This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
File:                     VVmDGtzt7KX6kvxOtdLt5i43qM0.mft (raw, json)
Hash identifier:          CfK2z1epGBfFpe+SGiASZU9p53nbeMnD96M7oZNn3VM=
Subject key identifier:   0E:55:DC:C7:67:8F:7A:A9:F8:AC:06:C4:D5:F6:D8:60:BA:20:20:76
Authority key identifier: 55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD
Certificate issuer:       /CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
Manifest number:          0175
Signing time:             Sun 25 Jan 2026 03:06:52 +0000
Manifest this update:     Sun 25 Jan 2026 03:06:51 +0000
Manifest next update:     Sun 01 Feb 2026 03:06:51 +0000
Files and hashes:         1: VVmDGtzt7KX6kvxOtdLt5i43qM0.crl (hash: y+22RcsSogNi+e9HUYgMdYdQAEr8WrTs3XXVE2z55eo=)
                          2: B96DD308BF4311EE844DDD58C4F9AE02.roa (hash: Qyo+y73YZI83wemHD69A6cWahcYB7AOwFIX0fbO5DQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl
                          rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB2EB, serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD
        Validity
            Not Before: Jan 25 03:06:51 2026 GMT
            Not After : Feb  1 03:06:51 2026 GMT
        Subject: CN=697588cc-58ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:63:a3:88:4f:5e:b0:fc:ba:2f:dd:aa:f5:
                    d4:a2:71:c7:61:3c:bf:56:d6:b2:71:4c:c9:f8:9a:
                    b1:f4:a8:79:c7:a2:2c:b2:2b:41:37:87:a8:c4:e3:
                    df:41:85:67:e5:07:80:f3:bf:19:94:93:b5:78:19:
                    48:e4:30:30:78:cc:1c:a1:28:77:9d:4a:90:12:4b:
                    34:24:d6:0e:49:ac:21:2e:d6:f2:2e:94:c1:a5:27:
                    13:e4:f1:54:38:d9:75:6d:b0:9a:52:ab:8b:b2:94:
                    48:31:7a:69:09:58:f0:4b:78:25:23:34:bc:75:93:
                    4b:6f:31:32:73:b9:b0:40:49:93:25:de:17:cf:13:
                    a6:ab:b1:64:cb:7a:44:12:22:67:77:c6:53:10:41:
                    42:3b:39:ad:a5:28:69:b4:31:65:80:70:9b:02:f6:
                    4a:8d:15:36:9e:5b:02:76:98:cc:d9:91:67:92:c3:
                    df:15:d1:80:bb:09:21:e9:f8:fa:b8:80:29:c4:77:
                    a2:e6:4f:32:d6:66:df:f2:d4:22:ac:c3:8d:a6:9f:
                    0a:ab:b1:fa:cc:a1:11:59:84:b7:23:83:be:ec:24:
                    c6:90:09:9a:a6:6d:42:ff:d7:b3:f4:b6:8d:cb:24:
                    f6:43:de:c2:06:d6:e8:c9:de:3e:92:28:0f:e4:82:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:55:DC:C7:67:8F:7A:A9:F8:AC:06:C4:D5:F6:D8:60:BA:20:20:76
            X509v3 Authority Key Identifier:
