This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919603C/E2EDD050ED3311F096BA5E0B496F56BC/V3eRdfcDbN-VAi541x9AJGhYWYc.mft
File:                     V3eRdfcDbN-VAi541x9AJGhYWYc.mft (raw, json)
Hash identifier:          zFdsvV/eYb6fkjehcHh1hAgKFBZTnHDaV7WIHL/DKp4=
Subject key identifier:   95:01:C4:16:63:DD:BF:1C:EB:BF:02:71:C6:37:C0:71:81:19:24:6F
Authority key identifier: 57:77:91:75:F7:03:6C:DF:95:02:2E:78:D7:1F:40:24:68:58:59:87
Certificate issuer:       /CN=A919603C/serialNumber=57779175F7036CDF95022E78D71F402468585987
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V3eRdfcDbN-VAi541x9AJGhYWYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919603C/E2EDD050ED3311F096BA5E0B496F56BC/V3eRdfcDbN-VAi541x9AJGhYWYc.mft
Manifest number:          0A
Signing time:             Sun 25 Jan 2026 07:07:18 +0000
Manifest this update:     Sun 25 Jan 2026 07:07:18 +0000
Manifest next update:     Sun 01 Feb 2026 07:07:18 +0000
Files and hashes:         1: V3eRdfcDbN-VAi541x9AJGhYWYc.crl (hash: /TFTxGgnbdOqZ8AKgwfZZZ4+ArrWQUsCrwL4PqnQv00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919603C/E2EDD050ED3311F096BA5E0B496F56BC/V3eRdfcDbN-VAi541x9AJGhYWYc.crl
                          rsync://rpki.apnic.net/member_repository/A919603C/E2EDD050ED3311F096BA5E0B496F56BC/V3eRdfcDbN-VAi541x9AJGhYWYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V3eRdfcDbN-VAi541x9AJGhYWYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 07:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919603C, serialNumber=57779175F7036CDF95022E78D71F402468585987
        Validity
            Not Before: Jan 25 07:07:18 2026 GMT
            Not After : Feb  1 07:07:18 2026 GMT
        Subject: CN=6975c126-95e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:82:c5:b5:6a:72:9b:bf:7f:08:ba:ac:6b:
                    74:58:08:19:f9:e2:42:0d:2c:65:db:c4:69:0b:5c:
                    51:ea:2b:f7:9c:fb:7e:6e:56:7f:c2:d1:41:90:f7:
                    f8:57:35:de:bb:9d:93:72:59:25:f3:b6:c4:3b:a0:
                    3f:cc:db:c6:95:4f:a0:26:ef:4e:a3:e8:8c:67:c4:
                    26:24:94:bc:df:5e:a5:d7:3d:9d:ce:05:15:fd:41:
                    f9:1f:e2:df:9f:2d:f0:88:c6:27:64:0b:c5:e2:2c:
                    31:bd:7b:ca:6f:9c:b4:36:f2:ad:d1:bd:fa:bb:49:
                    87:95:ae:f6:ce:b7:03:ff:bf:e1:77:6a:4d:12:e9:
                    42:c1:c0:e6:01:f2:01:f0:79:f2:d7:8f:c4:4a:4c:
                    71:2b:b2:37:5e:ce:f0:8f:56:07:9d:07:20:9a:a3:
                    78:ff:f7:c0:78:29:cc:c3:1c:fd:24:04:9e:84:60:
                    f4:db:b4:06:9a:3e:a9:73:24:28:9d:78:5a:b7:cb:
                    45:b5:af:e3:a7:f7:d7:5b:f4:87:4f:a6:1c:ca:df:
                    0d:af:ed:ae:1b:62:cc:bc:ef:68:22:26:68:8b:54:
                    2a:1b:ab:8a:e4:c0:61:4e:a0:8f:db:ff:17:42:76:
                    38:67:38:77:d1:33:13:cc:56:3d:39:54:5c:09:e6:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:01:C4:16:63:DD:BF:1C:EB:BF:02:71:C6:37:C0:71:81:19:24:6F
