This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
File:                     VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json)
Hash identifier:          kY39lMWmFuEiIeF5jo/t1yVoHMycPvmuo688nXwmM5U=
Subject key identifier:   C0:2D:E1:A9:76:B2:01:76:89:F0:EC:BA:37:E4:BC:33:CE:82:CF:D2
Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72
Certificate issuer:       /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072
Certificate serial:       0C72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
Manifest number:          0C65
Signing time:             Sat 24 Jan 2026 18:12:21 +0000
Manifest this update:     Sat 24 Jan 2026 18:12:21 +0000
Manifest next update:     Sat 31 Jan 2026 18:12:21 +0000
Files and hashes:         1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: jJ+RFMd5HUYrX0+m7ogv6Os7ElQazsYkwC8i/NqRNmo=)
                          2: CC4D97CAE8A811F0B40EB576576F56BC.roa (hash: iRT4fUHkF4VKevdDqzRVJ2ccBQDbKVev3FN30XBV1O4=)
                          3: 98B698EEE8A811F084817E76576F56BC.roa (hash: LconRaiAtlhEKqKSad3TY8yVZ6x0lM1RBW7zmXq2O+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl
                          rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3186 (0xc72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072
        Validity
            Not Before: Jan 24 18:12:21 2026 GMT
            Not After : Jan 31 18:12:21 2026 GMT
        Subject: CN=69750b85-d226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:15:26:c2:bd:7a:e2:31:cc:4a:88:f9:68:
                    da:c6:3a:55:62:ff:b3:e6:a2:b5:9d:be:74:f3:06:
                    e4:9a:f3:94:c2:35:1c:ea:e0:68:bb:95:ef:41:63:
                    21:00:fb:df:0e:13:69:dc:b3:84:af:b1:31:50:74:
                    46:05:28:f9:5f:2f:e4:b6:1e:5c:a0:36:df:70:fa:
                    2f:b4:90:8b:e5:36:13:80:f9:4f:23:c2:85:e7:0a:
                    1a:2f:9a:42:e9:d2:d8:3a:b7:ce:5f:c6:b7:3b:35:
                    e0:f3:57:3d:c3:81:ad:94:d1:ff:94:e8:3c:b8:7f:
                    6f:15:81:6f:d4:7b:00:3d:92:ee:8a:2e:28:20:86:
                    97:61:54:60:fb:68:57:f4:b3:44:c4:ec:a6:f2:94:
                    9b:a4:c2:fa:3c:0b:95:f6:06:9a:68:84:f1:a3:99:
                    81:4b:13:4b:ac:e4:b8:b3:80:d0:62:58:ed:cd:8f:
                    71:88:6b:d5:03:ce:79:e9:fa:19:00:76:2f:c0:26:
                    1c:17:c5:e3:7b:67:5c:c5:88:90:18:89:f1:85:8c:
                    5b:36:97:00:ca:b3:fb:7b:8f:7b:9e:01:fa:29:23:
                    08:44:dc:17:ce:3e:5a:72:79:51:4f:7c:5e:e0:c1:
                    24:85:47:8c:1f:10:7e:1b:19:a9:b9:2f:1a:bd:21:
                    ee:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2D:E1:A9:76:B2:01:76:89:F0:EC:BA:37:E4:BC:33:CE:82:CF:D2
            X509v3 Authority Key Identifier:
                keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:7e:52:7f:b2:2f:fc:d1:e8:9b:f2:82:ee:25:64:d0:33:fd:
         43:9d:8b:9a:c3:bf:15:33:d5:3c:d1:fc:04:de:13:01:3c:58:
         7c:eb:61:8a:c0:71:41:a9:22:ae:c4:bc:2d:a8:7d:52:b3:0d:
         e9:ea:d1:38:6c:fa:53:00:16:ab:0a:39:cb:39:64:4d:3d:c2:
         e4:3a:7b:d6:b8:80:33:e8:b0:ee:c5:21:97:bc:64:4f:b9:af:
         1d:3c:27:23:6b:0f:81:58:ca:ac:29:bf:21:be:ea:f4:86:07:
         0b:62:50:6c:47:04:ce:b2:f4:e4:ee:79:4b:fb:b0:75:e1:81:
         da:f3:74:02:d7:61:be:cd:d3:d2:9f:11:aa:c0:ef:c3:3c:8f:
         26:d8:48:d4:cb:22:e4:f8:d4:df:7f:dd:80:1c:92:81:08:f5:
         6b:e6:d7:e0:d9:d2:68:a1:19:fa:f4:05:0c:51:e7:d8:39:21:
         a3:df:dc:fe:a8:f7:bf:00:b5:97:ee:65:e3:62:8b:63:58:95:
         84:eb:cb:e8:3b:73:5b:11:c7:ef:3b:33:cc:f1:93:39:96:85:
         19:7b:52:29:ce:96:88:5c:86:49:9e:63:b6:e0:7a:18:ea:68:
         2c:a4:2e:80:cf:ea:8d:43:ae:4e:a9:97:22:47:17:a5:c7:6f:
         6d:8f:aa:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB
QjBBOUYwNzIwHhcNMjYwMTI0MTgxMjIxWhcNMjYwMTMxMTgxMjIxWjAYMRYwFAYD
VQQDDA02OTc1MGI4NS1kMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo7sVJsK9euIxzEqI+WjaxjpVYv+z5qK1nb508wbkmvOUwjUc6uBou5XvQWMh
APvfDhNp3LOEr7ExUHRGBSj5Xy/kth5coDbfcPovtJCL5TYTgPlPI8KF5woaL5pC
6dLYOrfOX8a3OzXg81c9w4GtlNH/lOg8uH9vFYFv1HsAPZLuii4oIIaXYVRg+2hX
9LNExOym8pSbpML6PAuV9gaaaITxo5mBSxNLrOS4s4DQYljtzY9xiGvVA8556foZ
AHYvwCYcF8Xje2dcxYiQGInxhYxbNpcAyrP7e497ngH6KSMIRNwXzj5acnlRT3xe
4MEkhUeMHxB+GxmpuS8avSHu5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAt4al2
sgF2ifDsujfkvDPOgs/SMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3
NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4
SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR
bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC/flJ/si/80eib8oLuJWTQM/1DnYuaw78VM9U80fwE3hMBPFh862GK
wHFBqSKuxLwtqH1Ssw3p6tE4bPpTABarCjnLOWRNPcLkOnvWuIAz6LDuxSGXvGRP
ua8dPCcjaw+BWMqsKb8hvur0hgcLYlBsRwTOsvTk7nlL+7B14YHa83QC12G+zdPS
nxGqwO/DPI8m2EjUyyLk+NTff92AHJKBCPVr5tfg2dJooRn69AUMUefYOSGj39z+
qPe/ALWX7mXjYotjWJWE68voO3NbEcfvOzPM8ZM5loUZe1IpzpaIXIZJnmO24HoY
6mgspC6Az+qNQ65OqZciRxelx29tj6oW
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:20 2026 by rpki-client