This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
File:                     vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json)
Hash identifier:          PV03378+3BzSjI/Ey62f1fAEPQl2s+RaI5Sb2H+ase0=
Subject key identifier:   D8:EA:DF:5C:A1:AB:3A:A0:EC:FE:A8:BA:7E:BD:CE:7D:B9:05:31:43
Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
Certificate issuer:       /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
Manifest number:          0122
Signing time:             Sun 25 Jan 2026 03:59:04 +0000
Manifest this update:     Sun 25 Jan 2026 03:59:03 +0000
Manifest next update:     Sun 01 Feb 2026 03:59:03 +0000
Files and hashes:         1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: DecCrD5OQw8qldUHPnnopMdUcCTsa+szMXhAFt6CcdE=)
                          2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: 9uEwzB8ckH0lupP2vcJh2pZkJ61ZIv0842o4n0sbwyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl
                          rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
        Validity
            Not Before: Jan 25 03:59:03 2026 GMT
            Not After : Feb  1 03:59:03 2026 GMT
        Subject: CN=69759508-6479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:8e:3a:e0:57:32:fb:9f:84:5e:df:18:68:
                    f9:d6:4e:05:cb:49:ce:cb:87:04:63:51:c9:cb:01:
                    c1:2d:1a:53:38:34:e9:fe:77:9b:c5:c1:fa:43:9e:
                    0b:1b:85:93:6c:74:f4:15:8c:76:59:2b:9e:ee:c9:
                    51:f1:81:6a:92:aa:d8:96:18:28:85:89:f2:4e:ad:
                    e9:f2:c2:a4:9e:f4:f9:ea:5d:a3:3e:57:84:02:39:
                    09:17:99:ec:46:9f:2c:b3:14:25:2d:06:ba:05:d9:
                    4b:1e:60:aa:e2:21:06:8f:57:c9:10:88:c6:52:44:
                    38:0f:06:70:1c:a1:ea:7b:16:25:dd:f7:d6:85:38:
                    3c:93:91:a1:38:1a:07:40:5e:08:14:a8:9e:df:94:
                    1e:64:78:ed:de:92:d3:7e:9b:13:23:c5:34:be:48:
                    67:d2:de:43:69:41:0d:58:86:b9:3d:ed:0a:25:ac:
                    aa:b9:11:d0:fb:a8:d6:f8:64:50:19:fd:8e:21:fb:
                    c2:e2:06:93:13:65:d0:2a:79:42:0a:25:4b:2b:7c:
                    b4:3d:b2:b9:02:86:33:49:65:fc:5b:ab:2c:3e:95:
                    d3:22:a4:3d:a3:2c:e4:1d:16:97:98:53:1e:01:c5:
                    dc:e0:50:7e:55:51:0e:e9:54:ae:7e:cd:40:c9:66:
                    e8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EA:DF:5C:A1:AB:3A:A0:EC:FE:A8:BA:7E:BD:CE:7D:B9:05:31:43
            X509v3 Authority Key Identifier:
                keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:40:e0:e3:a6:a0:35:b4:37:b3:00:e4:ff:dd:67:cb:40:97:
         b8:e5:73:a2:6b:7c:f5:5b:f8:e3:f3:d3:7c:fe:e9:45:ee:c2:
         94:c6:a6:06:1c:c1:6a:34:45:e5:e9:ac:52:72:73:f5:51:8e:
         7e:ef:c9:f6:86:0b:0b:9a:8e:71:34:43:da:e9:90:48:6d:ef:
         1d:f5:30:a5:fb:6e:85:41:49:81:7d:b6:7b:ee:61:fb:56:45:
         f4:92:7e:ac:3d:42:c1:60:59:56:f6:7e:f6:97:45:4b:d0:48:
         0d:8a:0f:38:af:fb:f1:47:ab:86:cf:f2:9d:f1:33:42:fb:40:
         25:ed:3f:f9:30:ea:8b:64:2b:fa:27:f0:3d:3f:20:08:a5:f3:
         84:c0:5c:b1:48:b1:bd:32:76:76:f2:4a:f4:14:03:5d:8d:78:
         9b:e9:27:58:06:94:b8:96:97:19:f0:a5:69:4a:25:d1:aa:85:
         c8:35:aa:fc:5d:fe:ab:01:ab:b4:3d:31:9e:4d:78:58:f8:66:
         0f:6f:83:b8:c7:31:f7:17:dd:a6:6c:ea:c5:9c:39:b7:31:94:
         78:49:0c:cf:e6:ed:a2:01:71:7b:7c:e6:88:e2:d0:60:6a:c4:
         0d:6d:68:e0:32:5b:9f:a2:10:4d:7f:fc:81:92:17:46:a7:cd:
         de:d4:8c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:10:35 2026 by rpki-client