This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft
File:                     1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft (raw, json)
Hash identifier:          a2RYjgV29HYW+0bmt2gpsVRL2SlnfGOudtQoqhrxGfQ=
Subject key identifier:   DC:41:9D:E9:3B:D3:10:A3:EE:98:3E:01:78:B0:72:EA:53:BD:4B:94
Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0
Certificate issuer:       /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0
Certificate serial:       350A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft
Manifest number:          3504
Signing time:             Sat 24 Jan 2026 14:40:42 +0000
Manifest this update:     Sat 24 Jan 2026 14:40:42 +0000
Manifest next update:     Sat 31 Jan 2026 14:40:42 +0000
Files and hashes:         1: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl (hash: McUk+uxkPeLeI0aP1mzzclxgG81VhHEeXcB5NzZiwx4=)
                          2: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (hash: 3lKC8Qsq5K7lIYNSCr2N1N8GbsdjQHyz9EFfPLQHf8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl
                          rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13578 (0x350a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912879A, serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0
        Validity
            Not Before: Jan 24 14:40:42 2026 GMT
            Not After : Jan 31 14:40:42 2026 GMT
        Subject: CN=6974d9ea-06c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:ae:cc:37:17:58:86:d9:1f:4d:c6:c4:33:
                    95:bd:53:05:c6:0e:e1:de:0a:ef:e5:b0:47:fd:73:
                    ad:c5:53:a8:45:2f:7e:90:42:c9:95:2f:ab:1c:f0:
                    50:06:fd:19:d6:81:dd:89:3a:09:7e:5a:02:a9:24:
                    2c:32:e2:7f:9c:50:26:d8:7a:fe:b0:1a:a7:75:ae:
                    7e:ce:22:d2:b3:bb:04:5e:34:f4:2d:a0:bf:c9:0a:
                    60:d3:56:dd:77:91:39:75:31:91:0e:27:7c:3b:a3:
                    7e:6c:e9:51:4a:e1:e8:49:cb:e9:0a:97:fd:09:e5:
                    0d:99:34:28:5b:42:d1:7d:7c:51:84:17:fc:77:14:
                    d8:56:38:25:b4:84:7f:a5:7f:45:c3:f9:de:d5:1b:
                    15:cc:b9:ef:95:12:a8:7c:18:bb:6f:1b:ac:7f:2b:
                    33:1e:3f:b6:ec:7b:54:7d:75:2a:10:27:a1:e1:da:
                    0a:d1:a2:74:dd:6f:ee:e2:99:f4:ee:cf:f7:5f:c3:
                    db:83:54:ab:93:67:e9:f2:11:19:e2:a2:84:ee:00:
                    23:41:fb:e8:56:2f:a6:02:1b:e5:49:68:0b:5f:60:
                    bd:81:67:90:29:a1:3c:e6:06:ef:55:81:27:b6:8d:
                    6b:e0:70:11:18:d5:83:9a:04:a8:e7:f4:12:cb:7c:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:41:9D:E9:3B:D3:10:A3:EE:98:3E:01:78:B0:72:EA:53:BD:4B:94
            X509v3 Authority Key Identifier:
                keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:db:cf:51:04:f5:58:4f:aa:cf:8e:19:ed:a6:14:35:da:e9:
         0d:64:9f:fc:fd:43:63:d8:8a:06:39:3a:62:75:c5:ea:2f:59:
         5b:5e:d1:fa:c2:03:a4:39:37:1d:5d:95:7c:7e:8e:2f:fd:09:
         e9:f9:5e:85:f5:3b:5b:76:23:eb:4e:49:ab:cc:a2:1d:a0:48:
         5a:a3:ff:ab:cd:70:6b:a4:b4:bb:8f:b1:96:73:e0:06:de:cb:
         a5:e3:a5:cf:ea:56:09:f5:9a:62:86:52:41:7d:f2:a4:75:67:
         ff:03:f1:04:62:71:71:0c:ca:58:44:2e:f0:18:fb:d5:6c:05:
         78:76:46:a0:bf:49:52:71:a9:cd:95:73:25:92:04:e7:e0:db:
         e5:e2:3f:29:35:10:4f:3a:90:af:38:26:45:9f:bf:49:ab:8d:
         a1:3b:3c:82:62:f5:cb:8e:6f:dd:97:2c:20:47:6f:c8:59:bd:
         95:84:26:29:df:f2:50:3b:32:30:33:04:75:db:7a:ca:83:7a:
         94:a9:fc:a7:db:07:f6:93:5e:d1:3f:b5:49:a3:2b:f9:5c:0c:
         40:1c:11:41:4a:3b:a5:30:af:97:7d:1c:05:b1:0a:2b:77:95:
         fe:53:91:ad:0c:96:5c:cf:a9:80:ef:ef:ff:16:ca:bf:35:03:
         67:08:e2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:04 2026 by rpki-client