This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
File:                     voedoSIo9Sr7TRD2P4DgJvSFFqA.mft (raw, json)
Hash identifier:          mp5oikee5ickHs0wNUmjPllTStdiwpz163nbsPtkCwo=
Subject key identifier:   A1:59:2F:F6:4A:55:92:2D:EB:1F:31:15:E4:2B:71:E7:C9:FE:9A:CF
Authority key identifier: BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0
Certificate issuer:       /CN=A9124096/serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
Manifest number:          2D
Signing time:             Sun 25 Jan 2026 06:42:47 +0000
Manifest this update:     Sun 25 Jan 2026 06:42:47 +0000
Manifest next update:     Sun 01 Feb 2026 06:42:47 +0000
Files and hashes:         1: voedoSIo9Sr7TRD2P4DgJvSFFqA.crl (hash: i6lC6wg7Ed0cOXeSbyD7IZFJGNh6bRYnWvmo95xI0xk=)
                          2: 0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa (hash: Id7suSsBB7TTPuhlLWbghNG7hbdjnTVpkz27ylBkiVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl
                          rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124096, serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
        Validity
            Not Before: Jan 25 06:42:47 2026 GMT
            Not After : Feb  1 06:42:47 2026 GMT
        Subject: CN=6975bb67-23fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:e5:05:33:b2:a5:bc:55:58:4f:f3:3a:17:
                    13:6c:0e:b0:91:3a:96:1e:e3:92:ab:43:1d:fb:b1:
                    9a:8c:42:c4:be:cb:4c:15:f5:0c:90:86:ec:54:97:
                    de:98:14:7b:b3:f3:86:5a:40:04:8f:fa:53:ba:de:
                    7c:d5:77:f6:2a:9e:c9:6e:43:00:86:ed:25:48:59:
                    5e:2d:3a:84:f2:de:bc:49:14:c3:1b:94:be:87:b6:
                    31:16:c5:d3:2b:eb:02:b1:73:16:c6:5c:c0:a4:09:
                    b8:63:2b:d3:64:bd:81:2a:ec:73:00:99:de:97:6b:
                    e4:a2:e2:64:af:28:4e:d4:3e:f6:80:c4:28:05:83:
                    de:30:6d:54:fb:d8:12:ac:15:f5:06:d4:91:9d:94:
                    da:c2:f6:00:8e:38:be:5d:34:9c:0d:40:0c:59:ce:
                    9f:e7:4a:b0:82:ea:18:0b:71:51:d4:a1:cd:ea:72:
                    0d:c7:5f:a9:59:f7:8c:0d:6f:aa:65:64:cd:a8:37:
                    e8:07:d5:76:8e:ed:51:47:a0:36:a9:d3:a1:00:7b:
                    55:1b:0e:38:03:50:65:40:6a:4a:ec:71:e5:5c:a4:
                    09:d4:1f:97:04:91:75:3e:aa:12:85:74:8a:fa:f2:
                    23:b1:58:4b:56:50:f9:fb:e3:4e:9d:6c:a0:3d:cc:
                    f1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:59:2F:F6:4A:55:92:2D:EB:1F:31:15:E4:2B:71:E7:C9:FE:9A:CF
            X509v3 Authority Key Identifier:
                keyid:BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8c:78:41:53:46:89:20:52:11:03:85:d6:c3:06:4f:f1:42:
         b2:6b:6f:03:87:1b:ae:2d:86:b4:87:20:d8:51:6b:f2:f0:0d:
         48:6d:eb:56:83:7d:df:7c:73:78:6c:32:43:a1:41:4b:b9:66:
         ea:f7:48:8b:c4:1c:57:d3:f3:bf:f6:bf:e6:3e:8f:59:2e:0c:
         39:d9:1b:22:ff:07:c4:d1:59:71:c7:9d:6b:d1:3f:d0:19:86:
         81:6c:cb:15:64:7a:d7:5b:ff:6b:48:9b:89:65:90:76:d4:f7:
         76:b4:3f:61:19:f7:2e:82:bf:7d:a3:e3:cb:79:66:d8:18:e4:
         9b:a4:53:89:e7:83:03:36:a0:3b:02:ec:21:5e:0a:90:15:94:
         53:1e:74:0b:11:2a:77:74:da:d7:63:38:de:36:d2:42:ef:d0:
         31:ff:eb:6f:d5:ad:6b:7c:21:49:58:1f:78:1b:22:58:a5:8e:
         c7:c4:51:40:ff:05:f3:8f:74:8b:b0:84:96:19:05:84:10:15:
         8b:d8:67:95:f8:a8:69:47:38:41:e9:2e:bb:48:2c:2b:28:9d:
         69:26:4f:3a:64:86:22:7f:ee:51:d6:16:8e:38:f6:07:e5:f9:
         8a:1c:34:89:b0:f1:81:0a:19:46:67:20:86:98:bc:d0:da:99:
         bf:7a:1e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:52 2026 by rpki-client