This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
File:                     VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json)
Hash identifier:          jiMqj3dXGm2n0rSEQj+5zonNV8hOTw7yadJBWVV84iE=
Subject key identifier:   C1:B5:A4:74:E1:B6:E4:54:F2:F9:5C:E7:8C:D2:0C:84:73:3D:81:53
Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E
Certificate issuer:       /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
Certificate serial:       0618
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
Manifest number:          0616
Signing time:             Sat 24 Jan 2026 22:05:07 +0000
Manifest this update:     Sat 24 Jan 2026 22:05:06 +0000
Manifest next update:     Sat 31 Jan 2026 22:05:06 +0000
Files and hashes:         1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: 3XkuiY6/08fJzRGoeB9PmTQr4f/5+GJWlmtI3jCBhWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl
                          rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B878, serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
        Validity
            Not Before: Jan 24 22:05:06 2026 GMT
            Not After : Jan 31 22:05:06 2026 GMT
        Subject: CN=69754213-d9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f4:fc:84:de:40:75:8f:05:c8:10:30:8b:ed:
                    b7:5c:0d:f0:ce:c4:01:4e:a0:3e:91:7c:50:5f:3a:
                    1c:90:ed:3f:a3:99:72:50:47:3a:15:34:dc:59:bc:
                    9a:96:ba:6b:36:4d:aa:73:a1:f7:bb:fd:80:e4:45:
                    ab:7a:73:0b:8e:9b:09:8c:60:67:c7:8b:8b:66:7f:
                    e2:1d:e2:c4:62:38:6f:d3:91:15:92:0c:17:c2:42:
                    55:65:8b:a1:9a:54:2a:3d:b8:65:a2:8b:8d:74:bb:
                    d0:bd:6a:97:b0:da:9a:b9:d9:10:ad:49:d4:a9:09:
                    96:00:c5:19:6f:1a:5f:99:9c:b4:67:90:cc:81:7e:
                    7c:44:26:13:cd:09:57:e3:83:22:c4:16:4d:ba:73:
                    99:b2:5a:10:94:3c:e6:09:76:d5:3f:05:25:38:13:
                    38:9a:83:b0:08:93:87:90:d8:e4:d5:21:19:e2:f2:
                    20:d5:e2:1f:23:21:34:f2:fb:8e:4a:77:7f:c8:09:
                    09:7e:91:eb:77:e8:19:4f:e7:e6:b1:66:f3:b2:7b:
                    c7:87:85:e5:20:69:5f:7e:6c:82:a2:18:d6:e8:79:
                    29:22:b6:12:a4:20:93:71:72:0d:47:12:c5:de:92:
                    9f:50:ca:fd:e8:a3:b8:af:c7:67:3f:85:55:b6:d2:
                    9c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B5:A4:74:E1:B6:E4:54:F2:F9:5C:E7:8C:D2:0C:84:73:3D:81:53
            X509v3 Authority Key Identifier:
                keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4c:89:f9:52:5c:d0:97:35:07:62:84:43:6f:96:b2:d9:91:
         3b:1a:84:08:9e:0f:a0:43:41:0d:ef:e3:59:93:9c:66:55:2c:
         26:7a:d2:02:0f:0f:60:11:f2:15:14:55:f7:6b:e0:15:6d:b8:
         e3:33:41:a9:5d:9d:54:a3:5a:b2:0d:10:d7:0b:9e:80:f8:59:
         ad:db:c1:3c:0e:ef:10:64:36:26:10:86:8d:92:b4:75:47:0e:
         28:ef:2a:bb:76:6c:3f:d5:68:d5:1a:e7:90:1f:cc:2b:92:9d:
         de:47:3d:a2:d7:97:92:94:44:56:a8:76:0b:94:98:95:05:9d:
         b8:1c:b9:42:d3:db:64:e7:e6:a6:08:5b:0c:b0:93:44:4d:82:
         49:0e:80:f3:a6:99:57:82:41:0b:17:c2:a9:15:e5:7a:80:d8:
         8b:94:38:e6:77:9b:f0:ac:e7:d7:58:70:83:82:d9:80:85:5d:
         1b:e6:87:15:6b:12:2f:f7:43:10:21:6d:f2:a0:f5:0e:5d:ba:
         19:95:e8:81:66:86:01:b9:6a:78:2d:61:40:5b:cb:e6:eb:41:
         06:dc:d1:99:18:7b:cf:a9:e4:48:12:ef:dd:6d:5a:a9:d4:80:
         81:8b:64:ec:78:c5:43:9c:63:76:19:02:b7:c0:47:40:04:5b:
         c7:ee:5a:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI4NzgxMTAvBgNVBAUTKDU1RjJFOURCMjgzQ0I0NTlFMjY2NjhGOTIyNEYyNkIz
QTJBNDQ2NEUwHhcNMjYwMTI0MjIwNTA2WhcNMjYwMTMxMjIwNTA2WjAYMRYwFAYD
VQQDDA02OTc1NDIxMy1kOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9/T8hN5AdY8FyBAwi+23XA3wzsQBTqA+kXxQXzockO0/o5lyUEc6FTTcWbya
lrprNk2qc6H3u/2A5EWrenMLjpsJjGBnx4uLZn/iHeLEYjhv05EVkgwXwkJVZYuh
mlQqPbhloouNdLvQvWqXsNqaudkQrUnUqQmWAMUZbxpfmZy0Z5DMgX58RCYTzQlX
44MixBZNunOZsloQlDzmCXbVPwUlOBM4moOwCJOHkNjk1SEZ4vIg1eIfIyE08vuO
Snd/yAkJfpHrd+gZT+fmsWbzsnvHh4XlIGlffmyCohjW6HkpIrYSpCCTcXINRxLF
3pKfUMr96KO4r8dnP4VVttKcnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMG1pHTh
tuRU8vlc54zSDIRzPYFTMB8GA1UdIwQYMBaAFFXy6dsoPLRZ4mZo+SJPJrOipEZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg3OC9CRUQ4MzY2NkNE
MTExMUVCQkM5MzVGMTZDNEY5QUUwMi9WZkxwMnlnOHRGbmlabWo1SWs4bXM2S2tS
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZmTHAyeWc4dEZuaVptajVJazhtczZLa1JrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Qjg3OC9CRUQ4MzY2NkNEMTExMUVCQkM5MzVGMTZDNEY5QUUwMi9WZkxwMnlnOHRG
bmlabWo1SWs4bXM2S2tSazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgTIn5UlzQlzUHYoRDb5ay2ZE7GoQIng+gQ0EN7+NZk5xmVSwmetIC
Dw9gEfIVFFX3a+AVbbjjM0GpXZ1Uo1qyDRDXC56A+Fmt28E8Du8QZDYmEIaNkrR1
Rw4o7yq7dmw/1WjVGueQH8wrkp3eRz2i15eSlERWqHYLlJiVBZ24HLlC09tk5+am
CFsMsJNETYJJDoDzpplXgkELF8KpFeV6gNiLlDjmd5vwrOfXWHCDgtmAhV0b5ocV
axIv90MQIW3yoPUOXboZleiBZoYBuWp4LWFAW8vm60EG3NGZGHvPqeRIEu/dbVqp
1ICBi2TseMVDnGN2GQK3wEdABFvH7lqh
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:58 2026 by rpki-client