This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
File:                     vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json)
Hash identifier:          m+NWJc6Ael43AMI7VWGD7Sxx8DYVBNzj8tEyvm0E/uc=
Subject key identifier:   B7:B2:20:DB:88:46:EA:3F:77:56:2E:30:44:A4:EA:66:32:46:00:57
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Certificate issuer:       /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial:       3561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
Manifest number:          3534
Signing time:             Sat 24 Jan 2026 14:35:28 +0000
Manifest this update:     Sat 24 Jan 2026 14:35:28 +0000
Manifest next update:     Sat 31 Jan 2026 14:35:28 +0000
Files and hashes:         1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: bJ9sqW5g3zS+4+zMN8/JsHi69dc1VtDt2WFqgx0GoiE=)
                          2: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: YTAhLYofQ5bGqpN1MRJJdGJjIa93aOaav1SZOkx9D70=)
                          3: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: tRzHmoCM5bp0eiCAe2WTWAhqYkb98p9OjQpa6ZuzTto=)
                          4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: 2sM6dqjwFaWvanKsFaRgJilTOFHKXatSdEC+MoptC6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
                          rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13665 (0x3561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
        Validity
            Not Before: Jan 24 14:35:28 2026 GMT
            Not After : Jan 31 14:35:28 2026 GMT
        Subject: CN=6974d8b0-4b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:87:6d:54:67:b6:f1:7e:59:68:95:61:57:
                    0d:88:e9:5e:ce:46:20:39:8d:ae:f1:34:d4:2c:97:
                    f8:18:25:2b:69:c0:8a:a6:b4:9b:bb:ba:ea:7c:f2:
                    d8:6a:49:6b:b7:c1:65:c9:bb:2d:28:71:50:4b:a4:
                    5d:7c:b5:c9:67:bb:cb:19:68:a8:24:30:c3:07:df:
                    bf:da:c2:ac:39:99:62:fe:68:00:ab:99:13:ce:fe:
                    38:74:66:5f:ac:9e:78:8d:b4:a3:94:96:4d:ef:bd:
                    55:c0:8e:19:87:95:94:30:1f:51:84:12:2a:7c:01:
                    76:b4:f6:b1:17:ea:c9:c2:ce:59:30:7d:9b:eb:4b:
                    17:0b:c7:de:ec:59:2b:79:a0:2c:86:d2:a3:ba:09:
                    cc:78:fc:af:7a:1f:27:68:e3:fc:69:dd:43:25:4c:
                    19:e0:eb:9e:bc:be:a8:e2:40:58:76:de:70:95:52:
                    5e:a1:da:b0:f1:c5:af:0e:ff:dc:3e:64:d1:ff:5e:
                    ee:1a:48:69:fe:75:5e:40:7d:9d:f8:79:49:63:8e:
                    4f:b1:62:de:a1:65:b4:46:f4:e8:a3:4d:99:7b:8a:
                    7e:9a:d1:4a:d6:67:d9:85:ef:02:1a:54:27:10:80:
                    dd:75:33:87:79:c2:90:6f:51:bd:65:89:85:79:b5:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B2:20:DB:88:46:EA:3F:77:56:2E:30:44:A4:EA:66:32:46:00:57
            X509v3 Authority Key Identifier:
                keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:4a:9b:8e:3f:6b:9e:46:fc:cd:d2:bb:46:3d:5a:7a:13:33:
         86:1d:27:5c:ee:ec:c7:ae:4f:9f:c2:e3:21:49:9e:f1:52:17:
         b8:6c:b6:06:f8:bc:ea:07:10:a5:c1:35:76:92:13:f5:ae:b5:
         14:6b:a6:d5:03:24:d8:16:4c:0c:81:2c:af:06:14:2f:7e:5d:
         25:29:63:f9:14:db:41:68:a0:06:1d:53:42:f2:a5:73:05:d8:
         e6:bc:8d:5f:b7:d3:da:85:27:80:70:08:d7:02:9b:05:6b:cf:
         05:3d:16:c9:8f:23:de:6d:f9:7b:ef:a8:d0:2b:12:70:d4:4a:
         f6:2a:17:94:2f:92:f6:b9:58:08:ad:40:c6:a5:ed:b5:92:d3:
         ce:2d:c1:8d:8a:d6:42:2f:63:6e:45:72:de:5f:65:7e:ab:2e:
         9c:0f:8b:85:c5:30:d8:d8:7f:fc:e9:42:f3:88:1d:f9:a4:94:
         97:ca:06:f7:2c:fd:99:3a:15:20:8f:ed:3c:18:27:df:85:bb:
         c8:b6:4e:1a:96:fc:90:fa:c0:50:57:34:55:4a:b2:92:72:8f:
         02:2b:23:03:16:63:9b:3e:33:2e:a7:37:80:c0:62:ca:bf:1d:
         fc:37:88:52:59:42:53:90:6d:42:85:27:fc:be:48:db:a1:76:
         9a:b9:07:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:54:33 2026 by rpki-client