This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft
File:                     a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft (raw, json)
Hash identifier:          C7QkU+CMAR9kN+Y7+VWqrh8SugbNrf/p47LU7WeDOJ8=
Subject key identifier:   70:9B:49:B9:DD:70:96:0F:BB:E9:83:C2:B0:D3:9C:C8:B7:E2:85:E8
Authority key identifier: 6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C
Certificate issuer:       /CN=A9152705/serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft
Manifest number:          44
Signing time:             Fri 23 Jan 2026 06:24:22 +0000
Manifest this update:     Fri 23 Jan 2026 06:24:21 +0000
Manifest next update:     Fri 30 Jan 2026 06:24:21 +0000
Files and hashes:         1: a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl (hash: NYxjOalZ7jj3feEOulvkiFvDS62gJh01Ic6lHHdybc0=)
                          2: 25CC4486C5B811F092EE2F29C4F9AE02.roa (hash: j0WmWd/YQ/ExSA0i6w+NpW9jRurtYn/dmfUGXmMo7EU=)
                          3: D5E5F60E92BF11F0BA90D823C4F9AE02.roa (hash: r5MD1RHeYrmwx+4qL0Z/lL7AllWPwSQqqeUriNLY+mo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl
                          rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152705, serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C
        Validity
            Not Before: Jan 23 06:24:21 2026 GMT
            Not After : Jan 30 06:24:21 2026 GMT
        Subject: CN=69731416-872c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:30:9c:d4:37:44:e5:58:0f:c0:7d:3a:fe:
                    a2:58:ae:23:cb:80:e9:5f:4d:f0:96:35:a2:73:83:
                    45:a1:65:19:37:69:0f:8a:2a:a2:a3:99:58:2f:3f:
                    0e:f7:81:b9:d0:3b:de:e3:01:00:56:0e:fa:11:03:
                    a8:3e:52:32:92:b1:14:ad:e5:3a:d5:13:0f:c1:71:
                    11:53:3f:e8:5b:2f:67:77:84:fc:91:6e:ad:e1:e2:
                    62:6e:b4:7f:7f:32:da:f5:4c:93:db:e5:7f:7d:ce:
                    19:d4:2c:11:98:00:8c:27:b4:93:2f:fd:cd:18:2d:
                    c3:a4:18:0f:d4:f8:c7:69:09:7e:fd:f2:49:cf:5e:
                    48:80:14:17:4f:c8:90:c4:d3:32:e7:e3:f4:cc:70:
                    56:c5:19:fe:1e:0f:8c:d3:b9:e0:83:c2:d6:6b:b4:
                    b8:fd:ac:52:9a:6d:a3:5a:e3:dc:0f:fe:b8:aa:b6:
                    9f:39:f5:80:81:fc:b8:86:b3:64:39:b6:b6:de:86:
                    f4:bf:56:6c:e2:99:2c:de:30:c7:05:84:78:70:a1:
                    b3:96:52:9f:42:16:6f:de:5a:a8:25:37:42:f8:f6:
                    2b:4e:0a:d7:27:47:f1:73:13:67:66:0c:24:f3:1e:
                    75:ff:32:8a:f8:fd:c1:40:c2:7a:46:08:14:3d:c4:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9B:49:B9:DD:70:96:0F:BB:E9:83:C2:B0:D3:9C:C8:B7:E2:85:E8
