This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
File:                     V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft (raw, json)
Hash identifier:          1dFKBIPrblRHQu71P8e67nD2cJ7nY6S7B6ZazokSBGM=
Subject key identifier:   D3:08:11:00:8D:CF:63:47:DC:51:2B:17:35:44:CE:C5:0D:71:D8:04
Authority key identifier: 57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D
Certificate issuer:       /CN=A918036A/serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D
Certificate serial:       10B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
Manifest number:          109A
Signing time:             Sat 24 Jan 2026 17:04:11 +0000
Manifest this update:     Sat 24 Jan 2026 17:04:10 +0000
Manifest next update:     Sat 31 Jan 2026 17:04:10 +0000
Files and hashes:         1: V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl (hash: vJ6dBR9zOCdK4JcLesS0I8dmbB5uByhT/xBnzaPfsZY=)
                          2: E2846570135E11EB9D58482CC4F9AE02.roa (hash: 8wnbM36mlkXO3KAhn+wvxpP3UwwkDuqXsFM8f7eC1Yc=)
                          3: BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa (hash: 5Fsc41uF0Rk/lmtPY3W1pGuwIZpGYocCqX/4FDCWPmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl
                          rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4280 (0x10b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918036A, serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D
        Validity
            Not Before: Jan 24 17:04:10 2026 GMT
            Not After : Jan 31 17:04:10 2026 GMT
        Subject: CN=6974fb8a-f0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:d0:9f:b6:8c:db:32:14:cd:c7:27:58:f1:
                    44:0c:50:03:eb:62:81:29:10:ca:a8:d3:b6:6e:a3:
                    5f:80:14:97:f8:17:40:1f:76:87:58:8f:c2:a4:77:
                    39:9b:01:94:8c:bc:45:6c:6e:ac:42:67:98:72:31:
                    40:d2:57:d2:60:f2:45:40:54:03:e8:6c:53:e3:06:
                    06:86:e5:83:7c:39:78:de:ae:7c:e7:13:3a:30:a0:
                    b4:7b:bd:a4:32:c2:31:4f:5a:af:94:a2:1d:85:52:
                    30:b3:97:a9:11:96:7c:96:0a:bf:2c:73:c3:28:b0:
                    65:23:66:27:02:51:dc:68:43:31:5e:11:ea:85:fa:
                    76:2e:41:1a:5d:55:e2:f8:09:13:45:48:81:6c:89:
                    1e:f6:aa:26:c7:c0:d3:f2:1e:ad:8a:b5:3d:27:bb:
                    9a:41:00:8e:48:72:2c:ff:d8:a0:4e:65:6b:74:86:
                    c1:01:76:1d:3e:fe:be:9b:9e:c1:f5:55:3d:b4:ba:
                    10:9c:07:3f:67:6c:0b:37:3f:6f:4c:08:7a:26:eb:
                    a5:42:b1:ef:1f:f3:41:65:6f:ca:3b:f4:8b:52:94:
                    15:02:18:c4:88:e4:6f:c7:4f:f4:ba:34:9b:4b:ad:
                    d7:be:37:58:aa:55:d8:2b:51:73:5b:a8:1e:35:84:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:08:11:00:8D:CF:63:47:DC:51:2B:17:35:44:CE:C5:0D:71:D8:04
            X509v3 Authority Key Identifier:
                keyid:57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5c:1e:2c:8c:b1:b7:e3:63:54:27:e0:e8:6a:75:af:e5:66:
         44:1f:34:9f:c0:62:55:63:65:bd:e9:a1:4e:21:d5:3e:63:0b:
         2a:66:06:87:4d:a8:70:5d:e3:33:8e:68:af:d2:0c:92:7e:03:
         07:8b:3d:3d:a5:c8:11:2e:ad:1d:6e:ca:ef:af:67:ac:e6:68:
         c5:0c:11:84:64:08:86:85:11:89:f3:3f:ca:26:21:03:ba:15:
         e7:d2:30:7d:4e:71:04:ff:3c:ec:ce:3f:05:58:38:de:8d:4f:
         17:41:e9:e9:92:48:ee:9e:ce:94:62:46:4e:4e:3e:43:eb:12:
         72:f6:b1:9b:98:11:6a:be:58:1c:3f:45:1e:ff:1c:8a:01:3f:
         6b:99:d2:3f:d6:1a:23:6e:26:3d:ca:7a:a1:ba:4e:dc:33:87:
         3b:99:00:e3:15:67:01:55:a5:85:39:e1:53:e0:9e:2e:eb:8d:
         aa:c2:6e:af:8e:39:2a:9a:e6:a7:6f:17:be:de:fa:aa:80:8d:
         c1:01:77:f8:d6:da:b4:58:c8:5a:79:93:9b:9b:ee:b0:a9:44:
         f7:e7:64:79:5e:ef:d7:96:07:f9:62:ab:15:98:c4:8f:17:66:
         fe:47:a5:a3:2b:6e:c0:a4:e5:c6:d5:07:5e:4a:c4:a4:a9:16:
         8f:e5:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:12:34 2026 by rpki-client