This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
File:                     RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json)
Hash identifier:          mbSINjqsfi/gfqufrjsUOVy6cixN8ishZQtj6blNtnc=
Subject key identifier:   11:3C:EE:3D:ED:A4:6B:B9:AF:02:BA:6B:A3:3A:F4:7F:9A:6C:1D:7A
Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D
Certificate issuer:       /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
Manifest number:          B8
Signing time:             Sun 25 Jan 2026 05:19:45 +0000
Manifest this update:     Sun 25 Jan 2026 05:19:44 +0000
Manifest next update:     Sun 01 Feb 2026 05:19:44 +0000
Files and hashes:         1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: JjgK6w91lUnKrVJ5ecMj+HupSaTK8tjnF1aRkg0vbxA=)
                          2: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: aZVXAlADYS+rXA5XDGm5Qeisr3Hsg0gnfPcoglCZC80=)
                          3: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: wJoIO8rrxOY2lnEhXHESkpTbNHFEbKa9o0Fano1+9Pw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D
        Validity
            Not Before: Jan 25 05:19:44 2026 GMT
            Not After : Feb  1 05:19:44 2026 GMT
        Subject: CN=6975a7f0-e110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:3c:8a:6d:98:6b:ca:3d:51:73:ae:7c:bb:
                    11:be:09:c6:77:31:84:f8:31:8e:04:40:5b:b6:51:
                    3a:5f:60:6b:c6:ac:3b:43:96:59:2a:86:2b:9c:e2:
                    19:9a:4e:32:0e:68:6e:a2:4d:9a:d4:a2:ff:75:3c:
                    04:33:52:64:14:1f:47:f8:64:50:e6:ba:e9:d1:f2:
                    89:7b:8d:3a:fe:c6:26:56:7c:01:46:ed:f1:33:f1:
                    1c:b5:fb:bf:43:90:48:b7:45:a8:a8:83:3e:f7:a0:
                    02:7e:6b:f1:e3:73:56:57:ba:0c:75:2d:20:65:9a:
                    16:6c:a5:0a:89:e1:51:5b:ed:d5:1f:a3:77:41:f0:
                    ca:6d:58:2f:23:2e:df:2b:f2:1f:62:76:11:c9:83:
                    0b:ab:c5:bf:5a:52:75:5e:63:a4:05:c4:88:a0:b6:
                    30:c9:d6:01:ff:37:24:d9:3c:8f:5d:14:89:49:e4:
                    e4:15:f9:77:e5:45:e1:aa:53:32:ac:6d:59:38:12:
                    1d:45:78:e8:ed:23:89:60:7e:c1:c0:c8:2d:3a:d6:
                    2a:05:9b:3a:bb:90:66:47:25:c3:b4:10:aa:5b:b0:
                    8b:e0:c7:73:c2:5c:05:b8:3e:4c:52:60:95:48:dc:
                    56:9c:68:38:5d:53:6c:f2:16:48:b9:ab:bc:59:4b:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3C:EE:3D:ED:A4:6B:B9:AF:02:BA:6B:A3:3A:F4:7F:9A:6C:1D:7A
            X509v3 Authority Key Identifier:
                keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f9:2f:b6:ab:53:8e:ac:00:33:c9:07:4c:71:01:2a:bd:68:
         ff:1a:60:eb:89:4c:c6:99:4f:a3:fb:ad:aa:44:7e:89:3b:23:
         6b:75:cf:81:ca:df:ac:2c:74:5f:87:e6:58:f7:1f:cf:be:6e:
         2d:e1:28:36:23:10:5b:7c:a4:0b:0e:79:3a:0d:24:6f:20:cb:
         5f:ce:4c:a0:88:a3:0b:b4:5c:a8:e7:81:98:0e:e5:0c:2e:5d:
         69:f2:3d:e7:20:84:da:a1:15:e8:63:79:50:a3:d2:e8:df:3b:
         b2:56:3c:08:11:23:61:9a:d0:8e:f0:29:59:2f:24:4f:79:af:
         93:8c:bc:36:3a:c5:d6:b7:92:43:8a:ce:2f:9b:d3:dc:ce:41:
         1a:6e:39:3d:53:2c:72:5a:38:d9:9a:c9:39:fb:81:89:d6:3c:
         f6:52:3e:d0:20:11:9a:75:63:bd:27:ce:f0:3f:70:bf:f8:44:
         b3:0f:35:fa:57:78:c6:6f:87:0f:bc:b4:d4:c8:9e:51:0b:8c:
         d1:96:36:be:42:5f:ef:fe:90:bf:a6:d9:60:7a:37:cf:bf:58:
         b2:4c:81:9d:55:2a:0b:79:4e:88:b8:43:b2:4f:7f:e3:bd:92:
         2f:ae:19:5c:a7:29:1f:f9:44:8c:4d:a3:9d:29:8b:13:4e:eb:
         40:04:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:14:32 2026 by rpki-client