This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
File:                     T_VN6rrUlFWSUQEqpawiKVDLJh4.mft (raw, json)
Hash identifier:          caLpUYMObrZncFtM7frY6I3/6zib787rla0im33/rRU=
Subject key identifier:   61:B6:37:D2:5E:68:69:CE:0A:DE:42:98:53:33:F7:87:E5:19:64:8B
Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E
Certificate issuer:       /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
Manifest number:          A3
Signing time:             Sun 25 Jan 2026 05:28:28 +0000
Manifest this update:     Sun 25 Jan 2026 05:28:27 +0000
Manifest next update:     Sun 01 Feb 2026 05:28:27 +0000
Files and hashes:         1: T_VN6rrUlFWSUQEqpawiKVDLJh4.crl (hash: smHH/T0j7q3Sg7aJ9hnPSCwp1+lzD93NmSGvrI1tLp8=)
                          2: B66603C6025C11F0BDF41912C4F9AE02.roa (hash: PofId3a0j3rHUvyy949KyEekIyYkoZzi18JBnT3rS3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl
                          rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B38F5, serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
        Validity
            Not Before: Jan 25 05:28:27 2026 GMT
            Not After : Feb  1 05:28:27 2026 GMT
        Subject: CN=6975a9fc-d633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:b1:2f:cb:81:93:4b:b2:cf:45:f1:4c:65:
                    fb:18:09:fe:49:ea:d3:63:d3:5e:89:cf:09:45:9f:
                    4c:be:22:c7:85:ff:9e:d4:a7:ef:40:f3:e7:ca:69:
                    89:89:64:b8:4b:ea:eb:83:ec:6a:30:54:01:b1:e1:
                    c1:2e:f0:e6:6e:b5:a3:37:ce:2c:98:17:48:76:a6:
                    76:6e:2c:3c:47:ca:21:d1:42:50:7a:9a:32:09:fa:
                    55:0f:f8:5d:43:9e:9f:96:a6:37:8b:f8:80:d8:21:
                    7e:54:57:25:d9:e1:87:dc:2d:33:36:19:b7:a6:7d:
                    06:d3:ca:fa:48:0d:3a:20:1e:42:0b:06:50:ae:6d:
                    7f:2e:0b:bb:36:53:88:e8:f7:da:8d:4a:d2:07:24:
                    3d:dd:e0:8d:18:08:1a:b3:0e:e8:1f:87:75:fa:f4:
                    3d:7a:64:ea:81:4a:24:21:31:27:e6:de:5e:d1:67:
                    e1:bb:51:0d:49:11:a0:34:45:de:67:0f:35:4a:ee:
                    1a:ff:06:cb:d4:6a:aa:b0:25:63:bc:1a:f4:97:ad:
                    ac:2c:f2:a4:f9:8d:60:27:9a:e6:5e:cf:0e:a6:bb:
                    70:64:f0:a3:13:55:b9:fa:df:cc:b1:99:da:ac:7f:
                    e4:d9:41:ad:19:a8:b2:1d:3f:11:2a:ed:08:04:ec:
                    5e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B6:37:D2:5E:68:69:CE:0A:DE:42:98:53:33:F7:87:E5:19:64:8B
            X509v3 Authority Key Identifier:
                keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d5:dc:93:1e:cc:27:d5:90:2e:db:f8:c8:c2:2b:21:c3:9f:
         35:d0:da:81:a7:79:57:46:03:1c:88:2f:dd:d4:c1:c3:11:d9:
         ba:ec:d1:da:db:15:21:c8:69:cd:e2:84:36:6f:95:cf:14:64:
         ca:c4:91:35:74:49:eb:68:4f:a1:63:93:1c:14:ba:8e:5a:48:
         50:16:14:f3:8c:bb:88:7a:a7:81:8f:ad:27:3d:24:d3:7a:30:
         c9:68:71:95:ba:8a:98:79:27:b2:64:14:6e:72:19:fe:95:80:
         a9:d5:81:65:23:90:43:af:c6:fc:24:19:7c:38:d2:8b:d1:54:
         68:c4:40:07:a8:76:5b:93:49:58:d9:5c:82:a7:1e:b2:5d:f7:
         86:d8:8b:31:b8:73:f8:56:f7:7c:b5:0d:59:b5:28:e3:fd:f9:
         b6:6f:7d:25:b0:3b:e1:a0:35:0f:8d:ac:3c:20:c2:bc:bf:67:
         1f:d6:a8:bf:a7:54:6c:15:71:e5:f4:c5:53:34:79:90:82:22:
         68:8d:1c:a4:5c:b1:99:8a:3c:38:8b:67:d0:89:09:2c:17:2c:
         ec:f3:9c:1a:78:83:f8:f2:d5:a9:c2:f4:b8:7f:8d:9b:ca:d7:
         e7:19:01:d5:76:2d:b0:fc:10:7a:bb:cf:bc:2a:53:99:21:1a:
         8a:82:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:02 2026 by rpki-client