This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
File:                     0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json)
Hash identifier:          JNxQ6+Phu6C7oOD9X9DKV7HGYaPWdza2IzrGExn2E3U=
Subject key identifier:   C2:64:7F:DE:81:0D:89:7A:E7:4D:DA:E3:78:D6:5F:81:5C:C9:3D:5F
Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11
Certificate issuer:       /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
Certificate serial:       351A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
Manifest number:          350A
Signing time:             Sat 24 Jan 2026 14:55:41 +0000
Manifest this update:     Sat 24 Jan 2026 14:55:41 +0000
Manifest next update:     Sat 31 Jan 2026 14:55:41 +0000
Files and hashes:         1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: xcN2kryo3P1dQYNsrbrvXEN3A2WzdTzyWLVbZmf8Cqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl
                          rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13594 (0x351a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
        Validity
            Not Before: Jan 24 14:55:41 2026 GMT
            Not After : Jan 31 14:55:41 2026 GMT
        Subject: CN=6974dd6d-6311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a3:c9:cc:5a:de:fb:5f:02:d3:90:a0:fb:74:
                    22:ca:71:fc:95:c2:d4:ef:83:7e:e5:56:69:3b:f0:
                    f6:b1:33:04:25:5c:67:ed:a8:8f:08:81:15:a6:4c:
                    09:f8:61:48:bf:ca:db:32:eb:73:7a:f5:2a:14:2a:
                    a9:d4:54:53:4e:eb:28:20:1c:2b:e2:56:70:11:42:
                    a1:63:4f:f8:24:65:f8:38:ba:30:85:5a:6c:02:5f:
                    83:28:38:10:c0:3f:95:c5:4b:71:6b:0c:23:89:9e:
                    b5:9c:26:bd:42:71:dc:c6:53:5f:79:cf:f6:9c:f7:
                    02:18:18:9b:de:6a:29:0a:ad:1c:d3:e2:88:0f:ce:
                    a3:f9:97:22:94:3b:d3:5e:4d:4d:da:4a:8e:e0:1f:
                    de:a3:95:23:f9:40:5c:75:c9:43:d1:0d:1b:1c:d8:
                    0c:b5:ec:2d:7b:da:83:fc:ce:f3:d5:9f:3b:37:51:
                    b4:13:6f:3c:d6:0e:5a:9d:9e:28:29:8f:00:6a:80:
                    a1:5f:55:a6:d2:f3:f0:eb:51:1e:99:5c:4b:9c:91:
                    16:06:5d:1e:2b:57:71:29:a2:a5:01:d7:ed:21:d6:
                    ee:23:5c:d5:4f:a7:41:02:a9:2f:bb:d4:c7:dd:f5:
                    43:33:97:9e:7d:7c:c6:68:62:b4:db:ce:86:e6:96:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:64:7F:DE:81:0D:89:7A:E7:4D:DA:E3:78:D6:5F:81:5C:C9:3D:5F
            X509v3 Authority Key Identifier:
                keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:99:9e:d6:22:4b:43:e6:04:39:31:f1:ef:38:df:2b:49:94:
         57:fd:fc:aa:a9:51:47:e4:f5:7b:a8:a4:6d:7a:81:33:ca:48:
         2a:b9:1e:1f:b3:69:fd:a6:d6:5a:01:33:c3:59:08:18:5b:15:
         1d:99:d7:e5:b9:67:db:cd:ff:7b:ef:31:89:88:3e:66:4c:69:
         88:e5:dc:2d:cf:4a:b6:04:3c:7f:6a:da:94:9c:3b:ee:84:fc:
         79:2d:95:94:6c:3e:fa:34:d7:64:d4:2b:04:7c:ad:a9:66:42:
         b3:3d:17:d4:f6:9c:f5:32:0b:c9:e5:32:46:de:38:b5:6b:3a:
         04:c4:04:18:af:9b:36:2e:b4:93:f9:91:93:cc:59:06:22:88:
         60:d7:e3:8e:96:e1:0a:4c:08:1d:d7:9b:dd:6b:a6:55:76:57:
         9f:40:40:34:97:40:94:c3:f1:c4:93:cb:15:95:9f:85:0e:bc:
         5e:2a:51:31:f9:95:25:39:02:a7:a0:0b:0b:e9:9e:bf:3a:9c:
         e4:06:4e:d2:3b:7d:f8:90:af:34:ec:f6:9f:0e:2e:6b:36:5a:
         43:ff:35:eb:19:ad:1a:da:a3:1b:ac:e1:1e:89:a2:17:29:74:
         d0:e5:4b:3f:02:67:dd:fb:d0:66:5b:0a:41:53:7d:72:5f:69:
         f4:69:79:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1
RkVEOTQ1MTEwHhcNMjYwMTI0MTQ1NTQxWhcNMjYwMTMxMTQ1NTQxWjAYMRYwFAYD
VQQDDA02OTc0ZGQ2ZC02MzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA86PJzFre+18C05Cg+3QiynH8lcLU74N+5VZpO/D2sTMEJVxn7aiPCIEVpkwJ
+GFIv8rbMutzevUqFCqp1FRTTusoIBwr4lZwEUKhY0/4JGX4OLowhVpsAl+DKDgQ
wD+VxUtxawwjiZ61nCa9QnHcxlNfec/2nPcCGBib3mopCq0c0+KID86j+ZcilDvT
Xk1N2kqO4B/eo5Uj+UBcdclD0Q0bHNgMtewte9qD/M7z1Z87N1G0E2881g5anZ4o
KY8AaoChX1Wm0vPw61EemVxLnJEWBl0eK1dxKaKlAdftIdbuI1zVT6dBAqkvu9TH
3fVDM5eefXzGaGK0286G5pZbKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJkf96B
DYl6503a43jWX4FcyT1fMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE
OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS
UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k
X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA1mZ7WIktD5gQ5MfHvON8rSZRX/fyqqVFH5PV7qKRteoEzykgquR4f
s2n9ptZaATPDWQgYWxUdmdfluWfbzf977zGJiD5mTGmI5dwtz0q2BDx/atqUnDvu
hPx5LZWUbD76NNdk1CsEfK2pZkKzPRfU9pz1MgvJ5TJG3ji1azoExAQYr5s2LrST
+ZGTzFkGIohg1+OOluEKTAgd15vda6ZVdlefQEA0l0CUw/HEk8sVlZ+FDrxeKlEx
+ZUlOQKnoAsL6Z6/OpzkBk7SO334kK807PafDi5rNlpD/zXrGa0a2qMbrOEeiaIX
KXTQ5Us/Amfd+9BmWwpBU31yX2n0aXkQ
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:10 2026 by rpki-client