This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
File:                     vrCjIjTRl23j3iJaVReALbYTqLY.mft (raw, json)
Hash identifier:          luKJYVowi2cFM8sKmI85RvvdaFK0pAa65aAdhCqO7Yg=
Subject key identifier:   B1:3D:AF:A1:7C:88:AA:D8:23:DC:1B:B2:3B:EB:BF:84:58:A3:6B:9B
Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6
Certificate issuer:       /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
Certificate serial:       0632
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
Manifest number:          062C
Signing time:             Sat 24 Jan 2026 22:02:16 +0000
Manifest this update:     Sat 24 Jan 2026 22:02:15 +0000
Manifest next update:     Sat 31 Jan 2026 22:02:15 +0000
Files and hashes:         1: vrCjIjTRl23j3iJaVReALbYTqLY.crl (hash: oUTpBJlMjVlRFGOPeoSyBds8RRzGjmjbvBZp4SpMxdk=)
                          2: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (hash: 3VhvbAFpyQFgzK9qGDlGhCPjLIqfMEiNUYNuSiAIv58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl
                          rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1586 (0x632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF17B, serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
        Validity
            Not Before: Jan 24 22:02:15 2026 GMT
            Not After : Jan 31 22:02:15 2026 GMT
        Subject: CN=69754168-7e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a3:ca:6b:bf:90:cf:9b:1a:db:19:34:db:38:
                    0a:de:09:7b:f4:2b:ee:dc:10:6e:3d:56:c5:b8:f2:
                    a4:25:d9:f6:f8:bf:b9:13:58:c2:39:ce:38:f2:9f:
                    e1:f6:de:fb:b2:eb:3a:3d:05:f0:e7:f5:2d:bc:11:
                    2b:4e:a7:ef:2c:11:d1:82:c2:a8:03:c8:97:4f:52:
                    94:ca:3d:c0:19:43:78:8d:ee:c7:7b:c5:25:07:e3:
                    1a:b2:42:6b:e1:99:4e:19:14:4f:eb:1e:55:f5:53:
                    77:13:c0:8a:6f:15:ec:65:a6:53:45:90:56:de:8a:
                    23:ba:3b:9f:d3:84:aa:3a:26:32:e2:48:73:bf:58:
                    60:9a:16:48:bb:a2:7c:7e:9e:d3:34:93:c5:5a:5c:
                    91:aa:48:63:1e:22:ee:03:ea:8b:db:24:c8:47:a8:
                    d9:4f:16:69:8c:37:9c:f2:83:5d:74:79:b4:f1:e0:
                    b3:1e:1d:d0:27:ac:ec:f7:c3:72:eb:40:f2:34:8f:
                    9e:bf:72:2a:3d:00:3a:5d:9f:a2:d8:22:24:77:07:
                    d7:77:b5:b1:c5:2f:31:3b:ea:a4:31:c2:cc:db:e9:
                    b3:8e:72:0d:09:42:94:98:5a:ba:a8:88:77:30:ec:
                    19:25:2b:3c:b5:3d:8f:ce:da:e4:4e:88:a3:f6:72:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3D:AF:A1:7C:88:AA:D8:23:DC:1B:B2:3B:EB:BF:84:58:A3:6B:9B
            X509v3 Authority Key Identifier:
                keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:95:be:ac:38:6f:87:2c:ed:8d:a2:ca:34:f7:3c:59:f7:a0:
         72:78:3a:5e:cd:cf:0d:55:4a:4a:37:57:4e:54:d6:da:a2:30:
         4a:c2:be:4c:7d:f2:50:f0:94:bd:5c:f5:b7:f5:37:8a:36:95:
         3c:82:7f:4b:96:ed:d5:5e:f6:4a:f8:86:8f:ed:d5:bd:b3:ff:
         4b:54:b7:17:e1:c3:75:da:41:d4:43:16:5f:4b:fa:46:ea:a6:
         25:c4:9c:0c:d7:39:0d:09:47:04:55:89:c1:a6:ad:44:a1:17:
         07:eb:f1:18:21:5e:74:8c:c7:de:8d:16:3a:be:37:b8:c8:e1:
         cd:03:d2:40:ea:41:1a:e6:8e:77:4e:b9:0f:bb:fc:92:fe:42:
         17:7a:bf:5c:0e:af:d0:cf:b9:62:64:31:c1:34:68:51:7b:d4:
         71:c9:d9:4d:3f:eb:c5:12:d9:3f:b8:76:c9:a1:63:38:38:c0:
         56:c7:5a:4d:7a:09:6b:f8:a9:f1:f3:03:8b:e5:e3:0a:85:3f:
         92:b0:7d:51:cf:20:21:de:c3:c9:75:9b:da:ad:f4:46:37:f5:
         a7:f3:79:ff:b2:2a:78:8e:8e:55:cb:f6:0b:a3:0c:82:16:03:
         34:7f:7d:4f:ea:1c:53:5b:a0:15:e0:13:5c:c2:cf:de:8f:5c:
         10:b4:7b:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYxN0IxMTAvBgNVBAUTKEJFQjBBMzIyMzREMTk3NkRFM0RFMjI1QTU1MTc4MDJE
QjYxM0E4QjYwHhcNMjYwMTI0MjIwMjE1WhcNMjYwMTMxMjIwMjE1WjAYMRYwFAYD
VQQDDA02OTc1NDE2OC03ZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3KPKa7+Qz5sa2xk02zgK3gl79Cvu3BBuPVbFuPKkJdn2+L+5E1jCOc448p/h
9t77sus6PQXw5/UtvBErTqfvLBHRgsKoA8iXT1KUyj3AGUN4je7He8UlB+MaskJr
4ZlOGRRP6x5V9VN3E8CKbxXsZaZTRZBW3oojujuf04SqOiYy4khzv1hgmhZIu6J8
fp7TNJPFWlyRqkhjHiLuA+qL2yTIR6jZTxZpjDec8oNddHm08eCzHh3QJ6zs98Ny
60DyNI+ev3IqPQA6XZ+i2CIkdwfXd7WxxS8xO+qkMcLM2+mzjnINCUKUmFq6qIh3
MOwZJSs8tT2PztrkToij9nIYiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLE9r6F8
iKrYI9wbsjvrv4RYo2ubMB8GA1UdIwQYMBaAFL6woyI00Zdt494iWlUXgC22E6i2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE3Qi9FQjAyNzdGQ0M3
N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwyM2ozaUphVlJlQUxiWVRx
TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZyQ2pJalRSbDIzajNpSmFWUmVBTGJZVHFMWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjE3Qi9FQjAyNzdGQ0M3N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwy
M2ozaUphVlJlQUxiWVRxTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAclb6sOG+HLO2Noso09zxZ96ByeDpezc8NVUpKN1dOVNbaojBKwr5M
ffJQ8JS9XPW39TeKNpU8gn9Llu3VXvZK+IaP7dW9s/9LVLcX4cN12kHUQxZfS/pG
6qYlxJwM1zkNCUcEVYnBpq1EoRcH6/EYIV50jMfejRY6vje4yOHNA9JA6kEa5o53
TrkPu/yS/kIXer9cDq/Qz7liZDHBNGhRe9RxydlNP+vFEtk/uHbJoWM4OMBWx1pN
eglr+Knx8wOL5eMKhT+SsH1RzyAh3sPJdZvarfRGN/Wn83n/sip4jo5Vy/YLowyC
FgM0f31P6hxTW6AV4BNcws/ej1wQtHtb
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:23 2026 by rpki-client