This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
File:                     vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json)
Hash identifier:          BQSb88pMCUL0q6Naw/JFJ6pHliFPWgmwMcaZOt+p9fA=
Subject key identifier:   A2:F8:92:3A:93:F3:DD:92:39:DC:CC:0F:62:AF:87:05:C3:BE:46:D0
Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
Certificate issuer:       /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
Manifest number:          0110
Signing time:             Sun 25 Jan 2026 04:14:29 +0000
Manifest this update:     Sun 25 Jan 2026 04:14:29 +0000
Manifest next update:     Sun 01 Feb 2026 04:14:29 +0000
Files and hashes:         1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: 40177yYKdnpB03MAEZNK2FzJ+wvE3nRfprXuSUarTqc=)
                          2: DEF27D12B32111F0B1CD4673C4F9AE02.roa (hash: KSK87NNXC+G0msQF41JpGQoKY5onOaTJMTRkPWJH/M0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl
                          rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
        Validity
            Not Before: Jan 25 04:14:29 2026 GMT
            Not After : Feb  1 04:14:29 2026 GMT
        Subject: CN=697598a5-833f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c8:f0:25:e6:1d:3d:8e:13:7e:3d:ac:99:94:
                    0a:9f:7f:de:05:7b:20:95:7c:f8:f2:27:d3:a8:04:
                    f0:b6:91:bf:68:18:58:cc:dc:d6:62:08:60:2c:51:
                    96:cc:89:9e:3f:5e:44:d9:ca:97:03:0d:7a:8e:7a:
                    04:54:87:60:8d:ca:12:2e:85:b5:61:6c:51:23:1b:
                    ca:1a:61:44:7d:d8:95:e1:39:94:38:f9:3e:4c:5d:
                    e5:8a:55:cd:78:61:f8:00:5e:2f:5d:a5:f7:1b:70:
                    06:0d:37:5a:6d:d4:1f:60:93:58:e4:8a:a4:01:9f:
                    14:37:50:7f:36:65:74:f5:79:8d:cc:c4:66:8e:18:
                    ec:b4:b1:34:12:05:8e:31:e1:d7:b7:49:96:9d:c1:
                    2e:8b:3b:b3:aa:53:e8:91:37:cc:cf:63:49:2f:40:
                    62:87:61:df:f5:29:81:af:69:65:93:c0:aa:02:31:
                    98:34:ea:49:7b:f1:40:f7:be:2f:7d:13:ad:27:bf:
                    a4:90:e7:64:d5:2f:50:2e:e4:d1:e2:f0:04:fb:01:
                    38:2f:a7:00:26:c1:da:d2:d0:db:5e:bd:ec:d9:a4:
                    be:e6:ac:50:bf:bb:16:7e:49:29:01:de:67:d5:49:
                    24:dd:77:ff:30:9e:2e:f4:7f:65:9c:a1:23:c7:18:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:92:3A:93:F3:DD:92:39:DC:CC:0F:62:AF:87:05:C3:BE:46:D0
            X509v3 Authority Key Identifier:
                keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6d:d1:b0:bd:a3:31:43:2f:54:21:bf:bc:56:a4:f6:c0:2c:
         b7:07:83:38:16:b4:43:9d:a2:9a:aa:75:c7:41:ab:9d:d6:b2:
         3e:ba:a8:88:d9:50:3f:ab:1f:97:fa:ac:ce:ba:d2:51:2d:34:
         04:7b:4f:74:b6:73:44:b7:18:c2:c2:8f:48:ca:44:29:40:db:
         5d:c5:7f:e9:dd:bc:71:f6:6c:a9:fb:b9:f4:27:f7:b1:6e:0d:
         bb:a9:54:3e:a2:ff:27:57:63:86:99:d7:52:77:21:ea:46:17:
         9c:88:87:ee:62:84:88:0c:76:6b:ed:13:ca:f8:56:7a:ae:c5:
         1c:be:15:2b:55:fb:32:63:0c:ba:5c:13:28:2f:ac:86:59:9b:
         7e:1a:33:ca:99:f7:1c:82:ce:1b:cb:16:c1:fc:2e:e7:c7:b8:
         ef:78:5e:fc:ff:c5:84:b2:8d:20:f6:8f:bf:07:ad:99:39:90:
         ec:85:77:3e:8a:69:c1:d0:8f:ad:34:2c:ea:28:79:8e:b5:75:
         37:23:3d:9b:da:94:d0:ee:d8:57:61:d7:57:72:5e:e7:df:1e:
         83:55:61:3c:37:8a:a5:77:7c:ee:53:c3:7d:30:0b:44:3f:c5:
         11:25:fe:4c:01:32:15:54:d4:1e:03:fd:b5:e7:54:a1:f9:2a:
         7a:40:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:16 2026 by rpki-client