This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
File:                     vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json)
Hash identifier:          6LWxDrX/YRf1iQNoiIOo7zNDkEW6p1PSVnjyXFYitVY=
Subject key identifier:   F0:91:BC:D9:B9:6A:2D:DC:A0:9D:A3:C2:64:E2:2B:15:0B:F5:68:DA
Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B
Certificate issuer:       /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B
Certificate serial:       070E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
Manifest number:          0709
Signing time:             Sat 24 Jan 2026 21:12:16 +0000
Manifest this update:     Sat 24 Jan 2026 21:12:15 +0000
Manifest next update:     Sat 31 Jan 2026 21:12:15 +0000
Files and hashes:         1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: aB6StAj6efY7sDasU4SfVxvACO28wkRteHv6pZAk/Qc=)
                          2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: I+eEa2BCG1ocgDoHBOIM7GqSJBtmqFy6z+9Rb7P5WKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl
                          rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1806 (0x70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B
        Validity
            Not Before: Jan 24 21:12:15 2026 GMT
            Not After : Jan 31 21:12:15 2026 GMT
        Subject: CN=697535b0-0d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:54:ad:81:4e:a2:02:bc:cc:37:69:81:44:
                    72:c1:ae:35:a6:70:75:a6:07:b7:a3:30:8c:4d:7d:
                    16:f7:10:98:16:04:bb:ae:ff:e9:88:a1:fd:1b:8d:
                    e5:2a:48:ce:b9:33:d1:64:6a:9b:a5:51:93:06:38:
                    b3:53:17:91:0f:91:0e:a7:38:bd:22:8a:82:91:58:
                    5b:3d:f4:85:8e:29:83:f5:cf:f9:91:ef:ff:a9:2c:
                    09:de:e3:ce:83:49:51:33:b6:91:6d:b3:bd:f0:da:
                    84:f7:b8:32:db:87:a1:37:9d:5e:06:b8:cc:48:0f:
                    e7:41:20:96:95:34:5d:45:07:c6:cd:2e:81:80:7c:
                    dc:d0:3d:01:8f:e8:65:9b:63:5a:9f:50:6e:0a:e4:
                    08:34:60:b3:5b:91:37:63:05:a9:3f:41:96:28:74:
                    05:06:ec:25:71:34:5d:39:d9:f4:12:b9:57:27:1a:
                    85:0c:2d:15:8f:db:7f:56:2e:a0:cf:ca:3a:69:b0:
                    47:81:a3:51:58:28:41:96:31:fa:42:d7:0c:d9:44:
                    62:c4:c4:a3:d5:21:aa:37:43:d1:d4:38:e9:06:64:
                    e7:7d:17:39:fd:74:1a:50:19:16:8e:fa:1f:e1:e1:
                    0c:51:4c:fc:17:7a:11:75:da:fe:7d:d1:0c:5a:9d:
                    06:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:91:BC:D9:B9:6A:2D:DC:A0:9D:A3:C2:64:E2:2B:15:0B:F5:68:DA
            X509v3 Authority Key Identifier:
                keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ec:a6:bd:90:86:0d:8a:aa:53:fc:fa:f7:04:5a:58:cf:ed:
         b3:25:66:4b:81:ff:27:0f:8a:d1:49:4e:ab:0b:08:8f:19:a4:
         7e:9c:f8:ac:5e:9e:d8:01:de:f2:2e:e3:66:3e:4f:73:0a:04:
         0c:18:6d:e0:35:10:08:4c:ae:04:9f:b5:7b:47:16:58:72:34:
         20:fa:cb:30:8c:a4:45:99:a2:98:03:7c:ac:a0:45:de:8a:0f:
         43:f3:bb:a4:91:49:80:b7:a4:5b:8c:9d:78:70:ac:91:74:73:
         5a:45:35:61:44:c1:03:5e:a1:5f:68:d7:d6:9a:8e:51:af:dc:
         f8:f9:ea:39:34:a3:ae:d4:60:9d:87:e1:de:6f:4b:37:26:2b:
         6a:65:8e:2d:1d:e1:82:6f:7c:8d:ea:9b:31:2c:2b:1f:0c:4b:
         67:79:20:88:f7:01:e1:71:3c:8b:77:53:a8:0f:0a:2a:f1:ca:
         25:dc:94:01:0e:cc:40:13:a0:40:b2:01:56:4b:e7:70:88:20:
         42:72:51:f7:01:64:eb:73:d4:04:4a:b8:60:01:52:d3:99:21:
         4b:57:77:7b:14:bc:49:69:ee:b5:4e:56:02:ce:fe:f6:3b:f8:
         b8:51:a9:6f:16:2a:6f:e6:d9:11:36:ec:7c:a2:24:a9:83:a7:
         5d:7c:c1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:23:37 2026 by rpki-client