This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
File:                     AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json)
Hash identifier:          FaMi4fP1CsN2MMWJOoCYz9C9O7kagH+vYgR77sPc1ew=
Subject key identifier:   34:5D:71:EF:B7:50:31:B9:E1:04:B7:3A:A8:CE:FF:D7:B9:B6:45:AB
Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D
Certificate issuer:       /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
Certificate serial:       043D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
Manifest number:          0438
Signing time:             Fri 26 Dec 2025 23:22:00 +0000
Manifest this update:     Fri 26 Dec 2025 23:21:59 +0000
Manifest next update:     Fri 02 Jan 2026 23:21:59 +0000
Files and hashes:         1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: Zlp+wZY9qBzOOoxQ59m6kjS3xHY7rbZ76EJY1hN0cEw=)
                          2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: 9AxcqXh9wRNZ9KWB7JmYs1ClA4NJwiNWZURNVazJEDc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 23:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D
        Validity
            Not Before: Dec 26 23:21:59 2025 GMT
            Not After : Jan  2 23:21:59 2026 GMT
        Subject: CN=694f1898-6582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b4:da:7c:61:80:1d:3f:b2:77:77:cf:da:17:
                    10:f4:3c:86:61:cd:33:27:7f:bb:a0:0f:26:35:90:
                    28:24:6b:bb:4e:6f:ae:e2:69:66:e7:50:ad:12:1a:
                    24:44:ba:27:7a:76:49:5f:48:7f:b9:a1:8d:a4:c6:
                    8a:7b:84:b8:4c:d4:a4:a3:f0:91:b5:da:28:e4:51:
                    6e:77:1f:73:50:5f:da:9a:30:44:9b:51:3d:d8:f2:
                    b4:6e:5b:c4:32:02:ea:bf:76:ee:15:33:1e:d6:0e:
                    32:db:0f:8c:29:33:0d:67:50:47:17:72:1d:e8:d1:
                    ed:35:e4:da:62:6c:20:4d:f9:d9:0f:34:a3:ed:4d:
                    70:d5:5f:be:27:70:0b:da:51:b1:2e:a3:67:3c:d4:
                    37:ed:6d:f1:c8:76:c4:3b:50:60:ac:cd:9b:1a:c3:
                    00:6b:d3:93:a6:36:7b:39:23:02:96:c4:02:bf:55:
                    72:0d:9d:8a:b0:aa:25:82:e1:a6:c7:7e:d7:6a:84:
                    e9:95:69:14:d4:65:cd:2c:79:c9:a2:84:b5:53:ed:
                    ad:46:6d:5c:74:df:5b:52:40:b3:65:56:21:4d:9c:
                    72:30:9b:9d:74:8e:40:f0:b4:89:cb:bb:6a:4d:e4:
                    2c:09:0b:3c:42:a2:03:bf:6b:38:2d:6c:00:29:a3:
                    f6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5D:71:EF:B7:50:31:B9:E1:04:B7:3A:A8:CE:FF:D7:B9:B6:45:AB
            X509v3 Authority Key Identifier:
                keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:57:9d:8b:81:ea:0c:08:ac:97:d5:8b:98:45:56:f1:b9:b2:
         83:10:ff:47:f0:6d:96:fb:96:53:c6:a4:b7:e0:85:60:24:82:
         67:88:d4:2a:53:de:81:66:d0:57:70:e8:45:b7:ba:31:51:59:
         a6:e2:f4:ad:07:b1:8d:28:f9:59:cc:50:e5:3d:43:42:29:f0:
         98:14:de:83:36:03:bf:49:24:9f:da:22:b6:53:2e:f9:78:8b:
         87:43:d8:68:cd:65:da:ae:f3:9f:e6:32:93:28:1d:ed:67:08:
         dd:94:26:03:fd:e9:fa:4e:2a:c8:75:74:e1:a9:93:4a:8a:da:
         2f:36:26:39:08:b6:62:5e:28:0a:31:c9:e5:3d:e4:b7:38:77:
         51:cf:c5:9b:d4:3f:c2:d4:48:31:d9:35:ff:64:83:d0:ef:2e:
         ad:a1:63:f0:61:ca:ce:ce:22:d4:58:5c:59:df:27:37:f5:1d:
         c8:5a:2e:a9:6c:34:92:7f:ed:09:fe:45:aa:35:47:c7:70:69:
         43:bd:33:23:da:21:2d:b9:a1:33:84:c2:03:00:0a:7f:60:99:
         3b:d1:70:84:c6:26:4a:ff:2a:76:b0:2f:43:d7:8b:98:87:aa:
         14:5f:60:19:5f:d4:07:f1:e3:53:5e:4a:1e:40:92:1e:10:ee:
         11:92:2f:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI1QTAxMTAvBgNVBAUTKDAyMDU5Q0JFOUY4NjQ2QzU2MEJBMTg0N0Q5RUI4ODNE
OEQxRDQ0OUQwHhcNMjUxMjI2MjMyMTU5WhcNMjYwMTAyMjMyMTU5WjAYMRYwFAYD
VQQDDA02OTRmMTg5OC02NTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6rTafGGAHT+yd3fP2hcQ9DyGYc0zJ3+7oA8mNZAoJGu7Tm+u4mlm51CtEhok
RLonenZJX0h/uaGNpMaKe4S4TNSko/CRtdoo5FFudx9zUF/amjBEm1E92PK0blvE
MgLqv3buFTMe1g4y2w+MKTMNZ1BHF3Id6NHtNeTaYmwgTfnZDzSj7U1w1V++J3AL
2lGxLqNnPNQ37W3xyHbEO1BgrM2bGsMAa9OTpjZ7OSMClsQCv1VyDZ2KsKolguGm
x37XaoTplWkU1GXNLHnJooS1U+2tRm1cdN9bUkCzZVYhTZxyMJuddI5A8LSJy7tq
TeQsCQs8QqIDv2s4LWwAKaP2RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRdce+3
UDG54QS3OqjO/9e5tkWrMB8GA1UdIwQYMBaAFAIFnL6fhkbFYLoYR9nriD2NHUSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBMC8xNDA2MTkzNjg5
NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1JzVmd1aGhIMmV1SVBZMGRS
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FnV2N2cC1HUnNWZ3VoaEgyZXVJUFkwZFJKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjVBMC8xNDA2MTkzNjg5NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1Jz
Vmd1aGhIMmV1SVBZMGRSSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeV52LgeoMCKyX1YuYRVbxubKDEP9H8G2W+5ZTxqS34IVgJIJniNQq
U96BZtBXcOhFt7oxUVmm4vStB7GNKPlZzFDlPUNCKfCYFN6DNgO/SSSf2iK2Uy75
eIuHQ9hozWXarvOf5jKTKB3tZwjdlCYD/en6TirIdXThqZNKitovNiY5CLZiXigK
McnlPeS3OHdRz8Wb1D/C1Egx2TX/ZIPQ7y6toWPwYcrOziLUWFxZ3yc39R3IWi6p
bDSSf+0J/kWqNUfHcGlDvTMj2iEtuaEzhMIDAAp/YJk70XCExiZK/yp2sC9D14uY
h6oUX2AZX9QH8eNTXkoeQJIeEO4Rki+P
-----END CERTIFICATE-----
Generated at Sun Dec 28 23:39:24 2025 by rpki-client