            X509v3 Authority Key Identifier:
                keyid:6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:f6:59:38:c5:43:cf:5f:05:e4:7f:f5:82:bb:5f:64:7c:
         62:1e:05:bc:65:11:75:da:ab:fd:a2:67:ef:50:c0:cb:f1:5b:
         3d:d9:4a:66:35:9c:0d:ca:00:de:26:06:97:3e:fb:71:8b:4d:
         43:af:3a:ca:61:55:78:f1:45:1b:7c:51:d8:69:ef:a3:a4:fc:
         3f:a4:c1:50:0b:be:f1:15:0b:e3:0d:19:68:ad:10:5f:46:e8:
         8b:18:86:47:cb:31:cc:55:05:0d:3f:58:dd:42:be:74:45:56:
         86:8f:a4:dc:95:67:85:9a:e3:cf:1d:06:f8:55:20:4f:2a:18:
         79:96:ba:af:a9:11:cc:b9:9f:c5:61:27:df:88:f0:f2:1f:8b:
         3c:08:81:a0:46:30:2f:2a:f2:28:e2:a5:1b:57:cb:20:2d:91:
         1e:6a:73:7f:9b:80:c7:e4:82:16:6c:75:3b:a3:a9:43:09:54:
         56:48:74:52:dd:16:b9:35:f9:0b:d0:0a:75:75:5a:c6:be:3a:
         37:49:b4:19:e0:81:c2:c9:42:22:fd:02:9a:c7:18:f6:56:35:
         84:15:79:74:13:7f:12:23:49:f3:41:5e:21:7b:6c:88:60:15:
         b9:04:12:19:22:ac:e3:34:c1:63:fe:59:4c:da:31:9a:bc:93:
         68:65:cb:47
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MjcwNTExMC8GA1UEBRMoNkJFQkMwMjEyRDZGRUQ4MzIxQzhENkYwQzVDOUM0QTY2
RUQ3MTE3QzAeFw0yNjAxMjMwNjI0MjFaFw0yNjAxMzAwNjI0MjFaMBgxFjAUBgNV
BAMMDTY5NzMxNDE2LTg3MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBJDCc1DdE5VgPwH06/qJYriPLgOlfTfCWNaJzg0WhZRk3aQ+KKqKjmVgvPw73
gbnQO97jAQBWDvoRA6g+UjKSsRSt5TrVEw/BcRFTP+hbL2d3hPyRbq3h4mJutH9/
Mtr1TJPb5X99zhnULBGYAIwntJMv/c0YLcOkGA/U+MdpCX798knPXkiAFBdPyJDE
0zLn4/TMcFbFGf4eD4zTueCDwtZrtLj9rFKabaNa49wP/riqtp859YCB/LiGs2Q5
trbehvS/VmzimSzeMMcFhHhwobOWUp9CFm/eWqglN0L49itOCtcnR/FzE2dmDCTz
HnX/Mor4/cFAwnpGCBQ9xB23AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcJtJud1w
lg+76YPCsNOcyLfihegwHwYDVR0jBBgwFoAUa+vAIS1v7YMhyNbwxcnEpm7XEXww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyNzA1LzYyNzYwRDI2OTJC
RjExRjA5OUFDMTMyM0M0RjlBRTAyL2EtdkFJUzF2N1lNaHlOYnd4Y25FcG03WEVY
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYS12QUlTMXY3WU1oeU5id3hjbkVwbTdYRVh3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy
NzA1LzYyNzYwRDI2OTJCRjExRjA5OUFDMTMyM0M0RjlBRTAyL2EtdkFJUzF2N1lN
aHlOYnd4Y25FcG03WEVYdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAh89lk4xUPPXwXkf/WCu19kfGIeBbxlEXXaq/2iZ+9QwMvxWz3ZSmY1
nA3KAN4mBpc++3GLTUOvOsphVXjxRRt8Udhp76Ok/D+kwVALvvEVC+MNGWitEF9G
6IsYhkfLMcxVBQ0/WN1CvnRFVoaPpNyVZ4Wa488dBvhVIE8qGHmWuq+pEcy5n8Vh
J9+I8PIfizwIgaBGMC8q8ijipRtXyyAtkR5qc3+bgMfkghZsdTujqUMJVFZIdFLd
Frk1+QvQCnV1Wsa+OjdJtBnggcLJQiL9AprHGPZWNYQVeXQTfxIjSfNBXiF7bIhg
FbkEEhkirOM0wWP+WUzaMZq8k2hly0c=
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:56 2026 by rpki-client