This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File:                     4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier:          nmxNHCQzmVNHfOwVPqRKE36qZ3dxHsN8BTrqBs9rqlU=
Subject key identifier:   A1:44:9B:78:B4:FF:F3:96:F0:74:59:DD:44:3A:ED:45:37:55:7C:8C
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer:       /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial:       3635
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number:          35AF
Signing time:             Sat 24 Jan 2026 14:29:12 +0000
Manifest this update:     Sat 24 Jan 2026 14:29:11 +0000
Manifest next update:     Sat 31 Jan 2026 14:29:11 +0000
Files and hashes:         1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: 2DsWHYJG1jwC97+xcacROdTkM147pkSlrZ7y9Q+8bqU=)
                          2: 524236EE6B5711F09CFE4572C4F9AE02.roa (hash: OFHGfo0QwzXyiL7GOwEa2vVlpzbgLwoHGG7P2JsxqIY=)
                          3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: GQiRmYNBeSXKrpj5tl9WCP7+ZUXAlVJOpyyBRx0JAi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
                          rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13877 (0x3635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
        Validity
            Not Before: Jan 24 14:29:11 2026 GMT
            Not After : Jan 31 14:29:11 2026 GMT
        Subject: CN=6974d737-783a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:d6:e9:db:c7:a2:c3:a1:69:30:68:dc:7d:
                    78:9b:d3:06:76:fa:2f:97:c9:fa:29:82:d5:d1:27:
                    80:c9:55:d7:bb:0f:4d:f8:e6:26:2e:25:02:3a:ed:
                    28:18:29:7e:32:8b:94:39:50:92:45:46:0c:28:eb:
                    79:a2:97:fb:c5:23:6b:0e:1e:3b:f6:a0:78:96:31:
                    ec:2d:b1:62:3c:45:0d:21:26:f3:e3:5b:57:97:41:
                    ed:cc:c7:3e:5d:72:2c:0c:b1:8e:1c:57:fc:ad:e0:
                    c3:83:7a:74:60:45:bf:f0:47:94:27:65:2b:db:cb:
                    97:77:3f:03:53:c2:2f:a2:75:ad:fa:9d:91:0d:71:
                    1d:b2:d0:25:12:0a:79:94:14:d3:12:46:d3:f3:2c:
                    7e:ca:05:07:76:f5:53:6a:b9:5d:2c:a3:13:33:69:
                    4c:19:17:2d:bb:47:c2:65:23:e9:64:f5:00:67:88:
                    64:d7:f1:4a:04:1c:00:2a:5b:19:39:61:e4:e5:11:
                    6d:9f:fa:65:a9:06:84:d9:9c:17:2f:ba:65:65:df:
                    8f:f5:c9:d7:99:b5:5b:5a:c0:0c:8c:24:f3:7c:45:
                    f2:1f:2d:c1:2c:2b:14:97:bf:ab:e8:72:15:67:63:
                    ee:49:c8:18:13:d0:fe:af:6e:01:45:2d:af:13:e6:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:44:9B:78:B4:FF:F3:96:F0:74:59:DD:44:3A:ED:45:37:55:7C:8C
            X509v3 Authority Key Identifier:
                keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:02:e7:8c:1b:2a:02:6e:33:36:e1:24:d7:b2:d2:5a:15:dd:
         24:b5:be:2c:94:1b:dd:5b:c1:17:58:ec:9d:cd:d6:b7:25:fe:
         00:e5:87:a8:fe:d8:b3:6d:3f:6e:af:bc:e6:19:61:44:05:03:
         b7:39:05:ce:e3:e5:dd:4a:0a:c2:cd:c9:dc:76:e7:12:6e:0b:
         b8:74:87:d3:d9:c0:0a:14:44:d8:44:0f:0f:1a:ca:eb:4c:b8:
         d0:8f:40:1b:16:52:46:70:15:0a:3d:e1:cb:ed:dd:91:89:d9:
         d0:2b:f8:fb:db:f3:f3:54:58:b6:6b:03:77:f9:87:96:2c:32:
         8a:ac:d0:84:28:6e:97:3a:d7:c1:3a:dc:e0:bf:f2:72:a6:79:
         be:73:b6:df:e8:0f:ab:5c:3a:1e:45:03:97:e6:ee:4d:15:22:
         4b:c0:65:e8:64:96:a8:10:31:98:ce:4f:8d:5a:46:e9:1d:9e:
         e8:c4:a7:e1:8a:5c:60:4d:87:3e:8c:84:fb:3a:03:83:15:be:
         84:99:a4:92:5a:3e:88:13:7e:64:83:8e:66:d2:71:4e:4c:f9:
         db:b1:d3:65:8e:5d:58:43:82:4b:27:26:a6:a2:e3:a1:f5:b4:
         bf:a1:44:5a:08:6a:55:35:9a:f4:84:d5:3e:db:e0:d4:f4:20:
         9d:ba:0f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:46 2026 by rpki-client