This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
File:                     VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json)
Hash identifier:          mJw/qwWIJUK+tbi0nLDJ7zDfXzmowcAmWsqND3PNvB0=
Subject key identifier:   7C:DF:60:8F:97:87:FC:FE:44:A7:F4:89:64:FC:06:8E:5D:73:FF:C7
Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC
Certificate issuer:       /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC
Certificate serial:       1CD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
Manifest number:          51CE
Signing time:             Sat 24 Jan 2026 15:07:53 +0000
Manifest this update:     Sat 24 Jan 2026 15:07:52 +0000
Manifest next update:     Sat 31 Jan 2026 15:07:52 +0000
Files and hashes:         1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: ppg6lTwfEBdt97xtpBrsG/pnWQ/yjKom7C3V8uFDlno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7380 (0x1cd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC
        Validity
            Not Before: Jan 24 15:07:52 2026 GMT
            Not After : Jan 31 15:07:52 2026 GMT
        Subject: CN=6974e049-f309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:2c:61:c2:67:9e:03:83:8e:2c:1a:e7:e6:
                    19:a8:37:a6:26:a7:a3:a1:68:43:8a:bc:a5:53:6a:
                    fb:20:40:92:34:7a:6b:46:0b:c5:9a:38:02:b2:c8:
                    28:33:71:05:e4:9d:5e:2b:8a:3a:e5:72:64:5e:41:
                    70:10:82:14:df:e3:47:8d:6c:5e:4e:70:a4:f1:19:
                    8d:88:25:a5:fc:d5:65:e5:c9:db:af:c3:dd:ff:0c:
                    12:91:3c:e9:c5:e4:a2:dd:f9:60:60:d9:39:09:b7:
                    7d:07:4b:43:28:d4:da:02:f5:9d:33:6d:4e:99:81:
                    31:36:94:74:ab:39:77:95:f4:f8:13:ff:7a:90:88:
                    d2:d4:66:91:c9:2b:e2:fb:c0:65:e3:6d:d2:f9:ba:
                    39:68:47:0d:f5:2f:d9:a2:9b:33:69:1e:5b:dc:25:
                    b6:f1:85:b9:8a:45:c8:f9:d5:75:a7:1e:d1:6d:4a:
                    97:f0:70:22:4d:1b:5b:89:6d:59:15:d9:52:1f:0a:
                    db:ee:91:27:ff:45:ca:96:a6:1e:ac:5d:c3:be:41:
                    e9:c9:a3:92:13:34:e6:98:15:f7:b7:f9:86:84:44:
                    95:91:92:9c:2e:0f:06:0d:b8:26:93:57:89:08:33:
                    c1:b7:7f:1c:2b:38:fb:f6:b1:de:51:22:ee:42:92:
                    d9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DF:60:8F:97:87:FC:FE:44:A7:F4:89:64:FC:06:8E:5D:73:FF:C7
            X509v3 Authority Key Identifier:
                keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6b:67:da:ab:e9:47:cd:15:7f:15:ad:b3:97:48:a3:6c:97:
         b6:16:7b:53:93:9a:45:05:73:87:6f:52:99:ee:49:2a:c9:a4:
         cc:72:4e:a1:92:c5:78:ec:2a:07:e7:93:4e:5d:43:9d:cf:75:
         f1:50:39:40:98:19:86:1d:8f:42:e9:bc:be:3a:0b:13:e9:cb:
         24:53:11:c4:40:d3:02:e0:40:95:e5:8f:21:ea:bb:cc:1c:54:
         e2:bf:d9:56:25:9b:d2:56:b9:f1:e7:19:21:fd:2b:74:40:34:
         74:61:da:d6:07:b5:41:a3:8e:e4:00:ef:9f:f6:97:6b:39:0c:
         59:2a:b9:3b:3f:7b:8c:b1:23:bb:7e:ec:71:cf:6f:29:4a:93:
         48:c7:07:b0:a5:85:9f:96:97:9c:ab:e3:e5:8f:10:b6:ee:e7:
         72:77:02:cb:49:52:5e:48:5e:86:30:61:e5:4c:d5:5b:c5:b9:
         6b:ea:1f:9f:26:a1:1d:77:ed:df:a4:3b:2e:39:bf:98:05:69:
         e6:73:c8:58:ff:24:e3:70:47:31:b6:d8:6c:13:10:7a:2b:55:
         76:de:78:20:bb:57:f1:ef:86:fe:ef:01:8b:aa:a1:16:a3:4d:
         fe:bd:8b:89:72:44:48:02:89:7a:16:6a:85:d4:34:72:b2:a6:
         ed:36:ad:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:36:04 2026 by rpki-client