This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
File:                     vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json)
Hash identifier:          rytl6HZUmVd/6T16OQKQBIpAnu5Xd1yzt8ELBK+tgWY=
Subject key identifier:   9E:A6:9A:63:C8:C1:C5:BC:B1:A2:CB:74:07:6C:F5:62:48:55:44:DB
Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62
Certificate issuer:       /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
Certificate serial:       0399
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
Manifest number:          0391
Signing time:             Sun 25 Jan 2026 00:00:00 +0000
Manifest this update:     Sun 25 Jan 2026 00:00:00 +0000
Manifest next update:     Sun 01 Feb 2026 00:00:00 +0000
Files and hashes:         1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: wadsvNEUJxEhRkqHSFN00EjHI8djNsuC/xdvl/N7e7w=)
                          2: A05195B4633011ED9122442CC4F9AE02.roa (hash: j7aoei+ek1gcLQq8wVfrfWk2y1zauvGzuHEFdrbSbVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl
                          rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91382E4, serialNumber=BE1833CA01425CEF475945F199989E6543B31E62
        Validity
            Not Before: Jan 25 00:00:00 2026 GMT
            Not After : Feb  1 00:00:00 2026 GMT
        Subject: CN=69755d00-8af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3b:03:71:5b:28:fb:69:69:81:80:cc:49:4c:
                    82:8d:2f:24:83:5d:0c:3d:da:8f:d8:2e:2c:e9:62:
                    e4:29:4d:05:c1:79:2e:fe:d5:8e:50:79:fe:c3:5c:
                    c6:d2:f2:a8:1b:ba:63:7b:66:b6:0a:88:e9:ea:62:
                    98:8d:80:c0:71:f5:a6:0a:49:0a:49:f6:6f:35:21:
                    0f:32:78:36:fe:9c:95:d1:38:b9:59:88:98:f7:49:
                    c2:36:c8:66:1c:26:c6:6e:86:73:79:69:fd:17:8e:
                    d5:7b:a9:a2:bd:29:71:0b:38:8a:48:cb:e8:fb:dd:
                    35:d0:46:84:e0:35:0a:38:4d:a2:c9:f5:97:5e:67:
                    3d:d7:dc:57:d3:54:7d:a9:0e:ab:f9:fd:af:61:60:
                    15:e5:54:70:7a:fe:7e:74:66:ee:77:0b:b6:ab:4f:
                    84:58:27:3c:cc:25:d9:cf:c3:48:ff:de:80:01:5f:
                    03:13:9c:2f:c6:18:0d:56:ae:b1:a0:b5:e6:02:dd:
                    0e:fb:24:0d:22:4b:f3:b3:31:77:7d:6f:cc:eb:5c:
                    eb:a4:b3:a5:c2:91:20:a4:b5:3c:e6:9d:cd:81:f6:
                    af:0a:04:de:dd:6b:7f:0d:67:ba:00:d1:d4:ae:ce:
                    e6:99:be:09:74:6a:a1:b5:ce:76:e0:ea:b8:e8:7c:
                    16:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A6:9A:63:C8:C1:C5:BC:B1:A2:CB:74:07:6C:F5:62:48:55:44:DB
            X509v3 Authority Key Identifier:
                keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0b:77:ed:2c:8c:1c:ed:e0:fc:1f:ac:0f:de:d3:72:f5:44:
         09:13:d5:7d:db:d2:ea:5d:4e:8c:66:fd:e7:8c:d5:7c:2a:8c:
         28:e4:6e:14:08:ea:97:98:75:20:11:97:65:96:fb:2a:29:f1:
         f3:dd:5a:cf:5b:9b:19:c2:63:28:47:0f:6c:59:c0:4d:bd:ab:
         6f:24:a4:11:7d:5f:29:9c:07:87:d6:ad:41:2e:42:b6:2b:6e:
         2f:c1:6d:38:16:a4:c8:03:53:d8:22:a7:4c:88:ed:fb:a1:fe:
         4d:96:05:b8:9c:f0:40:6e:7a:30:96:b8:87:18:c6:19:fa:59:
         56:58:ba:b5:aa:f1:ca:05:8d:8b:fe:56:aa:49:b9:79:39:85:
         7f:3c:b5:2d:4c:33:22:0b:58:d8:e5:dc:e0:eb:28:d2:92:6e:
         7f:85:70:c6:81:07:66:23:b0:a2:a3:f2:cc:55:5d:64:c9:e8:
         73:e9:7f:40:02:0a:1c:a3:2a:ef:c7:42:7b:9a:cb:74:47:52:
         9b:26:b0:e9:a3:d9:6f:7e:b8:5e:1b:bd:9d:4f:5a:d9:21:ca:
         e8:a5:57:1a:e1:dd:3f:c1:d3:1e:1d:43:0b:72:1f:d9:6b:08:
         97:81:90:79:2c:cf:52:0f:cb:6d:9a:d9:b3:93:4a:bf:86:43:
         87:4b:8b:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgyRTQxMTAvBgNVBAUTKEJFMTgzM0NBMDE0MjVDRUY0NzU5NDVGMTk5OTg5RTY1
NDNCMzFFNjIwHhcNMjYwMTI1MDAwMDAwWhcNMjYwMjAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTc1NWQwMC04YWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4TsDcVso+2lpgYDMSUyCjS8kg10MPdqP2C4s6WLkKU0FwXku/tWOUHn+w1zG
0vKoG7pje2a2Cojp6mKYjYDAcfWmCkkKSfZvNSEPMng2/pyV0Ti5WYiY90nCNshm
HCbGboZzeWn9F47Ve6mivSlxCziKSMvo+9010EaE4DUKOE2iyfWXXmc919xX01R9
qQ6r+f2vYWAV5VRwev5+dGbudwu2q0+EWCc8zCXZz8NI/96AAV8DE5wvxhgNVq6x
oLXmAt0O+yQNIkvzszF3fW/M61zrpLOlwpEgpLU85p3NgfavCgTe3Wt/DWe6ANHU
rs7mmb4JdGqhtc524Oq46HwWTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6mmmPI
wcW8saLLdAds9WJIVUTbMB8GA1UdIwQYMBaAFL4YM8oBQlzvR1lF8ZmYnmVDsx5i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODJFNC8yMzZGNDA1NEQx
MTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hPOUhXVVh4bVppZVpVT3pI
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZoZ3p5Z0ZDWE85SFdVWHhtWmllWlVPekhtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODJFNC8yMzZGNDA1NEQxMTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hP
OUhXVVh4bVppZVpVT3pIbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCxC3ftLIwc7eD8H6wP3tNy9UQJE9V929LqXU6MZv3njNV8Kowo5G4U
COqXmHUgEZdllvsqKfHz3VrPW5sZwmMoRw9sWcBNvatvJKQRfV8pnAeH1q1BLkK2
K24vwW04FqTIA1PYIqdMiO37of5NlgW4nPBAbnowlriHGMYZ+llWWLq1qvHKBY2L
/laqSbl5OYV/PLUtTDMiC1jY5dzg6yjSkm5/hXDGgQdmI7Cio/LMVV1kyehz6X9A
Agocoyrvx0J7mst0R1KbJrDpo9lvfrheG72dT1rZIcropVca4d0/wdMeHUMLch/Z
awiXgZB5LM9SD8ttmtmzk0q/hkOHS4sl
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:30:20 2026 by rpki-client