This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
File:                     RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json)
Hash identifier:          9jlgEyFTT0WG8FmMzIm0LH/SHjCsgrpChePIrv+4wCw=
Subject key identifier:   38:19:7E:67:2E:24:AF:8C:AA:0B:57:53:DA:71:CF:53:AB:44:46:EC
Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
Certificate issuer:       /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
Manifest number:          0198
Signing time:             Fri 19 Dec 2025 02:43:37 +0000
Manifest this update:     Fri 19 Dec 2025 02:43:37 +0000
Manifest next update:     Fri 26 Dec 2025 02:43:37 +0000
Files and hashes:         1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: KdhGN5xvGGVAac7kGn0mBKPGVGYJPpHDFV7X4UIem90=)
                          2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: Is2ym6G52Gd8iJAmBag68kzO/t9tRYX/H4mMynU8bi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 02:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
        Validity
            Not Before: Dec 19 02:43:37 2025 GMT
            Not After : Dec 26 02:43:37 2025 GMT
        Subject: CN=6944bbd9-711b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:a9:a5:c8:58:e8:93:79:e3:bf:43:6b:ed:
                    6f:4e:49:54:25:99:d9:75:e8:e7:e5:a7:ca:d0:e6:
                    c8:45:8a:8d:57:48:fb:f5:1d:3b:44:0e:a0:9c:8d:
                    db:45:58:43:d1:59:23:69:57:10:52:e7:5f:95:6f:
                    23:41:cb:0c:08:90:8c:ef:b6:19:81:93:41:42:1d:
                    02:60:e7:6f:c8:ab:21:bd:08:ad:0d:be:32:ef:c8:
                    00:b1:61:49:fb:82:1b:a2:ef:93:72:3c:45:dc:a8:
                    ed:0c:96:b9:90:30:27:af:93:3a:6b:59:8d:03:76:
                    a8:49:4a:ad:ad:d5:23:8f:ea:28:e8:38:22:3c:e7:
                    46:0c:a0:78:71:0f:09:ed:ee:14:ea:24:59:29:a2:
                    eb:30:26:d4:f0:8a:69:ae:c4:74:04:c9:0c:d4:b6:
                    ae:10:7d:a3:50:44:59:3e:60:2b:94:3c:64:63:1d:
                    b7:42:c2:4f:e7:06:80:dc:20:10:6e:a7:c1:b6:e6:
                    64:cc:e2:2c:a9:d5:83:44:b2:46:65:5a:dc:25:06:
                    66:48:c5:d9:0f:3d:88:3b:bf:95:3d:3b:3d:8b:ee:
                    63:a6:57:02:47:39:f3:7b:4c:bd:0f:de:c8:37:19:
                    d3:28:da:c0:d3:71:c8:a7:84:47:ff:09:b9:6b:07:
                    cf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:19:7E:67:2E:24:AF:8C:AA:0B:57:53:DA:71:CF:53:AB:44:46:EC
            X509v3 Authority Key Identifier:
                keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ec:80:24:15:04:a5:90:08:ef:1a:fa:8f:ea:48:57:ff:fc:
         31:90:7f:4f:d4:c8:a3:6d:f5:95:b0:de:fe:96:fa:00:f7:3e:
         4d:b8:62:bd:58:ef:3f:03:f2:6b:f1:60:f7:e6:af:82:e9:9c:
         16:a7:52:a9:e6:60:5a:80:87:50:fb:87:bb:85:e4:48:d9:f4:
         32:7e:9a:dc:46:a9:1e:6c:c7:61:77:57:77:15:90:bd:34:64:
         ed:2c:07:b2:32:17:e2:66:73:9a:44:d0:db:4e:2b:a1:5a:b6:
         d7:7e:e4:bc:7b:93:7a:e7:12:36:85:75:06:c5:cc:3b:4e:d6:
         39:4a:58:72:78:ef:d4:65:78:52:4d:ed:70:4c:46:71:e3:de:
         71:01:ae:c1:34:81:8e:67:5d:5a:61:16:0f:2a:16:2a:c1:33:
         74:ea:bc:0f:ec:7b:af:b5:db:0f:9d:22:b2:4c:1b:dd:e4:2c:
         d3:75:3a:dd:4b:31:af:96:32:5f:84:62:d2:14:9f:79:51:52:
         71:0c:1a:0d:94:fc:75:ff:ac:1b:ae:5f:5d:a1:97:b2:72:57:
         14:96:2d:83:16:b9:b6:95:7a:b0:02:d3:02:92:35:26:a2:19:
         34:72:40:c1:a5:4c:36:c2:38:38:10:09:60:61:0b:73:28:4a:
         28:84:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:43:45 2025 by rpki-client