This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft
File:                     V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft (raw, json)
Hash identifier:          Cu1ZpIlR2tUE0QMTwNKoANOEL5efJlX3r3GdMkoFs8U=
Subject key identifier:   4F:EA:B3:F7:05:FA:00:6C:E0:CE:6C:BB:D0:BB:EB:08:9E:E0:87:11
Authority key identifier: 57:E7:59:DC:27:9B:54:6E:DA:81:B7:EF:DA:F5:57:85:16:B8:0A:FC
Certificate issuer:       /CN=A91D4190/serialNumber=57E759DC279B546EDA81B7EFDAF5578516B80AFC
Certificate serial:       0303
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft
Manifest number:          02FE
Signing time:             Sun 25 Jan 2026 00:23:19 +0000
Manifest this update:     Sun 25 Jan 2026 00:23:19 +0000
Manifest next update:     Sun 01 Feb 2026 00:23:19 +0000
Files and hashes:         1: V-dZ3CebVG7agbfv2vVXhRa4Cvw.crl (hash: eldX8Cw1I/Z1ItIYTLPEVbn0JvQzAdqM1Ni4OYNLgz8=)
                          2: D18B56F408DD11ED830BEB5CC4F9AE02.roa (hash: 4GuPHy/Lus1nkrgty0dsCrHIRZYa95o0Quv9w9TYCWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.crl
                          rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771 (0x303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4190, serialNumber=57E759DC279B546EDA81B7EFDAF5578516B80AFC
        Validity
            Not Before: Jan 25 00:23:19 2026 GMT
            Not After : Feb  1 00:23:19 2026 GMT
        Subject: CN=69756277-8322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:0a:fb:2c:be:34:1d:dd:fa:e0:71:ac:bb:
                    b9:85:15:fe:fc:e2:49:87:b3:77:2e:1d:3d:8f:57:
                    c3:be:4e:ca:d7:76:8d:a3:77:c1:73:7b:5a:5b:d4:
                    ca:9d:8c:f5:f2:61:cd:eb:7f:81:7e:2d:1e:c8:ba:
                    34:d2:87:cc:c4:cf:4c:19:8f:51:b1:6f:af:98:e6:
                    1b:9d:7b:6c:88:27:ba:52:21:25:ad:bb:65:2b:d8:
                    85:c2:18:3e:4e:20:bd:d3:51:e1:00:66:0d:07:56:
                    f3:48:fa:ca:12:d2:10:ab:7a:fc:ce:7c:40:9d:87:
                    c1:50:5e:43:66:f5:b9:5b:99:21:b7:76:d5:9d:e4:
                    e3:c7:ae:e0:15:d5:e3:bd:3c:aa:64:a8:a9:0b:ae:
                    b6:95:1f:b8:af:9d:44:80:39:7f:a8:91:7e:06:ef:
                    86:5e:e4:1b:bc:1e:5f:d4:22:ed:f9:c0:f3:54:7e:
                    1d:de:18:db:66:78:46:64:a0:ac:39:fd:20:e0:b7:
                    99:90:3a:59:1d:38:60:82:ee:dd:b6:5a:ea:c1:d2:
                    70:50:65:eb:01:c6:3e:53:48:be:ad:82:7b:d5:00:
                    82:13:3c:d3:e9:19:46:8e:71:fa:ce:9f:3d:33:0e:
                    69:92:c6:68:d4:b6:6b:44:a2:15:18:e2:4b:da:63:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EA:B3:F7:05:FA:00:6C:E0:CE:6C:BB:D0:BB:EB:08:9E:E0:87:11
            X509v3 Authority Key Identifier:
                keyid:57:E7:59:DC:27:9B:54:6E:DA:81:B7:EF:DA:F5:57:85:16:B8:0A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3c:3d:6c:a0:d5:b0:a8:e1:64:28:ac:3b:89:50:12:c7:33:
         da:d0:fb:e0:c8:b2:6d:76:e2:cd:96:d5:bc:68:88:e6:6d:cc:
         c6:e7:60:8c:53:5d:48:df:67:7e:04:9d:80:96:ba:74:96:9c:
         1c:3a:23:bd:b4:02:94:c4:8d:a9:e4:f5:5c:7c:4f:f3:6a:f4:
         4e:99:64:16:5a:b5:b9:4e:f2:38:3e:28:27:32:02:9f:30:33:
         24:c0:f0:95:44:c8:bf:c2:5b:25:e8:5a:bb:e9:ed:6d:26:b8:
         02:5b:fc:6c:4f:cf:4b:1e:89:fa:38:8e:77:c8:bf:79:54:d5:
         92:b8:97:81:08:d9:ba:fe:0a:a2:e9:1b:f6:7f:b3:a2:0f:cf:
         3c:8d:7e:f7:a1:23:4c:d1:65:3e:5b:cb:cd:c4:63:5b:bf:d3:
         78:21:f6:db:00:8a:c3:30:c7:60:bc:58:d4:db:92:d5:b9:1d:
         8c:1c:fd:65:db:05:aa:7f:fd:17:81:b3:02:24:c7:32:35:8b:
         38:ba:9a:9b:43:b8:25:eb:d2:4e:44:41:57:fb:3a:7f:ec:c2:
         93:70:0f:74:2e:b9:16:6f:e4:27:12:2b:b8:73:2d:82:97:99:
         5d:ec:7d:77:e0:6b:fe:e3:d2:82:30:51:95:14:36:a5:44:07:
         da:2a:f7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:50:25 2026 by rpki-client