This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
File:                     vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft (raw, json)
Hash identifier:          98r+47HlBdxcLt3ytN9pQkT1tNrKN+ZzpDcGHV3Z+1k=
Subject key identifier:   6E:78:DE:95:E9:F7:97:D3:17:8D:22:7E:01:D8:2D:FF:FF:C3:AB:02
Authority key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
Certificate issuer:       /CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
Manifest number:          019F
Signing time:             Tue 23 Dec 2025 02:22:57 +0000
Manifest this update:     Tue 23 Dec 2025 02:22:57 +0000
Manifest next update:     Tue 30 Dec 2025 02:22:57 +0000
Files and hashes:         1: vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl (hash: XtB0XeerlX+aEXIVVVRtV6Ph9pF1ELADy/kDvGPi9n4=)
                          2: 1ECF63EE674511EEBD995841C4F9AE02.roa (hash: 5gAJJRBRn1JiRkSO3BYVHdZp264ZDCsxiRqebhsoeCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl
                          rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162744, serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
        Validity
            Not Before: Dec 23 02:22:57 2025 GMT
            Not After : Dec 30 02:22:57 2025 GMT
        Subject: CN=6949fd01-ddf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a1:db:8a:ad:6c:b0:56:83:94:72:32:62:f3:
                    de:37:aa:c6:4d:3a:23:6b:6d:15:78:80:75:ef:cf:
                    cb:f0:43:2e:7f:9b:cb:75:07:47:be:70:3d:9e:8c:
                    e1:3c:60:03:5b:65:79:01:b2:59:db:28:b5:df:00:
                    e9:48:15:05:98:54:88:6e:5c:1c:77:3c:96:b1:ed:
                    45:4f:6c:b7:39:7c:2b:a0:db:e1:a5:a1:a7:b8:88:
                    4a:57:7e:39:db:0d:9a:32:4e:55:c7:56:77:1e:4a:
                    a0:14:6e:d7:64:cd:87:2f:10:0c:e1:73:a5:1d:8c:
                    17:40:b1:fb:e5:5a:b4:71:4f:b6:a5:cf:ac:0b:71:
                    e2:de:35:9d:5b:fb:b1:a1:41:69:e6:02:c3:56:cf:
                    75:34:d0:7e:b1:63:6b:02:c7:23:c4:ef:d1:c3:0b:
                    09:b5:ff:c7:84:3e:ba:78:b7:3f:ef:55:74:69:c0:
                    f4:8b:3e:d1:4d:bf:6c:27:de:62:97:fb:5f:97:7e:
                    c1:ba:dc:47:73:6d:ef:3a:15:3a:dc:ee:d8:3b:4a:
                    a4:bc:46:24:8d:ef:4d:18:db:8c:aa:f8:64:dd:95:
                    2d:92:a3:fd:72:1d:ee:90:7e:e9:f6:fe:af:18:ce:
                    46:27:2f:37:23:c6:b1:70:6e:5c:3e:5b:49:c5:ad:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:78:DE:95:E9:F7:97:D3:17:8D:22:7E:01:D8:2D:FF:FF:C3:AB:02
            X509v3 Authority Key Identifier:
                keyid:BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:7c:38:77:6f:8a:70:df:45:2f:85:e7:f4:23:52:56:48:6d:
         8d:b2:68:20:25:a8:ba:bf:15:c0:44:ff:d5:94:b3:bd:76:0a:
         44:01:c0:70:d4:cd:c2:ad:87:d5:db:d8:4c:51:2d:3f:95:ba:
         5f:ab:82:83:5e:d4:90:ed:62:cd:90:59:28:33:c0:8a:28:fe:
         17:12:f5:64:09:10:0f:4f:b1:7d:2a:93:e9:91:dd:7a:77:ca:
         6a:7e:f7:50:ae:0d:54:fa:21:08:eb:33:32:25:1f:ad:b2:e2:
         b3:40:c6:74:5b:2b:17:ee:af:95:03:c4:f4:36:f5:ba:1f:c3:
         4d:46:c1:3d:f8:d6:09:fa:d5:ca:ab:4c:7a:33:e7:47:d9:c2:
         f3:d5:12:71:ea:26:34:5e:18:96:6b:f8:37:76:1c:d3:ed:57:
         21:33:9d:21:4e:02:68:60:57:c6:53:9a:8c:1d:ff:94:f6:66:
         bb:4a:e8:c7:19:55:1b:b7:2c:c4:4b:ce:fb:de:0d:50:92:c1:
         52:35:7c:39:a6:d8:f0:4f:5a:4d:6b:42:81:3e:33:ed:72:ed:
         5c:aa:75:1e:bf:cb:24:d6:46:74:54:c3:10:a5:c3:1d:b6:fe:
         67:88:25:a9:22:90:ed:fa:97:98:c1:0b:9c:44:7a:d0:41:19:
         dc:e5:a1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:36:06 2025 by rpki-client