                keyid:55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f8:2d:ff:3d:43:8a:42:54:28:a7:e6:d5:33:f9:da:f6:9b:
         1f:1e:3f:30:fa:bb:d0:8a:de:cd:6d:fc:23:dc:2c:68:16:05:
         b4:0c:26:1c:bd:54:d7:78:ea:ba:63:e0:96:96:dc:75:2f:6a:
         db:f1:b6:94:db:36:dd:2e:7d:cc:4b:19:7b:92:d6:12:0c:3d:
         9a:1d:d8:3d:da:42:27:0c:fa:dd:bf:ed:52:ec:b4:99:d3:1f:
         e5:55:6b:0e:55:b0:7c:bc:d6:0b:27:a0:b8:2f:0d:db:6e:74:
         c7:c7:e8:46:76:81:9e:7a:5e:c1:d9:77:f4:2c:ee:9e:b4:f8:
         dc:b0:c0:bd:53:1c:7a:26:f5:ac:9b:c9:04:e3:90:94:ab:74:
         c8:3c:15:0a:4f:b2:69:8a:28:d9:f2:28:67:38:86:29:48:c5:
         26:cc:b0:0d:90:0f:0e:84:58:a2:eb:fc:c1:ee:aa:a9:68:82:
         31:f7:4c:7f:e3:1d:53:f5:cb:9a:f9:69:9a:f1:f2:fb:ce:b4:
         cc:de:17:0f:83:65:51:59:b6:1f:bf:1b:0e:22:1c:f3:bb:7c:
         08:48:5f:e5:38:39:76:cc:09:0f:8c:b1:4a:13:a2:37:50:36:
         e0:5a:6d:b7:3c:8f:e4:9e:f2:69:23:20:91:87:d4:25:c4:5f:
         04:b8:19:92
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIyRUIxMTAvBgNVBAUTKDU1NTk4MzFBRENFREVDQTVGQTkyRkM0RUI1RDJFREU2
MkUzN0E4Q0QwHhcNMjYwMTI1MDMwNjUxWhcNMjYwMjAxMDMwNjUxWjAYMRYwFAYD
VQQDDA02OTc1ODhjYy01OGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqkxjo4hPXrD8ui/dqvXUonHHYTy/VtaycUzJ+Jqx9Kh5x6IssitBN4eoxOPf
QYVn5QeA878ZlJO1eBlI5DAweMwcoSh3nUqQEks0JNYOSawhLtbyLpTBpScT5PFU
ONl1bbCaUquLspRIMXppCVjwS3glIzS8dZNLbzEyc7mwQEmTJd4XzxOmq7Fky3pE
EiJnd8ZTEEFCOzmtpShptDFlgHCbAvZKjRU2nlsCdpjM2ZFnksPfFdGAuwkh6fj6
uIApxHei5k8y1mbf8tQirMONpp8Kq7H6zKERWYS3I4O+7CTGkAmapm1C/9ez9LaN
yyT2Q97CBtboyd4+kigP5IKE2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5V3Mdn
j3qp+KwGxNX22GC6ICB2MB8GA1UdIwQYMBaAFFVZgxrc7eyl+pL8TrXS7eYuN6jN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjJFQi80MzBCNUE3OEJG
NDMxMUVFOEZEMzA3NThDNEY5QUUwMi9WVm1ER3R6dDdLWDZrdnhPdGRMdDVpNDNx
TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZWbURHdHp0N0tYNmt2eE90ZEx0NWk0M3FNMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjJFQi80MzBCNUE3OEJGNDMxMUVFOEZEMzA3NThDNEY5QUUwMi9WVm1ER3R6dDdL
WDZrdnhPdGRMdDVpNDNxTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCG+C3/PUOKQlQop+bVM/na9psfHj8w+rvQit7Nbfwj3CxoFgW0DCYc
vVTXeOq6Y+CWltx1L2rb8baU2zbdLn3MSxl7ktYSDD2aHdg92kInDPrdv+1S7LSZ
0x/lVWsOVbB8vNYLJ6C4Lw3bbnTHx+hGdoGeel7B2Xf0LO6etPjcsMC9Uxx6JvWs
m8kE45CUq3TIPBUKT7JpiijZ8ihnOIYpSMUmzLANkA8OhFii6/zB7qqpaIIx90x/
4x1T9cua+Wma8fL7zrTM3hcPg2VRWbYfvxsOIhzzu3wISF/lODl2zAkPjLFKE6I3
UDbgWm23PI/knvJpIyCRh9QlxF8EuBmS
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:31 2026 by rpki-client