            X509v3 Authority Key Identifier:
                keyid:57:77:91:75:F7:03:6C:DF:95:02:2E:78:D7:1F:40:24:68:58:59:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919603C/E2EDD050ED3311F096BA5E0B496F56BC/V3eRdfcDbN-VAi541x9AJGhYWYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V3eRdfcDbN-VAi541x9AJGhYWYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919603C/E2EDD050ED3311F096BA5E0B496F56BC/V3eRdfcDbN-VAi541x9AJGhYWYc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:91:d6:25:aa:f3:9d:84:e3:16:51:a8:be:2a:c0:12:f7:
         07:9d:12:3e:e5:f3:8e:44:a7:e8:5b:ca:21:80:42:ba:03:bc:
         78:4d:b5:28:2f:74:9c:ee:cf:6c:89:ab:37:4b:78:9d:d1:e8:
         cb:0b:b4:3c:5a:a1:1e:5b:19:4b:d1:f0:f0:e6:f3:9f:31:86:
         6c:45:91:49:8c:f1:31:6a:b9:d6:a6:25:dc:9a:d2:4a:2d:b0:
         a0:f4:d4:d3:15:05:ee:2e:7e:f9:17:86:86:28:b9:35:28:11:
         d5:92:1a:37:9e:2e:c7:dc:50:ed:5c:11:99:cf:b7:c3:82:fa:
         29:5b:4e:f3:b8:96:32:8d:ed:6b:c6:64:0f:c2:28:45:a3:4b:
         a1:cb:e3:15:99:bb:1a:c1:6a:dd:bb:3e:c8:16:18:c8:62:08:
         ef:97:3a:c5:a1:af:eb:e9:48:88:b2:f1:eb:16:fd:76:8e:97:
         8a:8c:b3:0c:c8:a9:2d:75:bd:cc:4c:a9:49:19:70:dc:74:e8:
         9e:42:03:f3:f0:23:2d:71:2a:3c:fb:1e:73:40:4b:53:b7:38:
         9e:64:8a:1a:ff:4a:6f:4b:bd:b6:02:be:3f:b1:fe:3d:1d:b4:
         9c:bc:a6:f0:0d:3d:9f:75:42:cc:89:b3:96:1f:ea:1a:d9:b0:
         75:3c:01:a8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE5
NjAzQzExMC8GA1UEBRMoNTc3NzkxNzVGNzAzNkNERjk1MDIyRTc4RDcxRjQwMjQ2
ODU4NTk4NzAeFw0yNjAxMjUwNzA3MThaFw0yNjAyMDEwNzA3MThaMBgxFjAUBgNV
BAMMDTY5NzVjMTI2LTk1ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEOILFtWpym79/CLqsa3RYCBn54kINLGXbxGkLXFHqK/ec+35uVn/C0UGQ9/hX
Nd67nZNyWSXztsQ7oD/M28aVT6Am706j6IxnxCYklLzfXqXXPZ3OBRX9Qfkf4t+f
LfCIxidkC8XiLDG9e8pvnLQ28q3Rvfq7SYeVrvbOtwP/v+F3ak0S6ULBwOYB8gHw
efLXj8RKTHErsjdezvCPVgedByCao3j/98B4KczDHP0kBJ6EYPTbtAaaPqlzJCid
eFq3y0W1r+On99db9IdPphzK3w2v7a4bYsy872giJmiLVCobq4rkwGFOoI/b/xdC
djhnOHfRMxPMVj05VFwJ5q3tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlQHEFmPd
vxzrvwJxxjfAcYEZJG8wHwYDVR0jBBgwFoAUV3eRdfcDbN+VAi541x9AJGhYWYcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2MDNDL0UyRUREMDUwRUQz
MzExRjA5NkJBNUUwQjQ5NkY1NkJDL1YzZVJkZmNEYk4tVkFpNTQxeDlBSkdoWVdZ
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVjNlUmRmY0RiTi1WQWk1NDF4OUFKR2hZV1ljLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2
MDNDL0UyRUREMDUwRUQzMzExRjA5NkJBNUUwQjQ5NkY1NkJDL1YzZVJkZmNEYk4t
VkFpNTQxeDlBSkdoWVdZYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAICPkdYlqvOdhOMWUai+KsAS9wedEj7l845Ep+hbyiGAQroDvHhNtSgv
dJzuz2yJqzdLeJ3R6MsLtDxaoR5bGUvR8PDm858xhmxFkUmM8TFqudamJdya0kot
sKD01NMVBe4ufvkXhoYouTUoEdWSGjeeLsfcUO1cEZnPt8OC+ilbTvO4ljKN7WvG
ZA/CKEWjS6HL4xWZuxrBat27PsgWGMhiCO+XOsWhr+vpSIiy8esW/XaOl4qMswzI
qS11vcxMqUkZcNx06J5CA/PwIy1xKjz7HnNAS1O3OJ5kihr/Sm9LvbYCvj+x/j0d
tJy8pvANPZ91QsyJs5Yf6hrZsHU8Aag=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:00:43 2026 by rpki-client