This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
File:                     veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json)
Hash identifier:          SityGBctf2fiX/ZijaA6xEJU4m5sM83Aqu4W/SL1iMM=
Subject key identifier:   AF:2F:6E:0E:44:2F:6B:DE:B5:A2:82:77:F4:20:58:58:25:50:A4:6C
Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
Certificate issuer:       /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Certificate serial:       0B2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
Manifest number:          0B28
Signing time:             Sat 24 Jan 2026 18:48:34 +0000
Manifest this update:     Sat 24 Jan 2026 18:48:34 +0000
Manifest next update:     Sat 31 Jan 2026 18:48:34 +0000
Files and hashes:         1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: 1RhoyH20GV8V5z0vhavcHgCE0JOXv05TD7w0858fIsc=)
                          2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: QRIDYBqtTuT5aBwWGaGhz+TBnDkutY1YQfqChJSa2+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
                          rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2863 (0xb2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
        Validity
            Not Before: Jan 24 18:48:34 2026 GMT
            Not After : Jan 31 18:48:34 2026 GMT
        Subject: CN=69751402-9399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fb:ab:3e:55:77:f9:e3:f9:57:46:a0:ac:b5:
                    0e:50:ad:13:66:35:97:8a:57:32:1f:1b:9c:83:26:
                    1c:92:f3:07:84:85:5e:99:17:f9:f0:df:10:80:ee:
                    0d:36:11:06:ba:2e:0f:d9:ae:35:96:fe:6e:c4:86:
                    7c:1b:89:58:ab:00:41:d2:1d:bc:65:51:3d:90:02:
                    dd:9b:6e:79:65:3c:89:de:d7:64:96:24:a4:8a:04:
                    e5:8f:13:88:a7:0d:ac:8a:c4:9e:8f:21:48:f6:a9:
                    14:b4:a6:71:b3:bf:03:c1:9f:76:53:64:76:0a:ad:
                    56:f8:3d:d6:bf:92:0e:29:76:9b:c0:1a:de:ba:cf:
                    04:83:0b:79:d3:cd:34:2b:4f:c3:9c:e3:dd:fb:3e:
                    e4:17:ee:95:86:24:4a:c2:71:07:2d:c1:46:1b:2e:
                    f9:19:db:f5:ce:fb:a2:64:a4:06:24:e5:cc:29:e2:
                    18:ce:f5:5c:f4:d6:d9:b0:90:81:0c:c3:19:d2:19:
                    fb:79:6c:33:3b:43:05:1b:85:3d:f5:16:ef:66:b9:
                    0a:9d:8d:42:a8:03:90:10:49:3c:53:9c:16:fc:c7:
                    c2:0a:5a:71:5d:df:4e:d0:25:9a:5f:78:2e:94:88:
                    40:e4:6c:d7:1d:ff:1e:61:3c:0a:fb:0d:ca:90:c2:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2F:6E:0E:44:2F:6B:DE:B5:A2:82:77:F4:20:58:58:25:50:A4:6C
            X509v3 Authority Key Identifier:
                keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f3:47:99:d8:3f:ec:1a:a9:61:fb:45:d3:b6:c0:14:11:28:
         82:18:7f:d6:8e:9e:87:67:bf:b6:6e:31:21:9c:43:62:70:1b:
         fd:c0:66:38:0e:2c:e8:9e:81:60:9f:e4:91:12:12:5a:e5:76:
         8b:17:9d:e4:98:41:29:f8:08:89:71:db:ce:21:07:ba:91:d7:
         9c:85:45:16:e5:f5:63:9c:40:37:df:8d:bf:c7:69:a5:9c:22:
         be:26:88:d1:ec:63:74:ea:10:74:fe:25:ab:6e:c5:c4:96:72:
         17:02:5d:43:ec:7f:65:45:14:64:82:b4:0f:7f:93:c0:e0:91:
         a2:d6:f5:18:c7:22:59:ae:da:90:5c:b9:2e:3d:b5:1f:5b:83:
         ef:06:db:67:d2:d8:79:25:62:99:d8:4c:4c:60:d9:22:de:6b:
         a4:ae:f9:6f:8c:79:ca:f7:03:88:02:c9:e1:f4:9d:be:96:f0:
         a3:12:ba:cd:c1:ee:0c:c2:5c:33:c8:02:02:fc:bd:3c:b3:6d:
         2d:2d:d3:e6:a3:8d:b1:3d:4f:3d:62:ed:a9:f1:e4:72:39:63:
         25:13:bb:0e:83:a1:38:11:86:27:78:be:2c:b0:52:19:fd:bf:
         7f:9f:21:9f:a3:ef:cb:39:3c:e6:50:12:97:06:6f:07:68:b6:
         9e:ab:b0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:20:40 2026 by rpki-client