This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft
File:                     AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft (raw, json)
Hash identifier:          oJTlVcCWKPNeiQvNHXln2PdlY59UYzq/GNqV+TiZEBQ=
Subject key identifier:   0F:C1:57:63:46:B0:11:71:E3:41:0E:FD:D7:1E:93:66:72:E3:74:CA
Authority key identifier: 02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC
Certificate issuer:       /CN=A9142BCC/serialNumber=020556F97D545434D2C854121DC5DC64634A64AC
Certificate serial:       193A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft
Manifest number:          191F
Signing time:             Thu 18 Dec 2025 16:20:15 +0000
Manifest this update:     Thu 18 Dec 2025 16:20:14 +0000
Manifest next update:     Thu 25 Dec 2025 16:20:14 +0000
Files and hashes:         1: AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl (hash: uaxKTSB60eaIgLIvri8MxmOo+LKG+IpPS679D6o6nk0=)
                          2: 46BEDD64662411EBADFEB364C4F9AE02.roa (hash: 7ep9r2lhtkEoQQoSPoki8z12gP7TphhYgXVc5Ba6Qgs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl
                          rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6458 (0x193a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142BCC, serialNumber=020556F97D545434D2C854121DC5DC64634A64AC
        Validity
            Not Before: Dec 18 16:20:14 2025 GMT
            Not After : Dec 25 16:20:14 2025 GMT
        Subject: CN=694429bf-922b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:22:81:b6:ce:7a:20:49:28:8f:0f:90:60:b0:
                    49:45:81:51:5e:37:7a:80:86:28:87:27:3d:0d:0b:
                    aa:ae:3c:d8:28:5c:84:8b:d3:5c:79:32:b1:14:f6:
                    05:5e:4e:43:6d:a5:8a:34:0e:81:df:e1:fc:6c:d7:
                    f0:90:12:9b:23:ef:8f:ed:ff:c0:19:1e:82:39:17:
                    99:d9:da:49:ab:ad:de:11:c0:51:9a:9e:90:21:7f:
                    f9:d0:ed:c8:6e:f4:a3:b5:b8:5f:56:af:d6:8d:9b:
                    ae:8d:3c:06:c5:12:75:ff:8f:48:b1:5d:df:70:e8:
                    bc:37:4d:c3:f4:c4:a7:c2:20:b5:5b:1d:68:5d:91:
                    a7:f1:bf:93:14:aa:36:70:cc:b2:2d:2e:49:b7:86:
                    96:d7:d1:b3:a4:51:7c:81:db:da:bb:c2:aa:8f:7d:
                    c6:75:24:d5:fc:9e:8f:31:7a:2e:5f:dd:cb:a2:24:
                    9d:a5:03:cd:89:c3:d7:d1:df:51:ac:9b:04:8a:de:
                    97:58:d2:4d:b0:ce:3d:d1:51:26:cf:5f:99:43:4b:
                    d6:b5:2b:bc:6e:8e:4a:14:9f:df:07:62:1a:e6:95:
                    71:f6:71:e8:30:54:67:42:74:13:29:db:21:8c:bd:
                    3e:f4:fc:2d:1e:49:e0:ec:b8:71:94:9b:0c:d9:9b:
                    7e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C1:57:63:46:B0:11:71:E3:41:0E:FD:D7:1E:93:66:72:E3:74:CA
            X509v3 Authority Key Identifier:
                keyid:02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a7:d6:0e:b4:1f:dc:46:a2:eb:be:0b:bb:11:39:f7:a9:49:
         35:42:b9:d3:98:fd:5a:7d:17:4e:c8:1f:e8:24:2e:70:50:d5:
         19:48:56:52:5e:77:d1:e7:7e:85:2c:a7:4d:5d:dc:38:c8:bc:
         34:93:8c:4e:66:36:db:fa:08:49:cc:d8:9f:1e:1d:31:06:06:
         4a:99:6a:32:ee:de:36:53:90:b6:32:25:ef:29:41:90:35:e8:
         34:b7:e8:6a:8e:93:b0:75:de:ae:9b:22:ac:99:a7:15:6c:d4:
         cf:c8:b9:2a:77:60:51:9f:81:16:21:c3:de:49:13:c0:e3:92:
         ca:14:90:a0:08:e9:66:24:21:0b:99:2c:6b:76:ac:8c:3a:50:
         08:9c:2a:64:4e:2f:c0:98:e8:62:25:21:b3:91:88:a9:dd:5d:
         a6:5d:2a:05:8f:ba:fc:e7:39:84:b2:85:39:06:b0:c5:bb:c0:
         b1:63:25:09:9b:74:0c:1a:84:a5:61:5f:0e:00:53:4c:ae:c2:
         e1:95:31:b5:3f:56:15:4c:70:0d:1a:06:38:72:94:db:2b:65:
         7b:e2:68:23:c5:19:dd:7c:73:38:c3:15:9e:11:91:3a:7b:c7:
         8e:1d:fa:e1:b8:f5:5e:d2:90:c8:e3:63:ca:4c:a1:f3:8b:5d:
         ef:33:f4:5e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJCQ0MxMTAvBgNVBAUTKDAyMDU1NkY5N0Q1NDU0MzREMkM4NTQxMjFEQzVEQzY0
NjM0QTY0QUMwHhcNMjUxMjE4MTYyMDE0WhcNMjUxMjI1MTYyMDE0WjAYMRYwFAYD
VQQDDA02OTQ0MjliZi05MjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+CKBts56IEkojw+QYLBJRYFRXjd6gIYohyc9DQuqrjzYKFyEi9NceTKxFPYF
Xk5DbaWKNA6B3+H8bNfwkBKbI++P7f/AGR6COReZ2dpJq63eEcBRmp6QIX/50O3I
bvSjtbhfVq/WjZuujTwGxRJ1/49IsV3fcOi8N03D9MSnwiC1Wx1oXZGn8b+TFKo2
cMyyLS5Jt4aW19GzpFF8gdvau8Kqj33GdSTV/J6PMXouX93LoiSdpQPNicPX0d9R
rJsEit6XWNJNsM490VEmz1+ZQ0vWtSu8bo5KFJ/fB2Ia5pVx9nHoMFRnQnQTKdsh
jL0+9PwtHkng7LhxlJsM2Zt+bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/BV2NG
sBFx40EO/dcek2Zy43TKMB8GA1UdIwQYMBaAFAIFVvl9VFQ00shUEh3F3GRjSmSs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJDQy84QTU2QzA5RTk4
M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZEVFN5RlFTSGNYY1pHTkta
S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FnVlctWDFVVkRUU3lGUVNIY1hjWkdOS1pLdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkJDQy84QTU2QzA5RTk4M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgxVVZE
VFN5RlFTSGNYY1pHTktaS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCzp9YOtB/cRqLrvgu7ETn3qUk1QrnTmP1afRdOyB/oJC5wUNUZSFZS
XnfR536FLKdNXdw4yLw0k4xOZjbb+ghJzNifHh0xBgZKmWoy7t42U5C2MiXvKUGQ
Neg0t+hqjpOwdd6umyKsmacVbNTPyLkqd2BRn4EWIcPeSRPA45LKFJCgCOlmJCEL
mSxrdqyMOlAInCpkTi/AmOhiJSGzkYip3V2mXSoFj7r85zmEsoU5BrDFu8CxYyUJ
m3QMGoSlYV8OAFNMrsLhlTG1P1YVTHANGgY4cpTbK2V74mgjxRndfHM4wxWeEZE6
e8eOHfrhuPVe0pDI42PKTKHzi13vM/Re
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:25:38 2025 by rpki-client