This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
File:                     VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json)
Hash identifier:          BKClg5cV/FcvIU6zMZ4ndvnhnTNyFA+GpwBJSFH3RQk=
Subject key identifier:   A1:8A:35:B4:D6:5A:E8:CC:7A:6E:F2:7E:1A:97:68:46:B4:5C:A5:A5
Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
Certificate issuer:       /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Certificate serial:       3500
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
Manifest number:          3500
Signing time:             Sat 24 Jan 2026 14:54:58 +0000
Manifest this update:     Sat 24 Jan 2026 14:54:58 +0000
Manifest next update:     Sat 31 Jan 2026 14:54:58 +0000
Files and hashes:         1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: 5oT9PaR5qDB4T5x61Rd7AMUJWiF7jWd/KCoADFQ5qcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
                          rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13568 (0x3500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
        Validity
            Not Before: Jan 24 14:54:58 2026 GMT
            Not After : Jan 31 14:54:58 2026 GMT
        Subject: CN=6974dd42-b8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:c0:4d:ce:45:2c:62:44:ab:ca:71:b2:0c:
                    3e:03:53:c3:03:04:03:72:46:0d:37:31:2b:39:42:
                    b3:c8:68:b1:fe:b8:ce:f0:9a:38:46:6c:32:95:7a:
                    3c:b8:39:be:d3:f1:7b:8b:ca:6b:bd:e6:6d:70:03:
                    c0:ee:ef:64:30:dd:02:9d:70:d4:30:3c:90:25:3d:
                    ce:90:1f:1b:25:b8:c3:d2:ff:48:2d:ed:3b:49:f0:
                    b1:ec:31:af:0e:74:ed:af:54:40:32:e7:14:a7:60:
                    9d:7e:6f:a1:8f:f1:19:ee:62:0b:20:3c:7a:32:a6:
                    60:50:95:72:1a:6d:1d:cc:bd:e6:18:77:9b:88:e2:
                    46:cd:10:9f:5a:0c:a3:2e:21:1d:5e:76:8c:0c:da:
                    27:37:bf:10:2c:0c:c9:05:69:b3:88:e6:6a:11:bf:
                    f8:5a:ed:db:14:34:7a:a4:99:23:82:e7:93:41:d7:
                    21:8d:c4:d8:d4:ab:19:0a:90:de:ea:2b:01:ee:f1:
                    c0:a2:ca:a6:80:d3:97:71:b3:e5:63:5a:02:8d:c7:
                    9b:71:2d:16:74:fd:49:ea:c2:9c:1d:3e:71:6f:c7:
                    00:4f:e1:bd:4a:52:f0:63:bb:3e:2f:dc:28:50:f3:
                    1d:e9:6f:e8:fe:eb:09:d2:00:04:39:15:d4:8b:0f:
                    de:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8A:35:B4:D6:5A:E8:CC:7A:6E:F2:7E:1A:97:68:46:B4:5C:A5:A5
            X509v3 Authority Key Identifier:
                keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:b1:40:4a:18:27:36:00:ad:73:81:70:a7:50:43:2b:ab:
         ed:9b:57:28:3e:bc:62:84:cb:fd:f1:9d:c1:ed:c9:96:fa:83:
         bd:9b:f4:45:28:1f:9b:97:2f:c1:51:ca:18:e6:52:67:12:b9:
         64:ea:e0:91:73:fa:2b:cc:51:1f:27:5a:7a:b7:a8:50:6e:8a:
         03:36:16:08:4b:b5:bb:03:6d:ab:f9:c0:e3:7f:d6:b4:9e:99:
         0c:5d:9c:ef:3b:15:c9:45:b7:9d:ea:b7:00:4f:10:2c:36:d6:
         5a:8f:96:ef:0c:bb:ea:ae:e7:55:50:2a:4d:c9:3d:cc:e4:7a:
         a9:da:3b:16:a2:73:9b:04:95:f8:35:f7:59:9d:76:b3:1d:48:
         75:ce:c1:50:e0:6c:89:8d:8d:9e:7c:88:e5:25:b7:50:c6:25:
         f9:8f:8f:fe:50:0a:f5:ca:4f:f1:9c:3d:b8:6f:1e:07:79:c4:
         64:3c:70:a5:5d:f6:c1:ad:6b:87:0a:c9:0b:77:cb:83:9a:ac:
         02:f3:14:78:6c:5c:7a:0a:2f:45:ac:61:fc:f7:c3:16:28:cb:
         d5:b2:62:18:8f:33:b1:4e:19:b5:26:f5:54:d8:97:17:e4:b0:
         e3:d1:c5:fc:ac:31:b1:5d:e0:f0:27:10:25:8d:97:69:39:6b:
         e7:b8:c5:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF
MzBEMDFGNjQwHhcNMjYwMTI0MTQ1NDU4WhcNMjYwMTMxMTQ1NDU4WjAYMRYwFAYD
VQQDDA02OTc0ZGQ0Mi1iOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz2vATc5FLGJEq8pxsgw+A1PDAwQDckYNNzErOUKzyGix/rjO8Jo4RmwylXo8
uDm+0/F7i8prveZtcAPA7u9kMN0CnXDUMDyQJT3OkB8bJbjD0v9ILe07SfCx7DGv
DnTtr1RAMucUp2Cdfm+hj/EZ7mILIDx6MqZgUJVyGm0dzL3mGHebiOJGzRCfWgyj
LiEdXnaMDNonN78QLAzJBWmziOZqEb/4Wu3bFDR6pJkjgueTQdchjcTY1KsZCpDe
6isB7vHAosqmgNOXcbPlY1oCjcebcS0WdP1J6sKcHT5xb8cAT+G9SlLwY7s+L9wo
UPMd6W/o/usJ0gAEORXUiw/erQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGKNbTW
WujMem7yfhqXaEa0XKWlMB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE
OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI
MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0
MFU4UkhKRDM5cmZqRFFIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCS3bFAShgnNgCtc4Fwp1BDK6vtm1coPrxihMv98Z3B7cmW+oO9m/RF
KB+bly/BUcoY5lJnErlk6uCRc/orzFEfJ1p6t6hQbooDNhYIS7W7A22r+cDjf9a0
npkMXZzvOxXJRbed6rcATxAsNtZaj5bvDLvqrudVUCpNyT3M5Hqp2jsWonObBJX4
NfdZnXazHUh1zsFQ4GyJjY2efIjlJbdQxiX5j4/+UAr1yk/xnD24bx4HecRkPHCl
XfbBrWuHCskLd8uDmqwC8xR4bFx6Ci9FrGH898MWKMvVsmIYjzOxThm1JvVU2JcX
5LDj0cX8rDGxXeDwJxAljZdpOWvnuMUe
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:28 2026 by rpki-client