This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
File:                     VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json)
Hash identifier:          KDlItdj75PWEzxloU4TNNxiax56mo6quzRwPxH4TxNY=
Subject key identifier:   B5:08:C8:70:BB:EC:AF:6E:05:4F:59:D3:69:9E:08:58:86:1C:84:67
Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
Certificate issuer:       /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Certificate serial:       0B7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
Manifest number:          0B6F
Signing time:             Sat 06 Dec 2025 18:21:57 +0000
Manifest this update:     Sat 06 Dec 2025 18:21:57 +0000
Manifest next update:     Sat 13 Dec 2025 18:21:57 +0000
Files and hashes:         1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: q3BUoGxVtBE8I6IhoxUjUt+nFHvWPhCZkWqq/boRavs=)
                          2: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: nX/3MrGsr2dg/wDbjfsMNISArkomLCu8vleG60nxaCo=)
                          3: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: hh8FXn3wtUHvVDluwdXexVvV43DLCUIYfTNHc1BzjNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
                          rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2942 (0xb7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
        Validity
            Not Before: Dec  6 18:21:57 2025 GMT
            Not After : Dec 13 18:21:57 2025 GMT
        Subject: CN=69347445-7493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:2f:ae:6e:40:b9:fb:d6:39:96:f3:7a:f6:
                    ea:46:66:cd:0e:5d:ee:62:1f:1a:21:ce:06:bd:88:
                    d8:5f:ae:e2:9c:f6:f9:8a:11:96:cf:9f:d6:76:01:
                    05:b6:6e:2f:a5:59:7f:ea:fe:8b:f2:99:a8:6e:4e:
                    a6:72:da:41:57:59:bb:6c:25:62:11:f1:cc:17:f3:
                    93:2d:6b:06:b6:de:d0:44:fc:6f:94:70:12:ae:0c:
                    6b:d4:55:b8:3b:74:8e:2c:70:9d:d5:be:8e:db:25:
                    95:5f:cd:f5:29:a7:9c:a9:7e:db:32:44:2f:ab:9e:
                    e7:b3:99:32:23:6f:d5:bb:5e:9f:35:1e:ed:08:27:
                    39:c1:29:91:91:51:27:dc:d0:25:61:d1:7f:cc:9b:
                    01:d8:1c:33:f6:33:89:16:b9:bd:05:90:7e:a4:df:
                    a6:90:44:0a:ba:d5:6d:5d:a4:7a:b4:ce:d0:9e:5a:
                    86:c5:a5:a2:b3:aa:f4:8d:13:26:b7:d4:5f:f3:f1:
                    b4:95:69:c3:9f:33:91:95:1e:45:d4:33:13:f5:c4:
                    f8:d9:1b:1b:48:1c:1f:8e:19:d7:31:32:83:64:c9:
                    1b:97:c2:8d:07:f0:17:e1:e2:cd:a6:54:f5:b0:f8:
                    0c:80:07:af:69:d5:86:96:af:48:45:7f:e3:70:38:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:08:C8:70:BB:EC:AF:6E:05:4F:59:D3:69:9E:08:58:86:1C:84:67
            X509v3 Authority Key Identifier:
                keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:ce:69:58:73:2c:fd:bb:fd:85:72:f1:89:f3:25:19:8c:db:
         15:3a:21:28:3c:6b:6e:9d:b0:5c:c0:a0:79:50:d9:26:43:61:
         b2:cf:84:15:e2:bd:1d:8f:0d:05:75:37:f0:50:ef:04:21:a0:
         67:ec:06:92:a9:b0:f4:de:51:ba:4f:01:23:c5:ff:75:34:07:
         1f:1c:96:e8:eb:bd:99:37:fd:01:43:93:00:94:bd:e8:c7:19:
         01:aa:76:9b:ff:ee:d0:44:b2:b2:2e:95:24:41:4c:d1:96:d9:
         01:09:b5:36:e1:ae:33:86:23:cc:88:d1:ec:e4:08:8d:b7:b6:
         44:5f:15:74:4f:ea:88:94:6d:f8:90:48:50:96:56:d8:57:46:
         20:47:0f:9a:43:61:19:96:a0:3f:c1:fc:85:24:91:91:e2:b0:
         55:29:27:3b:0f:ef:34:5a:1d:e3:67:52:f6:f3:9a:2b:e5:f5:
         2d:c8:03:cf:3d:c8:f9:dd:b9:f5:f3:c8:af:47:f2:f8:c6:51:
         9c:5f:62:7a:49:35:95:b3:cb:a1:c5:cb:68:e9:10:3b:98:af:
         62:60:f8:81:73:d9:e2:e9:6d:b7:9d:42:08:6c:fd:86:15:92:
         9e:24:7c:05:f0:b4:8d:0b:7e:a0:40:4c:e5:f6:c7:4f:ec:2b:
         6b:ee:a5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:02:59 2025 by rpki-client