This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File:                     vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier:          jnrMVYobVGE6t544acgiEus8mMptE++5xfZ5erRhkr4=
Subject key identifier:   B7:F6:2C:E1:8F:F1:3F:00:03:5F:D9:4F:33:BA:08:DF:0A:68:DB:02
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer:       /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial:       044D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number:          1115
Signing time:             Sat 10 Jan 2026 17:49:31 +0000
Manifest this update:     Sat 10 Jan 2026 17:49:31 +0000
Manifest next update:     Sat 17 Jan 2026 17:49:31 +0000
Files and hashes:         1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: +xj5MlsW4p9muiJEJ6fJOIThp30E6a3jcMOyO1QikXg=)
                          2: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: 5GGssBwo34kMxY1fgtwCfjU7+p5mfAazSfRBFfVGB/k=)
                          3: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: mgb6NflmQm35vBEH6/rdIKJ5eJitJ9zemuTs4qdaAl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101 (0x44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
        Validity
            Not Before: Jan 10 17:49:31 2026 GMT
            Not After : Jan 17 17:49:31 2026 GMT
        Subject: CN=6962912b-c92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:85:db:10:23:ef:35:c0:a3:d9:a5:02:82:69:
                    35:f2:2d:f2:40:3a:e8:7c:91:e6:35:c6:c2:63:86:
                    97:69:0e:34:fc:81:49:32:d0:2c:79:f5:8d:74:58:
                    56:88:50:a4:df:2c:08:03:b9:e2:42:84:73:b6:7b:
                    74:b4:03:2f:3b:92:ed:e2:07:3d:ce:bb:09:2e:e3:
                    9f:f6:ee:34:dd:75:6e:48:3d:58:4e:2d:e2:c3:78:
                    27:2b:73:97:b7:52:0b:a6:08:ef:fa:91:7a:5b:cf:
                    5f:32:88:6c:50:20:30:d3:d4:70:3a:c9:ef:2a:c9:
                    0c:af:69:45:fd:a3:8e:86:4e:8b:77:ac:13:13:12:
                    cd:13:85:a5:89:0b:f1:f9:21:f8:0c:ce:7c:a2:77:
                    7b:8d:1e:b7:e8:dd:77:33:9a:90:3a:56:89:cf:22:
                    d9:c5:1b:a7:d9:29:a5:0d:1a:8d:06:27:a3:54:72:
                    00:46:97:67:d1:c1:91:da:09:1c:7a:d7:88:cf:82:
                    33:9d:3f:2e:50:b0:2b:7d:4c:22:e4:6f:f1:db:e6:
                    87:34:0f:a6:c3:b9:a0:c5:32:c5:f5:03:d1:d2:05:
                    da:5e:26:58:b4:88:e1:78:0b:7b:ec:c9:f3:ad:1f:
                    a7:47:59:ea:72:ef:44:1a:14:22:52:00:57:fe:ce:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F6:2C:E1:8F:F1:3F:00:03:5F:D9:4F:33:BA:08:DF:0A:68:DB:02
            X509v3 Authority Key Identifier:
                keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:42:cd:d2:03:af:a5:83:5d:a0:0c:40:de:a2:42:0d:4d:76:
         02:90:45:15:ca:ce:70:11:df:3a:d8:2d:51:ff:1c:bd:d9:ca:
         86:59:0d:d2:bf:a3:0c:c4:e8:88:b8:dd:72:7d:1f:5e:23:94:
         b7:ca:44:3a:10:18:75:e0:ef:76:07:73:00:61:7b:77:fc:1d:
         8b:3b:11:cb:f6:41:7c:3e:74:f8:8e:a2:d2:a4:69:71:86:33:
         2b:5e:76:88:61:2b:21:cd:dc:da:b0:55:a7:85:b6:eb:99:0d:
         49:c6:3d:11:3e:be:9e:78:3a:60:17:8d:7f:f0:ee:e0:a0:30:
         b8:8a:41:56:23:c0:1d:a5:0a:40:a2:2d:3f:bc:62:07:a3:46:
         72:fb:59:e8:9a:02:5f:77:2f:15:ef:04:77:18:fa:e2:9e:3e:
         89:b7:e8:6a:d5:0e:66:27:a0:24:04:8f:9d:1a:47:0c:60:67:
         ae:1b:b5:49:db:50:1e:f7:6e:20:94:97:86:48:b1:02:bf:f2:
         5e:d9:2b:d7:7f:54:cf:9d:41:2d:cc:ae:2e:2a:c2:ee:d0:6a:
         12:59:53:d5:21:7d:c5:b1:3d:0f:03:6a:69:cf:af:89:0f:a0:
         7f:e2:44:a1:f4:4b:b0:a0:68:a4:67:c3:29:93:58:8c:15:6c:
         4d:c9:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:12:23 2026 by rpki-client