This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
File:                     VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json)
Hash identifier:          cpilb62v6KQOHwiTdhOC+ThI4ydr4VYWd99Ms0lyeQQ=
Subject key identifier:   46:D7:BB:7A:62:BF:D9:53:D8:09:40:61:67:55:98:55:A8:73:C8:FD
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Certificate issuer:       /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
Manifest number:          010D
Signing time:             Sun 25 Jan 2026 04:15:16 +0000
Manifest this update:     Sun 25 Jan 2026 04:15:16 +0000
Manifest next update:     Sun 01 Feb 2026 04:15:16 +0000
Files and hashes:         1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: n9Qs1HIC+1OLuj/Jr5o0xtu58PivOCrNPmeZu99R7WI=)
                          2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: 1Bz9COXjLNAhKPWsXADzGRMHjeGcdVBDGhNMe07ozjE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
                          rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
        Validity
            Not Before: Jan 25 04:15:16 2026 GMT
            Not After : Feb  1 04:15:16 2026 GMT
        Subject: CN=697598d4-70aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:e0:aa:c5:04:9a:1d:25:39:25:b5:14:09:
                    29:76:c0:90:14:96:fe:fc:20:90:c5:df:71:f4:de:
                    86:1c:7d:47:3e:bf:5d:24:b2:63:5f:a1:4e:8a:f9:
                    68:4a:22:2e:34:96:5d:43:ec:8a:ed:58:26:e3:ae:
                    c6:0a:a1:f2:bf:be:df:a3:d0:c5:96:1c:64:44:3e:
                    e6:48:0e:c1:34:63:ec:1a:e1:24:a4:6f:27:b0:45:
                    7d:ce:ab:59:27:69:6d:c4:cf:96:ac:bb:d2:a6:b3:
                    2e:3e:60:90:e8:9f:48:19:e6:4d:e3:04:8c:c4:cb:
                    f9:d5:7b:95:91:17:de:29:a3:18:3a:97:64:24:52:
                    cc:7a:f3:07:d1:95:98:c3:d0:ed:c8:0f:c3:53:08:
                    a9:1b:4b:c0:ba:40:61:d7:a7:7a:ad:63:b6:62:b9:
                    1c:1a:8e:fe:8f:e9:94:e5:65:ac:0c:c5:a8:a2:d9:
                    87:d0:f9:24:ea:0b:aa:8b:c4:1d:dd:06:04:56:d7:
                    a8:0a:09:76:90:1b:b4:7e:67:af:45:4a:1e:ae:4a:
                    39:5c:a5:e1:31:ae:59:0e:6b:d6:48:ba:72:38:bf:
                    8e:a6:c8:6a:e5:8b:2f:66:ce:e9:a6:17:f2:71:7a:
                    a7:4d:77:c4:7f:74:1b:80:67:4d:37:94:07:10:36:
                    e3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D7:BB:7A:62:BF:D9:53:D8:09:40:61:67:55:98:55:A8:73:C8:FD
            X509v3 Authority Key Identifier:
                keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f8:8c:3f:81:9f:99:94:9b:44:2e:5f:78:94:2f:53:8d:48:
         98:54:67:32:b2:d3:4b:57:c7:15:c8:5c:57:24:d9:f1:d1:91:
         85:22:49:ad:b9:9d:87:09:3f:e9:72:40:d4:4a:5d:03:ba:dc:
         23:c9:2c:d9:b2:e3:61:ef:9b:cb:a0:9c:e6:9d:ed:61:bb:58:
         d3:49:89:24:88:78:28:c8:67:ef:1f:a8:ee:d8:4b:ff:d1:8f:
         14:35:9a:23:46:e2:bd:85:48:aa:d3:84:8b:a1:87:30:85:51:
         e6:47:73:71:ea:2a:d5:a8:32:4a:12:b2:13:5f:ca:e6:3c:c1:
         b5:37:6d:c7:74:ea:5a:dd:57:93:b7:d7:02:cf:4f:65:f3:b8:
         52:0b:a8:de:cb:cd:e5:33:76:d0:4a:2e:3b:60:de:f7:c0:f5:
         c5:e3:d9:ac:5d:e6:c4:51:fb:f4:10:dd:14:3c:04:0e:4c:b5:
         1e:30:da:ef:e0:d0:93:50:01:32:3a:99:54:fe:b1:98:52:6e:
         70:b5:bb:65:1b:3e:bb:21:d8:c5:d6:18:54:a7:2d:f4:f7:2f:
         fd:7a:4b:90:dc:eb:f2:72:a3:fb:f2:19:d9:c8:b7:8a:22:25:
         72:af:50:c3:cf:b8:ce:d4:9a:21:75:98:13:01:4e:02:ac:d4:
         93:23:31:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:51:04 2026 by rpki-client