This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
File:                     vrLtvPXHBujjAYwAasdhPGyI9a0.mft (raw, json)
Hash identifier:          j+FikC3uhdAXkVlUVZmwmdwBFw0akuWdCAEoIBo6PnM=
Subject key identifier:   63:17:C2:32:5B:DA:DB:4C:D1:83:EE:3F:B6:1D:3E:E5:6F:83:7D:2E
Authority key identifier: BE:B2:ED:BC:F5:C7:06:E8:E3:01:8C:00:6A:C7:61:3C:6C:88:F5:AD
Certificate issuer:       /CN=A918306F/serialNumber=BEB2EDBCF5C706E8E3018C006AC7613C6C88F5AD
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrLtvPXHBujjAYwAasdhPGyI9a0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
Manifest number:          23
Signing time:             Sun 25 Jan 2026 06:47:32 +0000
Manifest this update:     Sun 25 Jan 2026 06:47:31 +0000
Manifest next update:     Sun 01 Feb 2026 06:47:31 +0000
Files and hashes:         1: vrLtvPXHBujjAYwAasdhPGyI9a0.crl (hash: IL6HTOrRVPzsyXipO4soNw+d0ORYjvwo42IeT8ja5rs=)
                          2: 0F59B14CC55011F08C55AF0AC4F9AE02.roa (hash: s2gchgumm5kqev0LEXRxjXbLTYWjDSMQAi6Y60e4bgY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.crl
                          rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrLtvPXHBujjAYwAasdhPGyI9a0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918306F, serialNumber=BEB2EDBCF5C706E8E3018C006AC7613C6C88F5AD
        Validity
            Not Before: Jan 25 06:47:31 2026 GMT
            Not After : Feb  1 06:47:31 2026 GMT
        Subject: CN=6975bc84-7866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:e0:f1:2a:a2:7e:6f:2a:44:93:0a:5b:6d:
                    88:bf:75:97:09:99:2c:7b:2c:2a:e1:70:6c:6f:27:
                    d7:95:9e:5f:f8:8c:20:81:85:87:c1:3a:e8:c7:c4:
                    53:4e:e2:7c:d1:24:dc:1f:cf:09:03:a6:a0:68:35:
                    5c:a5:e6:2c:d4:df:e5:f7:4a:b6:56:aa:4a:6a:d4:
                    d7:c3:4e:9e:b2:44:f0:3d:ca:5a:99:ae:01:39:d3:
                    52:02:a0:ff:b2:14:fa:df:c3:e8:5c:8b:f3:20:67:
                    9a:8b:ea:24:12:32:38:2d:0e:ba:eb:f3:4e:3d:b7:
                    d5:7b:bc:50:02:64:59:d5:40:82:c7:96:84:7e:c1:
                    95:5c:65:f7:50:ff:16:71:aa:e5:43:bb:de:04:08:
                    68:74:da:41:d9:ab:a4:93:4d:c3:96:84:dd:d2:c2:
                    9c:71:08:0d:1b:29:7b:80:9d:ed:10:76:47:5d:b4:
                    5d:7c:46:27:42:18:f1:8d:48:7a:b0:c9:5e:32:5a:
                    20:f9:5a:05:5a:82:72:ab:c9:43:db:f5:06:16:91:
                    61:e6:19:da:39:47:b2:35:cc:df:4f:7b:8c:57:55:
                    32:45:7a:f6:b6:d9:56:39:cf:c9:ba:34:c9:10:7b:
                    41:82:85:3b:26:fc:ae:dd:c1:8b:1c:9a:7f:0a:38:
                    36:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:17:C2:32:5B:DA:DB:4C:D1:83:EE:3F:B6:1D:3E:E5:6F:83:7D:2E
            X509v3 Authority Key Identifier:
                keyid:BE:B2:ED:BC:F5:C7:06:E8:E3:01:8C:00:6A:C7:61:3C:6C:88:F5:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrLtvPXHBujjAYwAasdhPGyI9a0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:25:93:3e:40:c5:d7:3f:de:f7:e6:e6:12:64:47:39:b8:
         4e:32:20:6b:aa:af:4b:a4:59:31:3b:8c:2d:a0:a7:9a:4b:bb:
         5b:9b:61:6a:2d:e4:f4:1d:25:df:03:00:cc:d0:56:ca:f2:7c:
         4f:ce:6d:2b:d7:82:a3:4e:56:d3:af:61:83:f5:2d:9a:54:24:
         de:5f:58:5b:66:a7:39:85:0c:a7:36:87:92:d6:29:12:fe:22:
         52:51:a1:b0:06:1a:85:e4:9a:14:b6:e9:bb:b5:cf:df:55:00:
         e4:32:b6:cf:51:61:eb:e7:06:7d:a1:bc:ea:3c:02:cf:1e:2c:
         67:e7:7e:90:d7:70:e0:64:57:57:a4:59:b6:54:17:9d:dd:d8:
         83:19:1a:43:a5:0c:ce:fa:3b:a0:3b:9f:70:ab:89:1d:7b:e5:
         f5:0e:f0:21:6a:58:c5:57:6f:1a:4d:bb:a6:c7:d4:fd:f9:95:
         c5:2e:e6:18:2d:39:ae:06:b2:b1:73:f0:f1:30:57:60:12:9d:
         95:cb:3f:da:af:e3:df:a4:ed:6d:c2:a9:bf:29:cb:40:9e:25:
         9a:26:83:33:4b:fb:16:6d:3f:0a:b7:1f:94:9d:6a:a6:b3:06:
         90:17:68:17:60:e0:39:61:78:84:b8:1c:72:b7:6e:31:46:81:
         1a:ac:5f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:19 2026 by rpki-client