This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
File:                     vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json)
Hash identifier:          D/NywpRjTt+b1ViuzVVCWAgb5MRfeH/p+MuDaXE1p4A=
Subject key identifier:   30:C9:D8:5E:B7:DB:F1:46:C5:B7:E8:D5:33:9B:ED:46:FF:86:01:FA
Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B
Certificate issuer:       /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
Manifest number:          26F1
Signing time:             Sat 24 Jan 2026 16:05:34 +0000
Manifest this update:     Sat 24 Jan 2026 16:05:33 +0000
Manifest next update:     Sat 31 Jan 2026 16:05:33 +0000
Files and hashes:         1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: Dm7PTTK7d2jdAy8lmbgcZ1S7ZoCrdOh4fM5JsRE1uiE=)
                          2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: tee5qyYUeYtzVgY5XM9ROj+LoDAFDMjISaly7p7VUNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl
                          rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B
        Validity
            Not Before: Jan 24 16:05:33 2026 GMT
            Not After : Jan 31 16:05:33 2026 GMT
        Subject: CN=6974edcd-082d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:e1:9f:59:f6:9f:91:55:72:f0:97:aa:ef:
                    26:81:0b:ba:01:30:01:a2:45:ae:23:d9:13:66:9f:
                    2e:47:1d:5a:c5:c8:38:30:4c:59:43:09:49:08:ce:
                    11:b0:5c:e7:2d:b9:f9:6c:c2:1e:85:88:0f:0b:8e:
                    40:d6:6f:be:35:a0:21:76:26:04:02:5f:d7:3a:1e:
                    a3:aa:f2:05:d3:39:a1:89:d6:e2:f8:61:c2:1e:c8:
                    aa:17:39:ae:cf:fc:29:a1:36:cd:ae:96:c3:c5:ae:
                    31:01:fa:8d:43:f4:a5:4d:53:04:76:de:14:fa:9b:
                    5b:42:88:ea:42:98:a3:34:51:be:e9:de:2a:32:cf:
                    82:67:7d:11:33:bf:33:c7:9c:a5:34:3c:57:94:39:
                    00:9b:53:18:bc:a7:5c:e6:e3:80:be:93:ab:04:ba:
                    56:38:3d:b6:3e:d5:94:1c:56:6f:bc:51:2a:db:75:
                    a0:b9:d5:9b:5b:12:d3:a1:a2:1f:75:2e:b1:af:1b:
                    b3:d5:3b:44:a5:db:c8:7f:cf:96:cf:ee:c4:2e:24:
                    ad:69:88:7a:22:25:77:db:3f:57:70:ee:7d:b5:be:
                    f7:ee:f9:59:fb:dc:6c:04:51:6a:3d:7f:47:47:ec:
                    8b:79:0e:96:69:b5:0f:ab:0d:1f:01:41:35:33:8a:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C9:D8:5E:B7:DB:F1:46:C5:B7:E8:D5:33:9B:ED:46:FF:86:01:FA
            X509v3 Authority Key Identifier:
                keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:1c:88:42:f5:5a:f7:4c:b2:9b:2c:96:15:95:16:d4:63:37:
         d4:b4:ae:49:5d:5c:c0:90:16:ae:08:87:0f:4f:9d:49:16:8f:
         af:c8:95:26:2e:22:3e:b2:e5:07:14:d2:7f:0d:ba:1c:67:2d:
         44:6c:d8:61:1c:39:9d:c8:e6:e9:3d:3e:8e:f8:42:21:e6:74:
         57:0f:4b:99:de:ba:74:c9:83:a2:3e:2f:eb:d1:0f:46:15:40:
         ba:b6:d4:8e:37:66:c7:a4:f7:b9:8c:03:24:b8:cb:05:8f:d6:
         a3:fe:77:60:51:78:ac:61:7a:04:e6:23:1a:e0:58:f7:cc:32:
         8a:ea:54:3b:51:94:12:7a:6d:88:40:e5:14:b6:ff:4e:5c:16:
         e4:52:1e:7a:17:c7:7b:c9:af:52:82:c1:27:2b:f8:20:77:57:
         4b:b4:1e:5a:ed:d0:46:44:35:b5:0a:fc:65:78:67:e6:9d:06:
         b1:ca:c5:d7:20:36:68:05:b5:79:99:1e:78:7e:6e:17:b0:64:
         fa:da:14:cd:a0:49:81:0a:14:7d:f3:9a:b7:1e:c0:5b:d0:7e:
         ad:d1:a3:53:42:aa:bb:f1:78:f6:0e:6c:5b:48:81:90:0d:b1:
         b0:29:72:21:92:3f:dc:e7:3e:44:de:cb:f0:9b:44:29:e4:9d:
         78:9b:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:50 2026 by rpki-client