This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
File:                     Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft (raw, json)
Hash identifier:          BH0tstkRp/CVhDJ1wRxScx3VEmzs4QG6QCa1vfFNi0c=
Subject key identifier:   09:AD:0D:FB:0C:06:0E:C0:18:70:5C:A3:DB:42:E7:EB:4B:85:17:F1
Authority key identifier: 56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E
Certificate issuer:       /CN=A9171172/serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
Certificate serial:       07E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
Manifest number:          07E3
Signing time:             Sat 24 Jan 2026 20:33:50 +0000
Manifest this update:     Sat 24 Jan 2026 20:33:50 +0000
Manifest next update:     Sat 31 Jan 2026 20:33:50 +0000
Files and hashes:         1: Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl (hash: hY1W7nYPYTdZsl1NBKbwlh1eU/4q7udaWoRncSn+mrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl
                          rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019 (0x7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172, serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
        Validity
            Not Before: Jan 24 20:33:50 2026 GMT
            Not After : Jan 31 20:33:50 2026 GMT
        Subject: CN=69752cae-4c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:3b:94:7a:5c:71:0d:bb:0a:82:21:fc:b4:
                    c8:e3:90:6d:67:62:21:e8:f9:e3:f9:d2:39:c3:d3:
                    ca:2f:80:b3:ab:ef:b2:a1:2d:3d:47:2f:b5:a0:ea:
                    9c:5d:a3:7f:a8:5a:3c:10:0d:9e:8c:cd:8c:c2:0c:
                    22:07:80:eb:69:10:71:74:36:f1:fe:13:dc:ba:08:
                    8c:6e:91:17:25:e1:a4:26:c5:b2:b3:dc:db:b2:68:
                    bb:d0:b3:9b:83:6c:68:8a:bc:d6:39:8e:6b:62:35:
                    8d:c6:de:5b:89:5d:02:2b:30:fa:1e:36:c7:cb:1c:
                    20:ec:2b:de:07:1e:78:c5:c9:28:bd:48:97:a8:85:
                    4c:fd:ca:84:62:c1:9e:2a:b9:b3:88:0f:c2:f9:9e:
                    ef:66:55:ba:8c:7b:57:c8:59:93:ad:77:fc:ab:c3:
                    7f:5e:67:63:fd:d7:e7:05:36:1c:c6:ed:cb:18:80:
                    97:3f:fb:a2:8c:dc:a9:25:5f:61:61:5c:e9:e6:89:
                    d7:25:75:b7:4d:09:5a:bf:ec:00:ad:7a:1a:7a:65:
                    c0:69:e1:a0:c1:38:46:52:4c:93:1b:94:b7:b7:2b:
                    2c:e5:70:d8:1f:2c:cf:c9:d1:b8:77:5f:94:71:67:
                    29:cc:3c:8d:22:45:7b:ee:82:d1:1e:f5:5d:63:65:
                    44:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AD:0D:FB:0C:06:0E:C0:18:70:5C:A3:DB:42:E7:EB:4B:85:17:F1
            X509v3 Authority Key Identifier:
                keyid:56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:41:eb:53:75:63:56:88:89:55:a8:6e:55:5e:52:34:9b:5f:
         74:0b:a1:cd:11:b8:b2:e9:e3:f0:bf:6a:75:51:36:cd:9b:3b:
         9f:0d:4a:44:a8:82:23:16:45:de:a1:29:8c:65:ae:fd:11:c4:
         56:7d:b0:2c:ae:67:6f:43:58:71:8d:f8:f7:ed:7f:74:ad:81:
         f7:d8:23:ff:db:67:3d:87:c0:21:7c:1a:cb:36:15:0b:7c:91:
         87:1a:f3:66:1e:dd:f2:ac:f6:5f:b0:f2:4f:0a:b9:5b:d0:0a:
         a7:0f:64:e8:2b:22:fc:15:23:6e:6c:0e:5d:93:b9:67:07:4f:
         91:4d:69:32:f9:25:5b:38:8e:ad:b5:bc:1b:7a:c1:95:e5:0d:
         e0:19:11:6a:eb:a6:ca:49:13:41:32:04:79:e1:4e:b7:a7:85:
         7e:7d:99:5d:de:91:d1:14:1c:40:a2:b4:bb:36:87:83:1f:1f:
         0a:68:04:6f:87:1b:44:33:97:97:36:12:96:65:47:47:c2:2d:
         ad:4e:b6:9b:8a:8f:cf:0b:ce:21:7a:b7:43:f8:ad:cb:99:6d:
         44:72:d2:78:a7:d3:e8:ac:b6:18:f1:ff:a5:63:59:f3:ff:c3:
         d0:1b:8b:75:c8:bf:b6:99:d2:60:ee:8f:ad:bc:85:c6:d4:fe:
         04:59:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:48 2026 by rpki-client