85:25:cb:c4:71:40:db:b4:3a:a5:47:06:98:
                    d2:ad:80:c2:fc:f8:66:8c:31:f8:a8:c7:a6:2a:dc:
                    f7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DB:0B:F3:D3:0D:5F:2B:66:D3:29:A9:42:17:E4:6F:2C:90:D2:2A
            X509v3 Authority Key Identifier:
                keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:3a:34:35:39:f8:60:69:e9:b8:73:17:a6:c5:3f:6c:88:
         ac:ef:a3:4d:6d:b3:17:ac:20:4b:e2:f8:11:86:45:63:89:86:
         7f:cf:4f:08:fe:42:be:39:bf:c6:53:e8:74:f5:d7:e2:bb:7d:
         32:4e:0f:0c:28:f1:7b:43:80:78:77:a5:a2:ab:59:23:b1:8c:
         47:90:12:e2:18:21:26:a9:47:14:7b:09:24:ff:b2:b3:bc:b5:
         96:2a:10:e3:46:16:c6:d8:5c:39:53:a0:c6:a0:a3:74:b7:cf:
         7b:04:ed:92:9a:16:07:2c:5c:e1:87:23:2f:ea:90:e3:d9:c8:
         9a:9d:92:2b:42:d5:7e:b6:db:74:27:3b:a9:6b:3a:cd:01:f3:
         d7:8f:6a:54:8e:e9:80:b1:fe:af:ac:32:b7:fd:7b:14:ec:d4:
         37:04:ff:ea:7d:bc:9f:ce:73:d1:4d:1f:68:c0:68:1d:48:18:
         1d:86:bf:2c:86:ec:4a:01:5d:a5:60:55:bc:b6:56:f2:2c:e3:
         26:de:aa:73:a8:16:8f:bc:3f:2a:17:0b:7a:f7:4b:81:a3:59:
         f2:42:e5:1e:54:3c:f2:20:f3:28:be:29:ff:5f:79:6d:87:d4:
         4b:28:9b:bc:34:42:ce:55:3e:ce:48:18:f6:8b:1f:6e:cd:15:
         a1:e0:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:17 2025 by rpki-client