This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
File:                     vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json)
Hash identifier:          JwMNvf5VNNklvxI8KRv17IWRy9o9Rr1BVHJTgoWDldE=
Subject key identifier:   1D:4D:07:5D:AF:3B:E7:E2:41:EE:3B:35:72:53:57:16:B8:37:F6:AB
Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
Certificate issuer:       /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
Manifest number:          C1
Signing time:             Sun 11 Jan 2026 05:04:37 +0000
Manifest this update:     Sun 11 Jan 2026 05:04:36 +0000
Manifest next update:     Sun 18 Jan 2026 05:04:36 +0000
Files and hashes:         1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: J35wCjvSwJN12B2O4jsHji3WG5wLfmUm2xdfUffSuyM=)
                          2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: u5vjYU67JaqqsoNZI0S6g4tD4PgUnrgAcxaVH+69TsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 05:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
        Validity
            Not Before: Jan 11 05:04:36 2026 GMT
            Not After : Jan 18 05:04:36 2026 GMT
        Subject: CN=69632f65-cb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:b3:ea:9f:b9:68:0d:99:64:08:07:17:21:
                    25:a2:67:6e:1b:94:a6:5d:4e:33:d8:d8:07:60:c6:
                    68:06:25:60:43:c6:50:9a:7f:c9:c2:00:6d:69:05:
                    09:d5:17:fd:b5:1f:32:72:f1:10:12:ec:3a:a3:d2:
                    ee:4a:3b:82:12:1b:c6:fd:17:c6:f2:09:31:70:0c:
                    49:1e:d8:04:0d:50:cb:81:8b:75:6e:73:19:9f:a7:
                    8e:50:d0:37:80:f2:37:72:39:8d:d8:81:32:66:19:
                    1b:01:a5:3e:03:ab:11:a7:7d:e5:d6:d9:54:27:04:
                    cd:88:dd:ce:88:44:61:db:50:13:6a:ea:cd:9f:0c:
                    8e:2a:85:f7:d9:a3:a1:ec:dd:2c:c9:02:16:4e:cf:
                    78:8d:56:7d:06:bf:1e:af:14:38:89:db:d0:20:fd:
                    89:f4:81:e9:ea:b1:13:49:c8:6a:ad:ad:9e:89:af:
                    bc:29:44:07:fc:a5:07:45:e7:58:0f:9b:c7:94:1c:
                    bb:75:7f:37:3b:0e:33:1c:9c:9f:9f:f9:e4:68:95:
                    f6:b6:a4:39:45:49:f5:e9:aa:0f:9e:d8:2c:c6:75:
                    67:ab:5a:da:13:fe:cf:25:3d:62:f4:63:99:5d:4d:
                    f1:27:9e:38:ee:3f:a9:28:6e:3f:0a:10:f3:aa:bf:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4D:07:5D:AF:3B:E7:E2:41:EE:3B:35:72:53:57:16:B8:37:F6:AB
            X509v3 Authority Key Identifier:
                keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:73:95:20:bc:62:d2:6e:21:80:53:94:da:5d:46:f1:a8:a5:
         7c:1f:2f:ad:07:f8:6a:63:bc:54:d0:4e:64:da:53:8d:4c:e9:
         7d:0b:26:a2:d1:ef:c7:7f:cd:b7:05:38:6b:dc:94:b4:72:7b:
         17:01:4f:1d:3d:e8:e0:09:96:89:50:5c:bf:43:4f:60:e8:5d:
         a0:70:d7:ea:eb:4a:98:e7:f4:74:db:7e:f2:26:fd:8d:bb:46:
         62:88:ef:52:d3:0a:c9:28:d1:db:e1:dd:6e:c1:8e:e0:fb:f9:
         f4:e5:d1:12:d3:ce:d1:ba:a1:14:26:8f:93:ac:39:8a:c7:1c:
         a0:61:35:a0:49:8e:ff:b7:39:2e:34:fa:8e:28:34:90:be:31:
         0e:86:df:26:9d:07:7d:a3:88:5b:0a:d8:87:b0:89:29:72:5b:
         6f:e1:c3:be:c0:a2:d8:e6:ce:8f:61:88:fe:e8:2e:f5:3a:67:
         3c:a0:3b:24:fa:52:5d:5d:c7:6c:da:8e:99:2e:cf:67:25:9e:
         79:ac:0f:72:aa:05:ef:52:b7:ca:30:39:dc:eb:81:49:da:b7:
         37:97:eb:82:4c:ce:48:45:87:c9:10:f8:06:47:e0:03:53:9d:
         4a:f3:eb:aa:57:68:f6:98:d9:f5:2f:26:3f:fd:7f:7d:c4:ce:
         22:8c:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:01:53 2026 by rpki-client