This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
File:                     vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json)
Hash identifier:          eaVeZxP/s9VRaYecrEu3zr1UE9a7xxccZDz/aLDYpKI=
Subject key identifier:   C5:9B:1B:52:DD:9D:EE:93:96:F9:6D:95:23:8D:50:F4:A8:4F:2A:77
Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
Certificate issuer:       /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
Manifest number:          0187
Signing time:             Sun 07 Dec 2025 02:01:56 +0000
Manifest this update:     Sun 07 Dec 2025 02:01:55 +0000
Manifest next update:     Sun 14 Dec 2025 02:01:55 +0000
Files and hashes:         1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: 0AnSXylaFZJ/nMM6iU4GTBr6sDo7nHRR5pBOX28M3rs=)
                          2: 453686A272BA11F09A607433C4F9AE02.roa (hash: q2MSp4Q8sWvUE8k/uBLa7fJOiAjxmo9DC7/S2PYD4Tw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
        Validity
            Not Before: Dec  7 02:01:55 2025 GMT
            Not After : Dec 14 02:01:55 2025 GMT
        Subject: CN=6934e013-4480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:9c:f2:7d:76:f2:30:37:e5:fd:6c:1e:14:
                    d3:8d:25:8a:26:78:11:9f:9f:07:e5:72:8f:83:cb:
                    07:e6:c1:76:53:37:cb:f7:1a:fa:b1:96:32:c4:3f:
                    36:a2:4a:0b:76:6b:57:18:a3:24:aa:e9:ef:cf:00:
                    f5:ae:09:13:5f:da:96:ff:4b:d4:f4:f2:92:5c:d9:
                    f9:dd:68:e2:61:89:21:04:8c:30:c7:49:8a:6d:b6:
                    bf:56:ed:ad:59:ca:fe:cb:4c:01:65:16:86:b1:d9:
                    ef:3f:95:4f:32:01:48:eb:2e:e0:be:33:d4:76:71:
                    f3:74:ec:da:c6:47:fa:8d:28:18:a4:73:69:32:7f:
                    a0:9c:44:b4:6c:ec:59:a3:ca:66:38:f0:0b:c1:b0:
                    4d:7d:ca:1e:45:e5:ec:12:78:c3:f9:1f:29:6a:ff:
                    d0:03:30:86:1f:91:65:13:4f:b9:6e:f9:b8:70:65:
                    b4:c1:89:65:7e:62:22:fb:c3:61:79:26:16:95:2f:
                    c1:cd:bd:ab:8e:8e:a7:18:4e:44:9c:e3:1d:66:ff:
                    e4:3a:0b:94:c6:9a:a0:89:66:30:bc:c7:98:77:59:
                    eb:8b:33:79:ea:82:5f:35:2f:c9:1e:68:10:ba:63:
                    d7:50:45:93:17:0e:e1:59:3e:71:9d:c1:fd:ba:46:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9B:1B:52:DD:9D:EE:93:96:F9:6D:95:23:8D:50:F4:A8:4F:2A:77
            X509v3 Authority Key Identifier:
                keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ce:c3:9c:1b:29:e6:b4:58:95:9f:c9:ea:fd:35:01:b9:ab:
         75:a6:d1:7b:59:65:66:14:62:86:e1:05:87:59:d4:58:e1:46:
         62:da:33:94:3d:27:08:cd:37:10:40:0b:57:88:71:fb:e0:de:
         6a:c0:18:2e:3c:0f:68:e7:d3:00:84:12:6e:3b:04:5d:80:79:
         19:17:c8:3c:a8:6f:ab:3b:a8:61:f1:bd:26:5c:d2:ef:02:5c:
         5f:36:cd:ae:d4:7c:e7:45:21:e0:89:fe:82:d1:32:b2:37:1b:
         fb:79:e0:31:2d:e3:da:03:6e:14:50:c7:63:33:fa:05:13:77:
         fb:bc:be:ab:cd:93:7d:4e:88:3b:27:52:5d:28:b3:46:5e:68:
         50:24:19:98:7b:c3:36:51:2d:d1:a0:1e:0c:b1:7b:61:29:a7:
         e4:96:a0:72:ae:d9:ca:7e:a6:81:94:58:27:1a:5c:7a:9b:90:
         41:8d:7e:0b:28:35:2b:95:a1:74:24:c9:95:ed:a0:7d:70:74:
         1d:5d:e9:43:3a:ce:dc:ce:73:45:b4:98:df:18:85:60:09:15:
         6a:f6:9f:83:86:75:1f:2d:84:5e:9f:e4:d3:8b:81:47:62:ac:
         fc:1f:2c:cb:e6:86:c3:31:84:96:62:b2:8e:92:e4:5e:42:ea:
         68:81:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:25:55 2025 by rpki-client