This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
File:                     RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json)
Hash identifier:          Nsc4NuWlrhW7Bo8Bvih1PkZ+WntelbGZvUuLxnAxxmg=
Subject key identifier:   05:B2:2F:E1:82:C7:81:59:1C:A8:99:35:89:1D:68:93:C0:EE:52:49
Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5
Certificate issuer:       /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
Certificate serial:       0BEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
Manifest number:          0BCF
Signing time:             Sat 24 Jan 2026 18:30:50 +0000
Manifest this update:     Sat 24 Jan 2026 18:30:49 +0000
Manifest next update:     Sat 31 Jan 2026 18:30:49 +0000
Files and hashes:         1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: vzqBPbx2cJmhN1dgN8RBd7pVuU9je5/kYLwZZGXdqDQ=)
                          2: 3C726724C06211EC93514712C4F9AE02.roa (hash: XklDOLYMfLViKkHUeT6z/7hV3PEW4lkSoZ2mUu3ko0Y=)
                          3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: ep/NR5+KsXHxM/fL5lTu5X9ahtnO2No4DOGzWzbPKmU=)
                          4: C8F47C68CA7D11F08981F02FC4F9AE02.roa (hash: e5DBtqxJDWJc4vujvXjvcxyklV7lxZkFhryMxjOEwtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl
                          rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3054 (0xbee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
        Validity
            Not Before: Jan 24 18:30:49 2026 GMT
            Not After : Jan 31 18:30:49 2026 GMT
        Subject: CN=69750fd9-2284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:8a:8e:9a:66:20:fc:28:7f:84:77:24:4f:
                    ef:2d:4d:78:07:c8:89:1b:da:ad:09:d6:1e:b2:b4:
                    a4:10:22:c1:54:18:60:b5:8a:bf:ce:e2:eb:56:f7:
                    78:9d:1c:d6:6c:b4:1e:4a:dd:ff:07:10:8e:31:9f:
                    fd:ae:4a:7e:d9:1b:32:1f:85:1e:45:ed:a5:0c:4d:
                    02:9b:cf:c9:da:5a:5e:67:32:27:41:90:e9:33:a1:
                    66:79:22:46:b5:fa:b3:fc:9e:b3:27:b8:ff:9f:6a:
                    de:83:9d:1e:c5:88:d1:cb:5d:52:2c:88:ec:90:c7:
                    e7:39:a7:15:f2:0a:86:3b:67:fa:90:84:eb:27:58:
                    52:db:05:e5:01:de:7a:19:78:a6:a6:91:e2:04:5c:
                    90:c5:b5:5b:4e:0f:df:4e:0e:15:10:f1:62:7d:d6:
                    8c:d4:b2:e7:e8:8e:18:55:6f:65:7a:a5:60:dd:48:
                    96:56:0b:05:5d:a0:6d:62:6c:57:4f:8c:6f:2b:c9:
                    34:24:e2:41:94:a9:85:9b:27:7e:7a:d2:9b:1b:77:
                    cb:61:9f:21:82:2c:6f:5f:fa:50:85:83:3a:40:68:
                    b2:76:f8:99:23:0a:f5:cc:83:b2:d9:7a:f7:f0:b5:
                    2b:f1:9b:38:72:f9:70:67:81:ff:7d:f6:7c:c3:f6:
                    41:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B2:2F:E1:82:C7:81:59:1C:A8:99:35:89:1D:68:93:C0:EE:52:49
            X509v3 Authority Key Identifier:
                keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ac:37:c8:ea:8a:09:7f:25:c5:1f:03:2e:61:14:79:ae:1e:
         22:75:e9:f0:54:71:57:bc:82:ad:4c:6d:f7:9c:c7:68:d4:17:
         1a:dc:9b:79:2b:c2:57:fb:4f:48:31:a1:65:16:01:ce:4b:2e:
         4c:7e:c1:06:87:f2:cb:0f:df:c1:92:64:94:cc:87:29:dd:09:
         46:4d:3c:68:84:d9:8d:e1:0a:db:7b:bf:93:30:0b:98:54:41:
         2f:42:38:89:4c:5b:92:c3:ff:a9:a8:6b:cc:00:7c:7d:39:7a:
         09:a8:0f:96:1e:9d:8d:50:20:3b:99:05:1f:b6:51:97:f7:db:
         db:fe:75:1c:f0:f9:81:f1:e1:a5:80:7f:58:cf:04:b7:25:4e:
         57:eb:9e:ec:a0:29:9e:85:50:39:89:77:cf:94:1e:62:35:68:
         c1:ad:d0:d3:5e:35:f2:39:c6:34:5a:da:69:f7:4e:5b:12:83:
         3c:df:24:21:1a:a6:96:fb:43:0b:90:fe:cb:ad:af:e8:93:88:
         86:c1:e2:1f:71:92:b0:ae:20:2f:3b:6a:b9:8b:bf:00:28:b6:
         14:d3:04:a1:69:b5:3f:1e:1f:1b:57:f5:65:c9:22:1d:d3:ce:
         ce:c7:65:60:ab:ee:d2:11:0d:e7:84:38:4c:53:41:87:46:0a:
         db:c1:c2:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF
NkI3OTQwRDUwHhcNMjYwMTI0MTgzMDQ5WhcNMjYwMTMxMTgzMDQ5WjAYMRYwFAYD
VQQDDA02OTc1MGZkOS0yMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqpiKjppmIPwof4R3JE/vLU14B8iJG9qtCdYesrSkECLBVBhgtYq/zuLrVvd4
nRzWbLQeSt3/BxCOMZ/9rkp+2RsyH4UeRe2lDE0Cm8/J2lpeZzInQZDpM6FmeSJG
tfqz/J6zJ7j/n2reg50exYjRy11SLIjskMfnOacV8gqGO2f6kITrJ1hS2wXlAd56
GXimppHiBFyQxbVbTg/fTg4VEPFifdaM1LLn6I4YVW9leqVg3UiWVgsFXaBtYmxX
T4xvK8k0JOJBlKmFmyd+etKbG3fLYZ8hgixvX/pQhYM6QGiydviZIwr1zIOy2Xr3
8LUr8Zs4cvlwZ4H/ffZ8w/ZBHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWyL+GC
x4FZHKiZNYkdaJPA7lJJMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4
NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z
cnhFdHgydGZYZm5tdDVRTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4rDfI6ooJfyXFHwMuYRR5rh4idenwVHFXvIKtTG33nMdo1Bca3Jt5
K8JX+09IMaFlFgHOSy5MfsEGh/LLD9/BkmSUzIcp3QlGTTxohNmN4Qrbe7+TMAuY
VEEvQjiJTFuSw/+pqGvMAHx9OXoJqA+WHp2NUCA7mQUftlGX99vb/nUc8PmB8eGl
gH9YzwS3JU5X657soCmehVA5iXfPlB5iNWjBrdDTXjXyOcY0Wtpp905bEoM83yQh
GqaW+0MLkP7Lra/ok4iGweIfcZKwriAvO2q5i78AKLYU0wShabU/Hh8bV/VlySId
087Ox2Vgq+7SEQ3nhDhMU0GHRgrbwcJz
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:05 2026 by rpki-client