This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
File:                     veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json)
Hash identifier:          gFvkUQFjWBKX7YXzwkdW4hVUVyobpet9+ywS32XE5us=
Subject key identifier:   08:61:61:98:2F:F2:55:10:AC:46:00:89:31:1A:61:0A:61:B1:A8:A4
Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
Certificate issuer:       /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Certificate serial:       3502
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
Manifest number:          34FD
Signing time:             Sat 10 Jan 2026 14:29:47 +0000
Manifest this update:     Sat 10 Jan 2026 14:29:46 +0000
Manifest next update:     Sat 17 Jan 2026 14:29:46 +0000
Files and hashes:         1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: F9Fs7Fz2Sni7nOCX2YAMs62+b+iQSd3namF9aHAZbmo=)
                          2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: XN/k67X7bOiLw3XnM0VIfsm36LDpR4F96/be+9LgtSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
                          rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 14:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13570 (0x3502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
        Validity
            Not Before: Jan 10 14:29:46 2026 GMT
            Not After : Jan 17 14:29:46 2026 GMT
        Subject: CN=6962625b-3c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:cc:9d:f6:e3:31:7a:9d:b9:df:84:de:5a:
                    a6:39:dc:40:55:30:58:61:6a:b6:b8:f4:01:b4:30:
                    c8:17:9b:23:47:aa:f7:50:9a:b2:f9:d8:80:f2:b8:
                    e5:2d:5f:bb:68:67:5d:ad:8e:2e:b8:4e:d6:e3:99:
                    25:e6:77:d3:be:bd:df:26:96:ac:ba:6a:31:2c:6e:
                    a7:1d:c5:30:31:1e:e4:e3:36:04:4f:60:79:dd:32:
                    15:ee:00:bc:42:4a:8e:7f:e7:b0:fa:0b:7a:ad:2d:
                    46:c2:c2:30:e2:1b:49:78:f8:61:6c:7f:98:7b:5d:
                    fa:6e:f9:99:7c:3a:81:f6:df:b3:cb:49:74:84:e0:
                    7b:7e:5d:db:5a:2c:b1:c9:d6:e4:d5:52:46:db:a1:
                    82:06:c4:e3:e9:9e:e0:aa:db:e8:f7:61:c7:92:ba:
                    80:81:c7:a7:fc:e8:ba:23:69:ea:45:55:ce:2e:cf:
                    af:4e:1a:7f:2f:54:04:f0:23:6a:28:b2:41:2e:99:
                    da:08:e2:97:a6:32:77:99:e5:57:e2:68:90:6e:15:
                    65:57:9f:7e:37:1a:1c:f3:2b:0a:0a:c0:18:62:1c:
                    9e:fb:7d:45:a5:16:03:04:8b:59:dd:11:35:da:e7:
                    2f:21:70:f0:c5:32:9f:10:33:80:33:0b:49:a9:0e:
                    be:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:61:61:98:2F:F2:55:10:AC:46:00:89:31:1A:61:0A:61:B1:A8:A4
            X509v3 Authority Key Identifier:
                keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:65:83:11:27:ae:22:3b:6a:7c:91:70:b3:68:34:c0:fd:fe:
         cb:12:70:69:46:cc:a7:02:0d:cc:5c:42:53:61:92:71:1c:98:
         21:4b:96:84:dd:17:2c:9a:3c:6f:a1:04:e8:b7:e9:b0:92:a0:
         ca:e3:79:90:a3:28:e1:a4:ff:64:d9:24:66:a5:83:ed:a5:90:
         70:16:e9:d3:e2:cd:ad:d9:ce:00:32:19:97:9c:62:8c:fa:14:
         87:32:08:13:a2:9e:e3:15:0e:fe:16:ff:57:3a:e7:0c:e1:d6:
         ea:a9:16:a8:b1:89:84:3f:41:f3:6b:9a:87:59:35:a1:ef:38:
         08:93:fa:c2:b3:0b:85:0d:5c:c4:79:72:25:e2:f9:4a:14:a7:
         49:fd:39:77:e1:37:59:be:02:10:dd:21:34:c3:d8:32:80:89:
         aa:5f:3a:c0:0c:d8:92:14:7c:04:a4:83:ca:ef:2f:12:71:57:
         c0:59:ec:2a:eb:b6:ad:ef:ee:0d:10:ea:d0:b3:1b:33:35:1b:
         69:ae:3e:61:4c:74:72:0a:59:78:e5:04:58:d5:0a:c2:a3:bd:
         ab:e7:b4:ff:c9:47:36:49:b4:34:cd:fd:62:c0:08:74:5e:3b:
         ab:02:ff:ad:5d:73:a4:e2:39:3c:07:60:49:a4:f2:81:ea:c2:
         a4:27:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:02:34 2026 by rpki-client