This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
File:                     vtASVxhUXB5QgDHT_1-26Chqf9g.mft (raw, json)
Hash identifier:          E29KM2fuSBB4+5QfxgSVkpwEPI0fO4P88fUH+uaTr+I=
Subject key identifier:   A0:E7:71:E0:71:BF:CD:72:DB:6B:1A:7A:CA:0D:17:16:AB:49:C7:69
Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8
Certificate issuer:       /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
Manifest number:          0280
Signing time:             Sun 25 Jan 2026 00:44:51 +0000
Manifest this update:     Sun 25 Jan 2026 00:44:50 +0000
Manifest next update:     Sun 01 Feb 2026 00:44:50 +0000
Files and hashes:         1: vtASVxhUXB5QgDHT_1-26Chqf9g.crl (hash: 6HFF/Yelpib8o1otnzifQHJCJqNSeo2pK7sedHuekq0=)
                          2: DBA023303B6F11ED903B484FC4F9AE02.roa (hash: T5gM9c7cEhEM3FMDd2oefSDFbFeoFzAyTLAjosgo9dc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl
                          rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E72DE, serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
        Validity
            Not Before: Jan 25 00:44:50 2026 GMT
            Not After : Feb  1 00:44:50 2026 GMT
        Subject: CN=69756782-c624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:e8:8a:d1:07:a6:d6:8c:1a:3b:5f:b6:bb:
                    51:bd:00:97:8d:fb:62:cc:a1:0d:44:13:05:25:4c:
                    c1:d6:40:54:16:9e:28:76:6c:fd:39:b9:27:dc:01:
                    e3:f5:de:94:d0:f3:71:c5:df:73:11:38:a6:6f:17:
                    f0:3b:99:0c:d7:52:29:64:cb:5d:60:8d:fb:f1:fd:
                    0a:0a:eb:66:cd:fd:c7:98:ee:ac:40:74:5c:04:b5:
                    92:5e:26:d2:b1:e1:3a:73:09:19:3a:08:32:84:19:
                    12:33:f6:9e:6c:c3:8c:6c:4a:52:5e:89:8d:2e:57:
                    5d:0a:bf:d3:17:ab:19:19:04:f7:85:17:70:be:8a:
                    e0:cc:1f:a5:b8:2e:92:eb:c2:4a:69:71:f3:cc:18:
                    b1:12:5a:69:8d:fb:ee:d2:a1:c9:b8:72:2e:6b:6e:
                    b1:bf:14:fe:35:bb:9a:64:ef:39:e6:b0:3b:7f:79:
                    d9:16:d9:78:12:96:37:15:85:2e:ad:d7:95:a3:d2:
                    30:dc:18:02:05:e5:aa:39:93:b8:ca:50:c3:cd:25:
                    3c:3d:b7:7d:5c:b0:ff:ba:1b:ec:af:57:36:5c:6f:
                    4d:6d:c0:2c:ee:16:f6:e9:80:0c:8b:80:53:e8:ae:
                    a3:fd:9b:3f:e9:63:c2:b6:ea:5b:8e:33:32:18:c1:
                    2f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E7:71:E0:71:BF:CD:72:DB:6B:1A:7A:CA:0D:17:16:AB:49:C7:69
            X509v3 Authority Key Identifier:
                keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:07:3a:25:8f:2e:2a:df:e5:42:30:dd:56:a6:f5:cb:a0:28:
         32:d2:e2:48:f3:6c:a9:ac:e9:d1:ef:24:bb:f9:6c:f7:26:d1:
         c8:c4:de:6c:c8:11:8a:e8:a7:33:8f:b9:fa:9a:7b:d2:d8:a5:
         cd:96:4c:ef:97:fc:2f:fb:67:2e:de:ec:c1:07:97:06:85:fe:
         c6:f6:60:44:26:19:98:5c:9c:b4:da:9e:d3:2a:ad:00:a4:40:
         61:70:42:ae:60:77:81:f8:d0:a7:d9:d0:6b:5c:20:89:6c:e3:
         cb:5f:7d:9f:f7:8c:e3:0d:83:b8:2e:fc:2c:0f:6e:a6:48:e3:
         08:79:ce:1e:2d:ef:bb:40:73:53:98:b9:c0:12:28:8b:74:0b:
         02:ee:78:6d:74:78:a4:9a:c3:0f:e3:05:64:43:41:01:74:b9:
         2a:b9:72:0b:f8:34:77:f5:ca:b9:e9:96:b2:9b:13:f2:d9:c9:
         bc:38:ab:12:1d:c5:2c:c3:9d:a2:af:e7:d4:01:cb:3e:fd:f0:
         4b:6f:61:1e:c9:93:b3:7e:14:52:b3:a3:de:b8:35:03:ba:34:
         78:b9:ef:12:f8:f4:6c:52:a2:8a:b6:db:24:49:d8:d0:8d:b7:
         d8:e6:47:37:39:5d:76:45:22:cd:4f:fe:7a:4c:59:be:75:e7:
         f1:b5:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:49:26 2026 by rpki-client