This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
File:                     VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json)
Hash identifier:          KHuYxSzmGMYvKA+5I/lp3pkWMbgC1a1C5uqKoultD9s=
Subject key identifier:   28:F3:A1:31:11:0C:10:D7:D3:93:07:D0:F8:A2:A9:E0:92:F8:E7:AD
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Certificate issuer:       /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial:       04AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
Manifest number:          0495
Signing time:             Sat 24 Jan 2026 23:18:27 +0000
Manifest this update:     Sat 24 Jan 2026 23:18:27 +0000
Manifest next update:     Sat 31 Jan 2026 23:18:27 +0000
Files and hashes:         1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: bEHPWHWviSe4WSJiIhjbRX1e7tzRUsppDdi3ktQmFQU=)
                          2: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: wF1Z2aa2PTEiRRPCp23vYrxyf7/d64gIm78PkkwoFEI=)
                          3: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=)
                          4: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: FmTdhb6JOatjzFGpUujz0yqqemXgtcfk0JQ/+/a77U0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
        Validity
            Not Before: Jan 24 23:18:27 2026 GMT
            Not After : Jan 31 23:18:27 2026 GMT
        Subject: CN=69755343-5f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:56:8a:70:ef:b4:5e:6e:0a:e7:64:b3:1b:
                    3f:e4:66:b1:6e:62:79:f7:89:c7:34:d1:f3:89:6e:
                    c1:ec:8f:5a:35:48:9f:ff:4f:cc:52:76:4c:0d:a1:
                    0e:ec:9d:13:99:46:0f:18:6f:1c:3e:4b:dc:5e:8d:
                    5b:b7:ce:a7:21:f6:89:92:89:f5:9e:06:cf:ba:6d:
                    b6:34:2e:43:c0:3c:6d:e5:f8:c9:bc:bc:ca:5d:43:
                    1e:c0:70:ce:c4:a7:57:0a:38:0e:06:48:c2:c2:fd:
                    74:94:5c:1b:df:65:38:80:d7:7c:65:ca:5b:ba:23:
                    d9:ba:b0:ff:69:e7:ca:ef:93:97:ad:61:fb:a6:6a:
                    c1:ba:01:75:d9:0e:e7:74:47:80:72:a4:ec:c5:db:
                    b7:ca:20:7e:7f:03:04:4a:a7:76:27:f2:aa:89:42:
                    77:b9:1f:1d:55:9e:48:38:ca:09:10:d2:4d:2c:09:
                    89:95:66:35:aa:7b:9a:44:8d:a9:fe:9f:2b:87:d0:
                    5c:18:fe:f3:01:44:55:87:17:8a:91:61:bc:95:8c:
                    a6:09:16:4c:0c:9c:71:cd:e1:9c:9a:c2:ed:f8:4b:
                    4d:fa:82:7d:be:6d:ae:5e:40:6e:f8:7a:b3:3c:5d:
                    5a:b9:c3:73:bc:78:d8:7f:76:b0:32:77:b0:a1:42:
                    ea:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F3:A1:31:11:0C:10:D7:D3:93:07:D0:F8:A2:A9:E0:92:F8:E7:AD
            X509v3 Authority Key Identifier:
                keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d9:39:82:8e:79:80:9b:8a:40:0d:30:27:58:f2:45:40:ca:
         90:d2:44:d5:4a:5e:74:09:5c:5f:9a:27:9a:fa:f6:a8:81:b7:
         53:b2:3a:ff:8b:cc:54:e0:2d:eb:45:b6:1e:b1:e5:09:93:aa:
         25:26:bb:ee:0d:0c:b3:8f:a8:b0:a9:da:6e:75:f8:1e:89:4d:
         71:9e:ef:4c:0d:a6:52:84:20:51:45:ed:40:35:2d:4f:fe:71:
         2f:92:8f:4f:a4:49:a0:70:92:9b:42:a5:47:50:ff:1d:43:48:
         0a:54:3a:f7:23:52:03:8a:83:0b:d2:1b:b5:8c:08:2b:a4:b7:
         cd:b0:19:75:35:7e:7e:0d:a7:27:14:a6:d4:8b:27:c7:45:6d:
         f7:86:7d:36:50:28:cb:e1:a2:d9:36:25:f8:9c:59:6b:d9:fe:
         17:c5:a3:77:b1:cd:d9:d2:4c:c4:ea:a4:9c:e6:0b:63:d2:7c:
         29:33:0a:31:ec:90:88:31:ec:ad:78:76:6e:58:f3:62:f6:a5:
         07:63:f1:4f:82:6c:31:3b:48:c1:ca:14:68:b6:69:15:4e:5a:
         33:9a:e3:ad:4b:00:16:11:2e:0e:00:32:51:98:b0:71:d3:24:
         3e:e8:2b:da:ba:cf:94:c0:76:81:6c:f9:6f:f3:b1:c4:aa:d0:
         b5:e0:b8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:22:50 2026 by rpki-client