This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
File:                     VQiKMVvLUJi-72Zaqcvf0yogWCA.mft (raw, json)
Hash identifier:          sOKdM9tSok8LisnFI5UzCVda55S9/x0TJ5K0YSIISqE=
Subject key identifier:   2E:3C:92:ED:92:8C:4A:AD:79:46:C5:47:1C:56:94:03:D4:D4:4B:27
Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20
Certificate issuer:       /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
Certificate serial:       0722
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
Manifest number:          070A
Signing time:             Sat 24 Jan 2026 21:18:26 +0000
Manifest this update:     Sat 24 Jan 2026 21:18:25 +0000
Manifest next update:     Sat 31 Jan 2026 21:18:25 +0000
Files and hashes:         1: VQiKMVvLUJi-72Zaqcvf0yogWCA.crl (hash: hOIO9NVSfvMFBceHxG853fplCc2wYsgTrYzsA0Rcn3c=)
                          2: 4AC85EBC8E1511F083A5EB46C4F9AE02.roa (hash: HpSbnGJEafe0Cwqy3fqQEE7tGOKywS9PLDhr9ZIWw18=)
                          3: A9B5CDC4B97111F089BA4733C4F9AE02.roa (hash: e7NB/rZJ7soW34sGauamE9L/Mh5Ro39SnWUlgmJO+4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl
                          rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1826 (0x722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119F89, serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
        Validity
            Not Before: Jan 24 21:18:25 2026 GMT
            Not After : Jan 31 21:18:25 2026 GMT
        Subject: CN=69753722-ba57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:24:da:f1:64:ba:15:80:dc:96:b9:c0:1d:
                    f1:92:31:c7:20:fa:1c:92:91:ee:73:74:b7:43:c1:
                    2c:39:8f:b1:e9:1d:61:a5:21:fa:87:1a:41:6d:45:
                    d7:4c:4d:ec:56:96:16:af:48:9d:f8:d2:8a:e4:08:
                    91:7f:74:4b:b2:ef:35:24:4c:3b:45:be:d7:b6:b6:
                    98:6b:a7:41:48:45:a1:2c:01:cc:cd:2c:7b:37:8a:
                    44:4b:bc:e3:f1:ce:d2:9a:90:91:8f:43:a2:38:37:
                    68:19:8e:ca:c0:d2:6c:cc:fb:25:83:1f:82:c4:e8:
                    57:30:bd:55:7b:f6:f2:56:c5:b4:96:19:11:45:10:
                    7d:17:0a:90:88:64:03:a0:46:e0:08:3c:8e:a9:63:
                    29:43:b5:1c:1d:bc:a6:19:3b:81:2d:63:f5:f8:46:
                    d4:23:e0:8d:ab:a2:6a:8e:e8:e3:85:62:5b:af:a7:
                    17:f0:8f:9a:5a:35:04:a9:d4:b4:39:df:4f:00:9f:
                    aa:10:c7:7c:7c:04:b5:27:e9:78:48:f8:28:e4:cb:
                    fe:7a:d5:79:5d:cc:98:ec:af:88:dd:00:f2:db:ed:
                    08:8f:99:e7:52:18:41:4e:8b:e8:fd:fe:5b:85:3f:
                    c9:18:19:22:a8:91:82:4b:17:9f:42:e1:e1:33:56:
                    47:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3C:92:ED:92:8C:4A:AD:79:46:C5:47:1C:56:94:03:D4:D4:4B:27
            X509v3 Authority Key Identifier:
                keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:54:18:e4:17:2b:0f:fd:34:73:4a:8b:1b:e6:12:c4:b9:9e:
         33:4d:0b:57:d1:6e:e1:89:5f:72:ef:8b:1a:10:ba:5a:87:0b:
         41:67:48:55:77:b4:44:ae:87:e6:99:17:46:7b:b6:0f:4b:2e:
         f7:d9:bb:b9:c2:b6:ce:4d:22:2d:a1:cb:73:a1:b3:6b:53:cd:
         c4:4f:9b:b2:fe:41:3f:28:d9:44:7b:21:b0:5f:2e:11:78:12:
         1e:89:f4:8f:a5:a8:b6:84:6c:4f:ca:74:5e:83:51:0f:2c:74:
         e5:87:ab:34:8b:5b:55:3c:ea:0a:a0:b1:cd:31:73:95:33:b4:
         e3:de:14:2a:f9:76:15:cb:82:12:34:a4:69:b0:8f:e6:04:bd:
         76:7d:08:96:55:4d:73:43:56:74:bb:1b:ce:fe:ba:c5:d6:dc:
         ff:57:2a:a2:a0:db:f4:61:01:2f:96:2a:55:d9:c3:46:ba:8e:
         15:68:d5:ce:88:c0:a5:bc:4c:01:22:39:00:a3:76:71:9f:e1:
         ef:f4:44:66:ce:82:27:ea:5c:62:bc:3f:86:fa:71:0e:96:1c:
         de:91:2f:15:72:5e:1d:0e:97:8e:c0:53:45:24:d9:8d:b0:00:
         79:47:ee:f9:27:a0:91:6e:ef:0e:b5:7a:eb:fa:40:d8:62:2b:
         a9:06:19:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:45 2026 by rpki-client