This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
File:                     vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json)
Hash identifier:          ms3Vc4idzqw4WroMetID5zxaw+sPULjAs6gdU1fLncM=
Subject key identifier:   A5:52:9E:BF:8A:0F:D0:4D:84:38:B9:23:4B:A7:EA:EB:7A:23:70:72
Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
Certificate issuer:       /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Certificate serial:       0CA9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
Manifest number:          0CA2
Signing time:             Sat 24 Jan 2026 18:01:27 +0000
Manifest this update:     Sat 24 Jan 2026 18:01:26 +0000
Manifest next update:     Sat 31 Jan 2026 18:01:26 +0000
Files and hashes:         1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: 93Y0/y8ibHT46QSQZWtP7iFSNo6H0ZkPVRjSrN195GI=)
                          2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: sizu4+OIZ/A8x9uQpAud/O4xnlom/Pk+/kkVVxPExzE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
                          rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3241 (0xca9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
        Validity
            Not Before: Jan 24 18:01:26 2026 GMT
            Not After : Jan 31 18:01:26 2026 GMT
        Subject: CN=697508f6-402e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:26:75:eb:1c:bf:46:2e:fe:1b:89:dc:b7:d9:
                    fb:63:e2:5d:35:af:44:65:81:a9:e0:b9:98:89:29:
                    b6:8e:73:85:16:4d:f2:cf:c4:c8:b7:02:88:21:a5:
                    d1:cb:9b:12:71:a5:69:8a:d4:34:d1:c7:12:3d:b7:
                    34:40:df:17:2f:df:a6:18:35:38:8d:48:1e:07:5f:
                    e3:7c:b6:70:1c:61:26:38:16:1c:dc:d3:48:98:87:
                    92:a2:21:67:ea:25:5a:b1:51:65:fe:ba:d3:7e:42:
                    b3:85:d2:53:0e:fa:ed:f2:e2:aa:a2:15:d9:a5:57:
                    c9:ea:a1:76:7a:ec:b4:45:bf:9c:ed:c7:c7:07:13:
                    bc:b1:2b:55:3d:97:4a:bc:fb:96:68:3e:b2:2a:0c:
                    f9:fa:cb:b6:10:97:2a:3a:d1:bb:ed:9d:7a:59:ba:
                    98:9b:7a:84:4a:43:62:2c:5a:42:2a:16:64:31:28:
                    cf:aa:75:11:5d:5c:29:1f:83:ba:67:5e:b5:e3:5e:
                    79:a8:6e:59:07:c5:39:1b:03:e9:da:97:b2:07:35:
                    3d:20:8f:f8:19:4e:a4:3f:e0:5e:a7:2f:8e:29:06:
                    c3:7c:ee:ae:8f:eb:34:11:a0:0a:4a:d9:4c:de:e9:
                    92:a8:58:dc:26:4c:c8:5c:6b:43:13:66:6a:36:a3:
                    d1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:52:9E:BF:8A:0F:D0:4D:84:38:B9:23:4B:A7:EA:EB:7A:23:70:72
            X509v3 Authority Key Identifier:
                keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:30:32:78:e6:99:07:22:01:fe:7b:ad:09:3c:5f:a9:f3:3d:
         4b:8a:89:77:d5:6b:19:0f:24:5d:48:5e:ca:a5:ed:b5:30:23:
         a7:91:16:3f:eb:09:c2:3a:c9:0f:fb:55:20:b3:1e:8b:2a:39:
         1b:9d:02:d6:0f:fc:a2:6e:ac:72:6f:6c:ad:e5:08:c1:1a:fa:
         40:3a:b8:1d:0c:0b:8a:bd:f8:a2:fd:67:8a:d3:41:12:30:6d:
         a3:96:7b:b2:dc:85:c9:74:7b:60:3c:63:a7:74:6a:29:5d:8f:
         f7:d9:51:68:2e:95:ac:90:62:ab:ec:61:18:b0:d4:ca:7c:ef:
         f5:22:3f:90:30:a6:a6:a2:95:4e:0d:15:9c:8f:f3:a0:a4:15:
         e9:07:22:b2:9f:68:b2:80:02:84:ea:ba:3b:78:b2:13:10:05:
         fc:27:33:4c:3d:e1:cf:f5:15:83:e5:cc:99:70:f1:54:82:2c:
         90:b3:d4:1d:16:f9:0a:5d:4e:11:45:f6:84:e6:d7:e8:9d:61:
         e3:ff:bc:d8:2d:40:17:a1:30:39:32:55:d6:a4:20:ce:e8:46:
         97:e9:fd:2e:ad:8a:a0:5b:a1:fc:35:ac:fb:64:09:41:12:8b:
         41:c6:79:6f:0e:77:a2:3c:0f:ce:0a:6b:69:49:1e:09:e0:79:
         7e:c7:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:07:21 2026 by rpki-client