This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File:                     vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier:          J8Qm1LNz1fxXuQAJavtwiydXRmpuy4gOX0g5x/wM+2Q=
Subject key identifier:   20:A6:65:A5:A8:FD:12:EA:56:F3:3C:FE:25:C4:22:07:CA:5C:3E:7A
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer:       /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial:       10B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number:          1079
Signing time:             Sat 06 Dec 2025 16:52:26 +0000
Manifest this update:     Sat 06 Dec 2025 16:52:25 +0000
Manifest next update:     Sat 13 Dec 2025 16:52:25 +0000
Files and hashes:         1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: fvmsbNNrdPx1pXrkvusSTBPZ2aQtY0Hjf6zCLkU31Vs=)
                          2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=)
                          3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=)
                          4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=)
                          5: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=)
                          6: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=)
                          7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=)
                          8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4275 (0x10b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
        Validity
            Not Before: Dec  6 16:52:25 2025 GMT
            Not After : Dec 13 16:52:25 2025 GMT
        Subject: CN=69345f49-c495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:46:3a:fe:a9:cf:f3:0e:a1:73:05:4c:f5:
                    a3:ee:45:a6:c3:95:c1:2f:9f:b6:23:2f:cc:e1:42:
                    b3:57:9b:23:42:5f:45:79:83:b8:b8:71:c6:ec:4a:
                    46:26:75:81:d7:fc:ee:fe:57:b3:d0:37:e3:27:e9:
                    36:5a:ae:5c:7c:f5:b1:f3:df:58:63:b4:0d:2c:81:
                    6f:8e:e5:76:b2:a3:66:08:3b:90:36:04:09:b0:75:
                    ba:4b:86:36:8b:57:26:80:2f:bd:46:d1:da:1b:b1:
                    11:36:e5:09:d7:b3:2d:98:df:9f:72:ff:95:41:d3:
                    ff:70:fa:b1:f3:ca:36:00:30:58:12:9c:d5:ba:eb:
                    8c:8f:77:25:5c:cf:36:bc:63:a5:cd:7f:a1:3d:1f:
                    c3:9b:d6:b4:d6:2e:4a:a2:64:63:9b:21:b7:51:32:
                    59:2a:e4:e1:35:b6:ea:53:b6:d4:8e:37:76:fc:db:
                    71:0b:2e:c1:a4:58:07:76:27:92:45:1e:67:47:63:
                    d4:f1:c5:77:0b:61:a9:e0:df:69:9a:9e:5b:06:8c:
                    69:a1:57:9d:a4:da:38:90:6c:22:d5:53:cd:8d:6c:
                    67:69:0f:02:e9:09:01:51:2c:99:5e:b2:95:be:aa:
                    06:64:1b:56:69:db:3b:24:06:93:d5:e6:80:47:50:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A6:65:A5:A8:FD:12:EA:56:F3:3C:FE:25:C4:22:07:CA:5C:3E:7A
            X509v3 Authority Key Identifier:
                keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0d:5b:b5:ba:70:8f:61:25:8f:17:12:0c:86:f1:cb:36:4e:
         f7:00:33:a5:23:b5:0d:20:40:db:26:66:90:05:90:cb:a5:86:
         be:fd:8f:35:f7:00:77:94:31:cc:3f:57:b9:5b:16:d5:d4:f1:
         b3:a5:1f:54:28:cb:87:ca:9c:fc:4d:4a:6f:f7:19:83:bf:4f:
         f6:18:a1:1c:88:7b:d8:da:82:12:ec:a5:47:63:f1:45:06:d5:
         ef:2f:13:ad:c3:fd:14:d2:b2:d3:83:c2:e7:d5:21:da:97:14:
         4e:bf:1a:74:2c:4b:bc:b3:b8:da:53:4c:ff:80:55:0a:4f:bc:
         cf:32:09:56:71:43:6a:38:a1:a3:b5:de:33:af:23:06:81:19:
         55:8f:90:47:7f:26:55:a0:a2:03:af:e3:94:a6:a6:19:49:8c:
         67:a8:df:a4:7f:56:bb:fb:15:dc:97:b6:a7:f4:27:3f:b0:e2:
         7b:06:77:05:ac:08:3b:01:41:21:97:78:a0:e3:fc:e1:a9:2a:
         19:b2:88:7b:d5:2b:68:98:8c:6c:29:a4:5a:80:31:65:89:bb:
         f5:ad:b7:9b:ff:64:7a:7a:5a:e3:b7:e3:7c:be:04:8e:2a:dd:
         ac:32:25:bf:79:22:3b:01:13:1a:51:4c:dc:d0:c8:5d:de:82:
         95:e5:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:59:27 2025 by rpki-client