This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
File:                     VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json)
Hash identifier:          bW9xhIDDNbtZAdO/GzWsUjw28jHk/Gfvy2K4UrA1ixE=
Subject key identifier:   D5:EA:43:43:DD:B0:D4:02:E1:0D:54:6F:81:39:D8:12:DE:B7:7B:3C
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Certificate issuer:       /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
Manifest number:          0114
Signing time:             Sun 25 Jan 2026 04:09:29 +0000
Manifest this update:     Sun 25 Jan 2026 04:09:29 +0000
Manifest next update:     Sun 01 Feb 2026 04:09:29 +0000
Files and hashes:         1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: 4Vnwk1cZXXgSrCZ03dvX6T2ohklcHRheDFkXaWlBT3c=)
                          2: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: //q9Ixb8vsAdKNlqegTg4EF3x3ZRrnQzXIbZ1THsPp8=)
                          3: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: Yay+SyFT5tfziX8uJKhZyhJXv1ePOGC0M822VW0/7oE=)
                          4: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: JxyJ1mmGQ9IoO293w2tx2mXeRaPBNLf0zeXpdM0cN9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
                          rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
        Validity
            Not Before: Jan 25 04:09:29 2026 GMT
            Not After : Feb  1 04:09:29 2026 GMT
        Subject: CN=69759779-0c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:46:82:e0:ae:78:6f:f8:c8:18:54:22:e1:6f:
                    60:b5:4b:78:f2:88:4f:db:19:7b:ac:08:21:02:23:
                    2c:48:c7:e7:7d:4f:a9:11:f3:8d:e9:b3:7a:5c:4e:
                    bd:6b:b9:3e:87:77:15:d1:6b:a8:c0:35:b7:5f:a4:
                    c8:d2:5f:8c:a1:4e:f0:a6:1e:26:01:72:74:54:e3:
                    c0:09:d1:11:8c:a6:e4:74:8d:7d:2a:42:64:34:c8:
                    0b:28:e7:83:66:3f:b3:d2:74:e4:c6:28:96:43:e3:
                    ac:37:29:bb:4c:7a:7d:12:4b:06:1c:f2:0c:b1:01:
                    94:79:c0:88:03:7d:c0:96:38:25:79:d8:15:18:61:
                    1f:6f:5a:69:8f:32:ca:74:f9:ca:8b:61:23:a2:b0:
                    1a:02:0b:0e:1b:2b:ef:a1:49:87:23:f9:fc:f1:4c:
                    14:66:31:a8:d4:e5:85:c0:e4:4e:86:87:0d:9d:50:
                    7f:c2:9c:72:50:0f:01:a9:f7:0f:bc:62:36:d1:5e:
                    2c:70:44:fa:a5:51:82:22:ed:45:91:96:2b:b4:db:
                    8c:7a:fd:c3:96:e5:b8:27:82:d9:6f:63:d7:36:28:
                    a2:48:31:0d:31:c2:a2:65:b2:5d:e2:a1:d3:b6:18:
                    8b:d1:45:67:43:44:bc:0a:26:74:77:14:79:b7:5c:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EA:43:43:DD:B0:D4:02:E1:0D:54:6F:81:39:D8:12:DE:B7:7B:3C
            X509v3 Authority Key Identifier:
                keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:45:1c:61:c0:93:90:5d:f3:78:b9:be:76:5b:f3:13:25:ef:
         90:67:d7:8e:17:5d:66:21:4a:ab:2f:62:32:dc:3b:a4:70:f9:
         00:15:e8:bd:71:44:73:e9:6d:a9:09:71:70:71:e7:dd:7d:70:
         f0:54:3f:e4:b3:8b:99:36:ca:72:96:51:b0:e9:f2:68:74:7d:
         8c:e3:cf:a2:e1:69:60:49:e9:bd:45:ac:a6:f1:a0:95:64:30:
         c6:7a:58:6c:7f:3b:c1:0c:dc:bb:22:21:11:15:b3:8e:6f:1b:
         fe:88:30:45:40:e8:48:f3:0d:d2:77:fd:75:a4:2e:03:9a:ba:
         ff:6c:66:0b:10:c3:bd:e0:a9:28:f5:40:f5:e3:45:3d:33:62:
         fd:03:c0:0d:2f:0b:98:97:80:7a:5e:de:4e:93:fa:06:fc:e5:
         9b:af:cb:cd:20:6a:a5:d1:60:ec:64:ba:fa:78:52:22:bb:ce:
         f4:50:1b:28:67:7c:2c:4f:9f:fc:86:0d:31:96:9b:29:dd:27:
         83:75:47:56:12:8c:fd:28:7a:6a:a9:fd:85:24:ad:3a:a7:60:
         c6:c9:13:24:8d:4c:ab:8c:43:c8:22:f7:5c:e0:31:0a:21:22:
         eb:7f:44:8c:83:73:7e:95:c4:0c:10:a3:7f:e0:eb:83:ff:47:
         01:4b:50:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI3NUExMTAvBgNVBAUTKDU1NzcwRjYzQTBFNjVGNEMyRkM5NkFGMTk4QkM1Nzg0
RENFNzhBNDYwHhcNMjYwMTI1MDQwOTI5WhcNMjYwMjAxMDQwOTI5WjAYMRYwFAYD
VQQDDA02OTc1OTc3OS0wYzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArEaC4K54b/jIGFQi4W9gtUt48ohP2xl7rAghAiMsSMfnfU+pEfON6bN6XE69
a7k+h3cV0WuowDW3X6TI0l+MoU7wph4mAXJ0VOPACdERjKbkdI19KkJkNMgLKOeD
Zj+z0nTkxiiWQ+OsNym7THp9EksGHPIMsQGUecCIA33AljgledgVGGEfb1ppjzLK
dPnKi2EjorAaAgsOGyvvoUmHI/n88UwUZjGo1OWFwOROhocNnVB/wpxyUA8BqfcP
vGI20V4scET6pVGCIu1FkZYrtNuMev3DluW4J4LZb2PXNiiiSDENMcKiZbJd4qHT
thiL0UVnQ0S8CiZ0dxR5t1zYSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXqQ0Pd
sNQC4Q1Ub4E52BLet3s8MB8GA1UdIwQYMBaAFFV3D2Og5l9ML8lq8Zi8V4Tc54pG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xMkQzMEZEODVC
OUExMUVGODIwMjc2NDBDNEY5QUUwMi9WWGNQWTZEbVgwd3Z5V3J4bUx4WGhOem5p
a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZYY1BZNkRtWDB3dnlXcnhtTHhYaE56bmlrWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Qjc1QS8xMkQzMEZEODVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9WWGNQWTZEbVgw
d3Z5V3J4bUx4WGhOem5pa1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6RRxhwJOQXfN4ub52W/MTJe+QZ9eOF11mIUqrL2Iy3DukcPkAFei9
cURz6W2pCXFwcefdfXDwVD/ks4uZNspyllGw6fJodH2M48+i4WlgSem9Raym8aCV
ZDDGelhsfzvBDNy7IiERFbOObxv+iDBFQOhI8w3Sd/11pC4Dmrr/bGYLEMO94Kko
9UD140U9M2L9A8ANLwuYl4B6Xt5Ok/oG/OWbr8vNIGql0WDsZLr6eFIiu870UBso
Z3wsT5/8hg0xlpsp3SeDdUdWEoz9KHpqqf2FJK06p2DGyRMkjUyrjEPIIvdc4DEK
ISLrf0SMg3N+lcQMEKN/4OuD/0cBS1Bc
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:26:50 2026 by rpki-client