This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
File:                     vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json)
Hash identifier:          TsTLwJSYYnz/NXEZOnFz0agFTCBCJcgMS/CvPa66WeU=
Subject key identifier:   1D:97:E6:37:98:9E:93:67:04:07:C4:D2:08:EF:45:CF:94:52:33:2C
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Certificate issuer:       /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
Manifest number:          01D4
Signing time:             Sun 25 Jan 2026 02:12:25 +0000
Manifest this update:     Sun 25 Jan 2026 02:12:24 +0000
Manifest next update:     Sun 01 Feb 2026 02:12:24 +0000
Files and hashes:         1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: cd3w8+a0fHcrDG75jdqFLzpzehPFHwbZSmmelMX9lhU=)
                          2: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: W2GUCwLH1zO0HSDwZ2rzdxgCK5Z2LezwQn+GLI/pJ/g=)
                          3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: inmnpyaDxDWlLYNelzuadkNEoddsaWxx/qXH6LYAyxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
        Validity
            Not Before: Jan 25 02:12:24 2026 GMT
            Not After : Feb  1 02:12:24 2026 GMT
        Subject: CN=69757c09-f381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:0f:ac:b4:c5:73:70:ae:bc:72:64:ee:d4:
                    59:0f:86:00:e2:e1:55:c7:37:ec:ae:a8:2b:38:16:
                    55:af:c2:ae:fa:56:02:f6:6f:f9:b0:6c:8b:99:37:
                    da:4d:bd:8d:4f:bc:eb:4b:70:7d:9f:9c:23:9e:d1:
                    c4:4b:79:99:2d:40:56:42:01:cd:98:c3:95:bd:f0:
                    a9:64:05:ea:91:2f:7f:3f:e4:26:2e:fd:67:52:4a:
                    62:27:14:69:f9:b1:de:8e:9a:cf:c5:6a:ff:6c:30:
                    8f:b3:4f:d1:5c:4c:b9:7c:4c:d0:66:1d:e7:6f:7c:
                    92:a3:a4:3f:00:50:2a:b9:18:11:ac:c9:fa:18:66:
                    78:a5:d0:c5:08:01:12:55:f3:21:1e:4f:87:a9:bd:
                    d8:13:85:ce:6f:41:c2:46:31:cc:b8:63:cc:1f:00:
                    a5:62:50:68:b6:10:ba:36:6b:b3:c1:12:d0:cf:a4:
                    9c:6b:5e:53:41:bd:07:68:2e:c3:24:f6:3b:69:f3:
                    59:9e:ce:07:bc:3f:31:99:03:81:1c:4c:82:3c:3a:
                    f4:fe:3c:c5:43:c8:9d:e7:f2:94:d2:33:ec:88:68:
                    f9:96:45:b2:81:88:87:c8:f8:9a:e2:f2:d0:37:f7:
                    68:a8:e7:4b:97:a2:ca:da:80:6e:e5:2d:d6:33:ac:
                    a5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:97:E6:37:98:9E:93:67:04:07:C4:D2:08:EF:45:CF:94:52:33:2C
            X509v3 Authority Key Identifier:
                keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:81:1b:ea:bc:7a:60:74:ec:94:80:cf:1f:da:41:44:e3:b0:
         9a:4a:f6:4f:46:76:fa:af:8b:a1:a7:3a:2b:f8:ce:1c:de:c3:
         d1:02:a8:42:e7:3d:14:64:58:d4:a4:46:ec:e7:e5:0a:ce:e8:
         86:4e:e0:92:33:9f:d9:1b:66:de:4f:ad:db:6a:39:1a:2b:4e:
         86:23:56:c3:2b:58:35:78:4b:6a:e9:db:c5:52:5a:ef:47:b8:
         a7:a5:3c:21:ac:0b:94:84:a7:72:1a:1c:22:52:d4:81:39:45:
         cd:f7:60:31:13:4c:9e:fe:20:a3:2b:35:c1:f4:85:6a:cf:fd:
         b8:0e:7a:30:18:da:28:c5:6f:4a:ee:d3:a5:f9:8e:d6:b2:9c:
         85:57:eb:6e:7b:e0:1a:3c:6f:f7:dd:47:6e:fd:48:96:83:aa:
         ad:b2:0b:dc:76:84:c3:0d:49:05:a8:2d:ba:db:e8:e1:72:f6:
         dd:ba:50:92:4d:cb:31:20:17:ac:4d:93:d5:0b:dd:1c:00:eb:
         a7:d2:23:c6:71:44:cf:c9:82:fd:ec:4d:fb:d4:0d:86:37:f0:
         4d:2a:20:86:ba:f8:7f:b2:07:81:32:d4:13:0c:30:56:f2:20:
         e9:a8:bf:50:18:c7:02:0f:73:70:aa:e9:83:7f:a0:11:9c:db:
         4f:ce:e5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:03 2026 by rpki-client