This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File:                     vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier:          ezgIZnbXIYFfUUHlE0UnheW8bfzoWLeCC82q/DxUz18=
Subject key identifier:   7E:2D:A4:8B:9C:EF:EC:F6:1C:C1:90:ED:43:3A:2D:D2:B7:04:AF:8A
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer:       /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial:       016E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number:          0158
Signing time:             Fri 23 Jan 2026 03:30:06 +0000
Manifest this update:     Fri 23 Jan 2026 03:30:05 +0000
Manifest next update:     Fri 30 Jan 2026 03:30:05 +0000
Files and hashes:         1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: yDbi7AmKsmTaS6kg4TnHS+HfpkwoctC8VwLFo5db6lE=)
                          2: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=)
                          3: E08658208D2D11F09327643FC4F9AE02.roa (hash: 41FC6Qh9FHv4UtlaWBSLbf5ObxYVTSL2scuznbl1Qds=)
                          4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
                          rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
        Validity
            Not Before: Jan 23 03:30:05 2026 GMT
            Not After : Jan 30 03:30:05 2026 GMT
        Subject: CN=6972eb3e-707a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:86:10:45:81:5f:50:3a:fb:c3:05:aa:f9:
                    3f:27:1b:90:0c:3d:eb:ab:79:1a:5a:73:94:a9:6c:
                    56:77:09:7e:9a:a4:44:b3:51:5c:67:80:3f:16:b9:
                    95:48:c9:76:a4:c3:42:70:58:e1:36:13:d7:12:d3:
                    8b:1d:e6:94:fa:d3:38:bc:fc:05:e5:74:7c:27:9b:
                    dd:cc:f9:76:45:1e:d8:b4:50:61:1d:21:b8:bd:e4:
                    91:60:b6:d4:6a:5d:3e:75:b7:d9:c9:4a:56:e7:68:
                    ff:16:06:a4:43:1c:c7:5e:47:f4:3d:45:37:3f:a4:
                    f3:13:ae:91:f8:f1:dc:8e:66:47:31:fc:4c:b9:7c:
                    5f:0a:70:83:81:84:c9:56:d4:97:64:38:e3:ef:3d:
                    31:31:38:8a:03:8a:9a:66:f1:0f:88:4f:6d:20:4d:
                    86:27:83:09:cf:ac:0b:fe:8a:b9:9e:f5:cf:b6:9b:
                    c1:83:59:c1:02:ad:f2:b4:76:e0:a7:75:d8:1b:02:
                    4e:66:a3:f4:b9:fb:e7:e5:6e:2c:82:fa:c3:2b:a3:
                    05:00:9f:65:17:c6:e8:0f:c8:d7:a0:01:fe:b3:13:
                    49:e6:b9:7d:d9:eb:41:61:61:16:ae:04:4b:23:45:
                    51:b5:00:00:82:4a:9a:2a:73:4d:8f:7b:1e:bb:83:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2D:A4:8B:9C:EF:EC:F6:1C:C1:90:ED:43:3A:2D:D2:B7:04:AF:8A
            X509v3 Authority Key Identifier:
                keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:29:d9:63:68:a9:10:5b:93:c6:d6:9d:27:cb:58:e7:21:e2:
         85:0d:2a:90:3a:ae:dd:f4:74:d5:42:a1:1c:48:06:5e:80:5d:
         a3:cf:bf:ce:5e:2e:fd:3a:fb:28:63:a4:57:d9:86:21:6e:28:
         e2:22:85:46:e8:dd:d5:30:08:2b:06:7c:ed:23:8c:c7:e4:b6:
         dc:d1:f8:bc:45:e9:86:2d:1c:d5:43:6a:78:e0:63:8a:1a:6f:
         aa:b8:dd:1c:15:fa:fc:56:53:46:1e:ce:3e:67:10:16:d2:b1:
         86:e5:54:73:43:70:80:04:e0:47:45:11:9b:ec:a5:46:be:4a:
         9a:c0:98:1b:70:00:36:7e:e8:47:14:5a:7d:41:40:93:64:e4:
         84:9e:ad:ba:d1:fe:28:1d:66:97:f5:1b:d9:b9:0c:d7:f2:5e:
         da:14:3a:7b:85:ad:34:9f:9f:4e:4d:b9:0e:50:7f:e8:36:b2:
         f7:1c:22:58:23:b1:91:97:af:c1:a6:6c:36:aa:89:99:99:53:
         60:29:68:8b:b0:e6:87:98:62:7d:ef:aa:46:a2:d6:3a:e3:82:
         39:c8:34:a7:62:fb:51:68:af:a8:63:07:5e:6d:f1:0c:ff:1e:
         39:9f:bc:c6:bf:75:13:28:5d:b6:5d:8e:5c:82:7d:a1:88:2d:
         37:46:bb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:18 2026 by rpki-client