This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
File:                     vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json)
Hash identifier:          /KrUgUQG1NRUjODJsu6NF0dKAa3XL0rzSlHMRjbNzJs=
Subject key identifier:   E4:33:0B:92:AB:4E:41:DC:A9:66:6C:71:A5:62:BD:A7:6B:8B:75:05
Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
Certificate issuer:       /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Certificate serial:       03F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
Manifest number:          03D5
Signing time:             Sat 24 Jan 2026 23:50:36 +0000
Manifest this update:     Sat 24 Jan 2026 23:50:35 +0000
Manifest next update:     Sat 31 Jan 2026 23:50:35 +0000
Files and hashes:         1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: 9pOacXKd2A6wttdyEvdlhgx9BG4G02iz4IvBNy2jNSY=)
                          2: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: 8/pe/NkCfmi8GQHtZeDvbdeiM83VXVuijM5zx0eXnx8=)
                          3: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 8dEWz6BA19noWs2zWuUBCRCZchx4qTK4G3VWLV+hIMw=)
                          4: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: KstFse9DL+Lpk2UJhsRfTukB1/IV52HFgYreP0UKdGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
                          rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
        Validity
            Not Before: Jan 24 23:50:35 2026 GMT
            Not After : Jan 31 23:50:35 2026 GMT
        Subject: CN=69755acc-e041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:f2:93:82:48:d0:ed:2d:3f:b6:5f:48:5b:
                    2a:9a:d3:02:f0:a9:02:07:b1:57:18:72:a8:58:d8:
                    6f:75:a8:8b:42:62:cf:aa:93:ed:9f:5d:25:91:a2:
                    bb:e3:19:c2:40:61:13:bb:44:1c:92:fe:ae:6c:41:
                    d5:73:ff:a4:12:aa:b3:ff:84:2d:57:4b:52:c0:38:
                    cf:d3:ed:4e:bc:b0:f4:6f:77:4d:eb:86:4a:fa:29:
                    50:96:75:98:4f:5b:7d:30:7f:c1:74:9e:9d:22:c4:
                    fb:76:87:13:69:12:8a:4c:00:71:fc:3a:05:03:dd:
                    aa:64:76:ae:09:06:1f:0d:54:48:cb:5f:0d:b6:a9:
                    7e:b6:a8:73:9d:13:38:a0:c0:a8:51:d7:1e:68:03:
                    c0:71:2e:b7:c7:18:c3:67:23:0c:a8:cc:5a:41:b3:
                    40:99:ee:5f:33:7e:35:94:3d:e3:59:b4:9f:72:46:
                    15:aa:08:1c:72:ce:0e:09:98:56:1d:3b:7f:0d:07:
                    f5:06:87:8d:26:01:76:77:eb:6a:33:d8:36:a9:b4:
                    13:52:44:45:2c:79:6a:03:68:8b:2d:8e:50:92:58:
                    6d:a7:7f:ae:df:af:ad:63:34:65:ae:5d:c5:70:65:
                    8f:2c:75:18:77:f1:c2:5e:d5:82:f5:57:b0:05:73:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:33:0B:92:AB:4E:41:DC:A9:66:6C:71:A5:62:BD:A7:6B:8B:75:05
            X509v3 Authority Key Identifier:
                keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:3b:d7:f4:2c:b2:0f:19:c4:6c:e9:33:fc:ed:28:e0:46:55:
         7a:ea:9c:cd:26:cf:9a:fc:f9:2f:e7:1a:5f:05:92:62:c5:db:
         d8:8d:0d:a1:c6:40:a9:7e:98:10:22:d8:16:e6:79:cd:90:a1:
         bb:b7:63:1c:3e:76:74:a5:f3:4b:30:ee:d5:8f:72:c9:fd:47:
         1c:88:63:62:ba:45:5e:60:47:34:63:9a:b2:54:dd:7d:39:ab:
         97:ab:85:a2:8b:18:59:ec:41:a1:6c:7a:5d:9e:35:44:21:e3:
         5e:be:52:38:5e:a1:87:ed:13:c4:18:6d:c4:d5:eb:18:4e:6a:
         8e:cc:eb:87:04:21:2f:5d:98:9c:71:c7:98:65:a4:b8:73:ca:
         a7:50:ac:65:1c:9d:f0:dd:e7:7d:d6:7c:5e:50:0c:9a:2a:22:
         21:3b:59:f5:5d:3e:00:6e:db:81:bb:8c:2b:20:b7:ae:4d:60:
         7c:88:96:42:fb:8f:0e:62:5a:d9:33:4c:fe:03:6a:2d:0f:cd:
         ea:86:29:d9:e1:fb:a7:30:7a:7e:08:31:4b:35:3f:cd:91:c2:
         3d:0c:2c:f1:bf:08:a4:c8:d4:0a:ec:c5:21:7e:b7:f5:6f:36:
         ac:39:d1:1c:df:94:56:18:3f:96:b9:d9:05:78:27:88:c1:9b:
         2c:55:a6:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx
NEMzQjIxNDIwHhcNMjYwMTI0MjM1MDM1WhcNMjYwMTMxMjM1MDM1WjAYMRYwFAYD
VQQDDA02OTc1NWFjYy1lMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ezyk4JI0O0tP7ZfSFsqmtMC8KkCB7FXGHKoWNhvdaiLQmLPqpPtn10lkaK7
4xnCQGETu0Qckv6ubEHVc/+kEqqz/4QtV0tSwDjP0+1OvLD0b3dN64ZK+ilQlnWY
T1t9MH/BdJ6dIsT7docTaRKKTABx/DoFA92qZHauCQYfDVRIy18Ntql+tqhznRM4
oMCoUdceaAPAcS63xxjDZyMMqMxaQbNAme5fM341lD3jWbSfckYVqggccs4OCZhW
HTt/DQf1BoeNJgF2d+tqM9g2qbQTUkRFLHlqA2iLLY5Qklhtp3+u36+tYzRlrl3F
cGWPLHUYd/HCXtWC9VewBXM5pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQzC5Kr
TkHcqWZscaVivadri3UFMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw
MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ
VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky
NDNJYkxCMGhxQmNVdzdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSO9f0LLIPGcRs6TP87SjgRlV66pzNJs+a/Pkv5xpfBZJixdvYjQ2h
xkCpfpgQItgW5nnNkKG7t2McPnZ0pfNLMO7Vj3LJ/UcciGNiukVeYEc0Y5qyVN19
OauXq4WiixhZ7EGhbHpdnjVEIeNevlI4XqGH7RPEGG3E1esYTmqOzOuHBCEvXZic
cceYZaS4c8qnUKxlHJ3w3ed91nxeUAyaKiIhO1n1XT4AbtuBu4wrILeuTWB8iJZC
+48OYlrZM0z+A2otD83qhinZ4funMHp+CDFLNT/NkcI9DCzxvwikyNQK7MUhfrf1
bzasOdEc35RWGD+WudkFeCeIwZssVab4
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:23 2026 by rpki-client