This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File:                     voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier:          GxzhV7gWfP+sr+CadEHIYbEOm5s54tUR4XiafU8ssmQ=
Subject key identifier:   B5:D7:69:C9:0C:F2:0C:82:13:B4:58:DA:4B:E0:47:C7:A8:BF:CD:6B
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       04D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number:          04C3
Signing time:             Sat 24 Jan 2026 23:09:40 +0000
Manifest this update:     Sat 24 Jan 2026 23:09:39 +0000
Manifest next update:     Sat 31 Jan 2026 23:09:39 +0000
Files and hashes:         1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: 4h4/pX3Xu9qo5+acbBb7a3MH+EOKzf6CSuZX8fw0y8A=)
                          2: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=)
                          3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: KIM/sEwaQaYFPC8qF/5+qRUkUFtySui4RoXzgpLXzmc=)
                          4: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: R/nnjeAR+tZePhFeIgEDIZOhg5pi4qQT+4iwQfx8ekU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Jan 24 23:09:39 2026 GMT
            Not After : Jan 31 23:09:39 2026 GMT
        Subject: CN=69755134-0159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:72:37:09:e0:31:d1:9c:d0:e9:97:d9:4c:
                    bf:5d:b5:18:31:d5:fc:e0:67:1d:10:c7:93:e3:98:
                    36:82:5c:5a:e4:48:db:f6:42:6c:f2:54:a7:58:84:
                    83:b3:5b:53:ef:67:3a:06:e7:c4:d8:ce:1d:0f:29:
                    aa:c7:aa:8c:0f:c5:24:e6:eb:05:65:bc:42:cd:13:
                    7e:8a:63:84:29:57:9f:58:35:ae:c7:f2:a7:cb:ee:
                    7a:a0:94:d9:2e:4d:9c:3f:b3:12:1e:c6:1d:fe:a1:
                    2b:c0:91:04:e7:74:56:0d:8b:f9:6d:14:35:0d:82:
                    d0:b5:aa:ae:7e:f6:b5:af:c5:b8:82:e2:89:a9:f0:
                    6c:ff:68:3b:94:eb:03:e8:b0:fd:5f:41:2c:91:fe:
                    50:ff:bb:f2:4f:5e:26:c7:68:88:22:41:d9:a2:4e:
                    ad:cf:8b:1a:b6:4e:d8:cc:1c:61:18:df:b5:62:47:
                    0e:4c:7c:d4:35:4c:81:64:51:ff:62:32:59:5f:50:
                    84:d5:0d:22:99:a8:0e:9d:26:2e:d6:e5:a3:f9:8f:
                    d9:a2:91:15:b4:5d:e4:83:8b:ea:30:a0:61:06:89:
                    3c:a7:f6:d2:f1:f0:68:d0:be:5c:9e:74:d9:9c:78:
                    64:08:67:78:ee:66:50:64:ba:fb:63:e3:6d:f9:e4:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D7:69:C9:0C:F2:0C:82:13:B4:58:DA:4B:E0:47:C7:A8:BF:CD:6B
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:28:6a:69:55:7a:ba:4f:44:5f:9d:fa:c5:6a:89:1b:34:3b:
         6f:37:45:ea:89:49:c9:94:6c:cd:7d:57:8c:2f:7a:f7:87:f8:
         a2:95:7b:44:e0:80:c0:bd:9b:41:3e:09:93:fa:e4:5d:6a:49:
         18:e5:34:01:3e:7c:38:06:66:81:cd:2b:b2:44:62:86:46:66:
         7d:ea:7e:eb:fc:85:e8:a0:e6:d5:69:32:52:d3:28:9e:c8:32:
         ac:b3:8e:1e:81:57:18:fd:14:7f:d7:bc:15:b4:3f:85:a0:b4:
         ce:6b:5c:46:11:0c:73:ce:5e:13:49:48:b1:1a:1c:74:ad:de:
         92:a6:11:4a:10:c8:18:ee:66:0c:29:0c:09:83:7b:10:ec:89:
         23:d4:bd:4f:3b:db:2c:de:a5:4e:eb:d0:93:e8:e4:25:62:bb:
         de:26:38:05:9d:45:df:31:70:11:ef:36:f4:0e:fb:ac:f9:7a:
         d4:39:d0:0b:bf:17:2c:70:df:0e:37:98:7b:d0:18:62:cf:b7:
         fc:2e:bd:dc:92:a0:e8:8d:8f:f4:d7:0c:0e:72:8c:9a:30:c7:
         05:0e:80:af:0c:cb:36:19:6f:c2:b7:a3:74:40:c0:7e:19:48:
         e7:e6:17:eb:eb:c4:44:6a:ab:ee:85:37:b6:01:16:2c:35:47:
         58:e9:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:39:22 2026 by rpki-client