This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
File:                     vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json)
Hash identifier:          XfuMDR0vQBO9WLiu7ENJUd9CfD8zaGzFKMHwbLjgQ6Q=
Subject key identifier:   09:F5:43:51:19:38:9F:EA:B0:22:08:96:C1:4C:1B:B8:77:E9:16:C9
Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
Certificate issuer:       /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
Manifest number:          C8
Signing time:             Sun 25 Jan 2026 04:59:34 +0000
Manifest this update:     Sun 25 Jan 2026 04:59:34 +0000
Manifest next update:     Sun 01 Feb 2026 04:59:34 +0000
Files and hashes:         1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: hoWlhwmTUs2odJgCbMF0zfZEj9LeiZde7FgOVcfRHLg=)
                          2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: u5vjYU67JaqqsoNZI0S6g4tD4PgUnrgAcxaVH+69TsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
        Validity
            Not Before: Jan 25 04:59:34 2026 GMT
            Not After : Feb  1 04:59:34 2026 GMT
        Subject: CN=6975a336-9522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:06:2c:a9:42:76:8d:02:29:45:e8:32:e4:02:
                    5c:3f:b8:d9:03:f6:e1:3a:c1:a9:e1:0f:ea:42:ed:
                    70:b2:04:b4:90:2e:51:f3:27:dc:21:b6:ee:cd:2c:
                    83:9c:7d:e0:60:76:3f:51:15:48:52:8b:c3:92:31:
                    94:cf:e7:d7:34:00:4a:5a:88:e4:83:5c:53:9c:01:
                    97:99:00:67:a7:31:1e:91:8c:a7:26:fb:d0:8e:ac:
                    60:ef:45:e2:f9:b1:e4:b6:0e:16:d1:ca:8f:1c:7d:
                    f6:da:f7:dd:6f:f4:2d:ef:3f:66:43:13:5c:02:80:
                    81:d3:6f:4f:c2:dc:c1:84:d5:65:d9:7c:02:38:75:
                    44:3c:38:4d:86:09:e7:bd:b2:b8:dc:8a:c2:b0:58:
                    c2:1c:bd:98:86:53:fd:eb:f7:8c:17:86:b8:08:3e:
                    26:ea:04:1a:43:c2:60:97:27:7a:e5:6a:b4:bc:a2:
                    a0:80:ed:fb:de:ba:1d:87:d5:ca:fd:47:9e:97:38:
                    9b:c0:a5:83:fe:73:b2:26:bc:9d:b9:e7:a6:2f:19:
                    b8:bf:33:1d:cc:52:af:95:54:7b:4d:08:3e:30:5a:
                    1b:6a:60:b6:10:6d:04:1e:ea:99:14:d6:53:7d:e0:
                    f1:49:e0:db:36:e3:97:80:72:fb:2a:3e:26:91:22:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F5:43:51:19:38:9F:EA:B0:22:08:96:C1:4C:1B:B8:77:E9:16:C9
            X509v3 Authority Key Identifier:
                keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4d:70:60:fd:d3:6f:cb:e4:cf:d7:e4:c2:7c:a8:65:07:31:
         53:e2:17:8b:25:0c:ee:4c:0d:e5:7e:7e:f2:c8:a2:cc:d7:57:
         8c:10:af:29:db:c7:b7:aa:6c:e4:16:37:e5:a1:66:4d:42:aa:
         47:14:9b:ee:75:c4:22:f6:ba:63:ab:65:bd:99:25:07:56:1e:
         71:05:a8:b5:d9:d5:5a:5a:e5:04:95:31:47:0f:35:b1:11:50:
         fd:09:9f:f6:eb:56:2e:27:4e:dd:e3:a7:e2:58:63:ea:09:be:
         72:5e:89:fe:37:c2:a7:20:e9:b6:41:be:79:c8:8e:52:ee:31:
         52:78:9e:e2:cd:e6:77:89:85:d6:1f:2a:65:2b:04:7e:e7:84:
         47:59:ca:ae:18:c7:67:f9:09:60:78:36:6a:d8:66:b7:d4:22:
         8e:66:be:ba:21:00:cc:e3:69:dd:3d:6b:14:96:c6:9d:9c:b8:
         19:bd:60:92:0d:3e:6c:e4:aa:cd:60:36:bc:d7:77:e9:a7:40:
         3e:e5:81:9e:95:6a:c1:10:9f:95:87:86:01:c9:47:56:7e:5c:
         96:9d:7f:5b:95:01:11:23:a6:f6:13:bf:a4:d2:17:c7:90:6b:
         f2:5a:f9:7a:ed:0e:40:84:94:51:e4:2a:cc:9b:cd:9e:db:43:
         3b:8b:71:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:48:52 2026 by rpki-client