This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
File:                     Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json)
Hash identifier:          8RcSNydHTyEUixF+cgT913mS3Nsahq76XG1KnYdw+OY=
Subject key identifier:   2B:C9:9F:A3:5C:13:5A:FD:AD:20:8F:43:72:E6:A3:3C:6A:2B:04:63
Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71
Certificate issuer:       /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
Certificate serial:       2202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
Manifest number:          21F5
Signing time:             Sat 24 Jan 2026 15:42:55 +0000
Manifest this update:     Sat 24 Jan 2026 15:42:55 +0000
Manifest next update:     Sat 31 Jan 2026 15:42:55 +0000
Files and hashes:         1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: UMll/uCi6Iqnb/24l7UarTex7k1gNOjiHTtW72x2DpM=)
                          2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: io/JzFFNu1EooH3T4S4KVIMDIKASV6Dqv1IIBBRZFQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl
                          rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8706 (0x2202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071
        Validity
            Not Before: Jan 24 15:42:55 2026 GMT
            Not After : Jan 31 15:42:55 2026 GMT
        Subject: CN=6974e87f-e07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:71:29:e0:95:c9:79:1b:0b:6f:3f:1c:20:
                    60:25:1e:c8:52:4c:4c:9e:ab:81:0a:6d:d2:de:97:
                    d8:c5:37:7a:32:77:9b:b0:e2:28:c2:03:3f:cf:af:
                    a4:78:6f:fe:56:b5:a2:ff:90:e1:c2:31:bc:ba:97:
                    eb:d0:bc:d7:d3:01:2f:30:77:9d:ea:64:44:0d:21:
                    24:5f:11:6d:1c:b8:2f:f9:73:8a:20:78:2b:6b:a3:
                    02:01:bd:d4:a7:80:08:01:f1:e2:d4:ad:37:6b:da:
                    60:ae:fe:6f:b6:24:cb:c8:e8:8c:a1:45:bb:75:ca:
                    9f:05:48:77:75:4c:34:b2:45:8c:76:f0:0f:cc:b4:
                    d5:0d:8f:1e:71:83:06:5e:ef:3c:f1:de:e7:e9:b4:
                    ef:46:4d:09:90:7c:47:94:ba:cc:4b:7d:fa:04:ca:
                    c5:04:c6:f4:30:cf:ac:b6:6c:33:7a:d0:07:43:44:
                    d4:ed:bc:84:27:5d:d8:24:fd:34:37:76:66:c3:2c:
                    43:e6:02:37:e5:35:c3:34:eb:6f:75:53:85:7c:e1:
                    a7:b5:48:20:d8:d7:92:38:f3:cf:5b:20:c0:23:c4:
                    c5:05:45:3b:e3:af:e6:6e:9f:28:07:5e:bb:05:06:
                    c6:44:d3:d1:d3:ad:b8:ab:d9:f2:25:61:75:67:14:
                    98:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C9:9F:A3:5C:13:5A:FD:AD:20:8F:43:72:E6:A3:3C:6A:2B:04:63
            X509v3 Authority Key Identifier:
                keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e5:9f:19:4b:e2:34:f7:84:4c:93:02:93:7b:bc:f3:86:92:
         5b:8f:91:71:39:2c:7c:1c:cd:6b:13:89:b6:2d:88:32:66:29:
         ff:bb:b5:1d:9d:67:95:17:96:88:13:eb:00:05:b4:ad:37:5c:
         8a:74:27:5d:45:d3:89:81:d2:a7:eb:ab:04:c2:92:f1:1f:93:
         7f:95:43:95:ec:12:5a:b4:e7:bc:a6:92:53:e7:0c:86:e9:1f:
         dc:67:86:9a:0c:a2:85:b0:88:11:64:7e:23:06:8c:4a:69:f2:
         9f:e4:d1:09:0c:9f:4c:41:5e:50:ed:94:47:69:49:fe:2e:d9:
         25:b2:14:b0:0b:f9:d1:f0:5c:cb:13:65:6e:83:63:72:32:4d:
         35:67:9e:a3:30:c6:ee:22:9e:2b:6e:6e:54:0b:2c:2a:65:f8:
         66:a1:88:e4:98:af:00:69:f7:99:b8:92:b9:c9:7e:b3:64:1e:
         83:18:6b:d3:db:89:c3:c6:fc:59:63:03:31:e8:ae:9e:4b:73:
         a6:36:52:81:76:03:36:0a:05:bf:e3:ec:6a:ea:7d:63:7c:f9:
         c0:f9:ba:57:5d:49:a2:89:6b:09:00:2e:25:e8:36:c0:74:f2:
         7d:72:77:84:0d:8e:66:62:d5:18:18:27:52:39:59:e5:a7:dd:
         eb:6c:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:25:07 2026 by rpki-client