This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File:                     vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier:          TIA7K5X0urMexjD3AleQVX2/CDry4dBPuw9Ldgy2nCk=
Subject key identifier:   CA:CE:B5:43:DC:41:6F:0C:27:85:F8:C6:32:57:87:11:4C:79:E1:8A
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer:       /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial:       10BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number:          1081
Signing time:             Mon 22 Dec 2025 17:03:37 +0000
Manifest this update:     Mon 22 Dec 2025 17:03:37 +0000
Manifest next update:     Mon 29 Dec 2025 17:03:37 +0000
Files and hashes:         1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: n3U49FNIoXlfTgmfWtk6JaibQ1jCZLoFnLVP7RHXvfo=)
                          2: 5E46267A46B111E98B793856C4F9AE02.roa (hash: ggdry6EXThW8/Iqa+JecYkvu6rQ2Ed52IzTRWBsgoGk=)
                          3: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 9HyQ/57eR9eFUhHAz1W5cHWihQdkbA5M8sMmhzOnJTs=)
                          4: 3848F884F23311EE97946A35C4F9AE02.roa (hash: DurgFb+PurFTFXAgsr5BKampYmcT3J6RZsXax41Nc8Q=)
                          5: 6007188446B111E98B793856C4F9AE02.roa (hash: YvD8e8mnmsaHRmkbd47odePbEhpcv8nyM6tzBDa3QPk=)
                          6: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM=)
                          7: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg=)
                          8: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: bMzkx/wFNepXXNSOPh8Vc6hh0XPBuOSFoU3g8UlRrqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4283 (0x10bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
        Validity
            Not Before: Dec 22 17:03:37 2025 GMT
            Not After : Dec 29 17:03:37 2025 GMT
        Subject: CN=694979e9-7cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:40:10:cf:d5:5f:48:d1:1a:b1:ff:26:f6:
                    d2:ca:a4:82:2a:d0:d7:a2:f1:8f:08:5c:ae:1c:a6:
                    67:f1:df:89:6d:39:ec:7c:06:3e:92:10:f3:38:d4:
                    5d:f6:a3:60:f6:d4:57:0c:45:3f:ad:74:dd:d7:74:
                    b1:8a:89:63:96:63:7d:01:6d:f5:7e:6c:49:f2:7f:
                    d1:c9:5b:b5:10:71:bd:2e:74:5d:42:e4:40:3c:5b:
                    b2:20:be:67:93:42:f4:ab:11:30:74:f0:26:a9:a8:
                    a3:f0:0a:24:f2:70:3e:08:38:0b:66:5c:27:1b:da:
                    91:25:9b:87:66:59:67:e2:5f:86:2c:27:c7:89:98:
                    fc:fc:51:e3:9e:a0:5d:cc:7a:b7:4b:49:04:a3:c4:
                    d9:ab:0f:97:17:b5:9f:1b:0d:b8:53:0e:78:b3:45:
                    e1:00:fc:e1:14:ba:0a:98:d8:6f:18:a5:5c:b3:a2:
                    a1:17:45:84:d9:ac:27:40:14:07:a6:b3:82:39:06:
                    04:55:58:8d:06:3c:53:66:cd:6b:d0:ad:9a:74:1f:
                    87:9a:7b:7d:a4:0d:20:cb:35:84:a2:8c:65:a3:8c:
                    f4:d3:ab:04:6c:22:2f:97:2c:b3:db:77:74:91:a2:
                    b1:6c:b5:66:ba:b7:86:42:27:ec:eb:f8:a9:21:f9:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CE:B5:43:DC:41:6F:0C:27:85:F8:C6:32:57:87:11:4C:79:E1:8A
            X509v3 Authority Key Identifier:
                keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:cb:1c:a5:6d:2d:3c:fa:4f:15:21:3b:bf:ce:13:83:98:ce:
         92:3a:72:f6:c2:86:b9:0d:c4:87:2e:85:98:f7:12:3a:fa:ec:
         68:5c:24:86:f8:80:4e:06:e6:f0:13:8d:85:1e:d3:f8:c3:54:
         7b:ed:84:2c:fc:0d:57:c3:f5:64:0c:9e:da:a4:93:36:96:83:
         ee:6b:9e:2c:6e:5f:4e:11:3a:0f:52:8b:9e:88:e1:35:2d:68:
         cc:9c:85:be:dd:4b:b0:1b:f9:36:b1:80:59:42:57:75:a4:16:
         c5:68:75:05:e5:f6:e6:2d:6c:5f:bf:d5:28:81:ee:40:90:93:
         52:7b:53:62:f1:eb:42:ff:9b:41:e6:c9:fc:05:51:73:0a:c5:
         84:30:bb:ff:db:22:87:a3:e6:a4:03:40:97:9d:a8:9c:2c:a0:
         98:9f:77:7f:78:3c:25:41:10:2b:30:2d:a4:45:63:8d:4d:63:
         a3:66:95:5c:ea:7a:69:88:b6:b4:2d:df:86:9c:de:23:27:f5:
         08:1c:70:b1:73:4c:95:25:0f:68:8f:2b:df:2e:57:7b:b6:75:
         1a:3d:19:fe:34:66:58:96:a9:a6:1d:2c:e4:57:33:8c:d6:b7:
         23:e3:f6:e4:88:20:54:5c:39:2e:cc:e0:10:9a:51:7c:af:c4:
         25:5c:60:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICELswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG
NzkzRjQ3MDgwHhcNMjUxMjIyMTcwMzM3WhcNMjUxMjI5MTcwMzM3WjAYMRYwFAYD
VQQDDA02OTQ5NzllOS03Y2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDdAEM/VX0jRGrH/JvbSyqSCKtDXovGPCFyuHKZn8d+JbTnsfAY+khDzONRd
9qNg9tRXDEU/rXTd13SxioljlmN9AW31fmxJ8n/RyVu1EHG9LnRdQuRAPFuyIL5n
k0L0qxEwdPAmqaij8Aok8nA+CDgLZlwnG9qRJZuHZlln4l+GLCfHiZj8/FHjnqBd
zHq3S0kEo8TZqw+XF7WfGw24Uw54s0XhAPzhFLoKmNhvGKVcs6KhF0WE2awnQBQH
prOCOQYEVViNBjxTZs1r0K2adB+Hmnt9pA0gyzWEooxlo4z006sEbCIvlyyz23d0
kaKxbLVmureGQifs6/ipIfk8MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrOtUPc
QW8MJ4X4xjJXhxFMeeGKMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2
QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTZCNy9BRTdENEQ0RTQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRS
Mk5kLTJIek03NjMza19Sd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjyxylbS08+k8VITu/zhODmM6SOnL2woa5DcSHLoWY9xI6+uxoXCSG
+IBOBubwE42FHtP4w1R77YQs/A1Xw/VkDJ7apJM2loPua54sbl9OEToPUoueiOE1
LWjMnIW+3UuwG/k2sYBZQld1pBbFaHUF5fbmLWxfv9Uoge5AkJNSe1Ni8etC/5tB
5sn8BVFzCsWEMLv/2yKHo+akA0CXnaicLKCYn3d/eDwlQRArMC2kRWONTWOjZpVc
6nppiLa0Ld+GnN4jJ/UIHHCxc0yVJQ9ojyvfLld7tnUaPRn+NGZYlqmmHSzkVzOM
1rcj4/bkiCBUXDkuzOAQmlF8r8QlXGCP
-----END CERTIFICATE-----
Generated at Wed Dec 24 03:32:49 2025 by rpki-client