This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
File:                     veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json)
Hash identifier:          YZwcfboOjePQ5cGa7kCMAxvIPAWY2Fr4cVcc1U21H+0=
Subject key identifier:   C3:30:83:B4:A9:D9:EA:0B:6A:8F:E6:EA:95:1F:36:4F:3B:DF:60:2C
Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
Certificate issuer:       /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Certificate serial:       3503
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
Manifest number:          34FE
Signing time:             Mon 12 Jan 2026 14:29:44 +0000
Manifest this update:     Mon 12 Jan 2026 14:29:44 +0000
Manifest next update:     Mon 19 Jan 2026 14:29:44 +0000
Files and hashes:         1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: tILsjkc/dCis2AcsahfRab9q4KO+fh4Lgp3ozcc1E6M=)
                          2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: XN/k67X7bOiLw3XnM0VIfsm36LDpR4F96/be+9LgtSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
                          rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 14:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13571 (0x3503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
        Validity
            Not Before: Jan 12 14:29:44 2026 GMT
            Not After : Jan 19 14:29:44 2026 GMT
        Subject: CN=69650558-5632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:4e:64:0e:c4:ae:62:4e:f1:0d:54:55:0a:
                    c1:fc:f5:f7:bc:07:13:68:d2:15:fd:69:90:d9:dc:
                    4f:e7:b5:b4:19:f6:3c:cf:d2:c9:ea:21:af:b4:70:
                    07:f8:b8:95:21:9c:9c:b1:1a:fd:6a:dc:eb:2d:78:
                    f5:e5:87:51:05:55:d4:80:d9:cb:3b:30:9f:c6:85:
                    a4:e3:fb:bb:53:1b:b3:1a:f5:c0:d7:37:17:83:7d:
                    7d:0c:2c:96:ae:87:83:a8:d6:b0:d7:ff:ef:0f:08:
                    8e:29:f3:6e:5f:10:3d:37:3d:62:de:af:e6:8f:4b:
                    3a:52:22:a3:31:32:a7:ab:3d:8b:57:c2:32:43:de:
                    e5:08:bc:7f:c5:62:ce:a0:f7:8c:da:d3:dd:cb:89:
                    1d:61:62:2b:88:4a:04:33:a7:b2:c8:82:7f:8c:fb:
                    31:f2:80:d6:f9:07:85:3b:00:73:6f:31:03:e6:89:
                    d8:50:7a:13:93:e5:68:cf:f5:d0:9b:f1:c4:83:52:
                    c9:54:66:5b:c1:07:a5:a8:08:ea:98:ae:87:b5:c9:
                    eb:cc:14:ae:1d:7f:9e:de:ff:e6:72:cc:83:d9:4a:
                    74:f4:5c:e3:23:bb:d7:8e:80:1a:3c:9c:78:f4:ed:
                    2e:33:f1:84:71:85:bf:88:11:5b:3c:c4:d4:eb:e0:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:83:B4:A9:D9:EA:0B:6A:8F:E6:EA:95:1F:36:4F:3B:DF:60:2C
            X509v3 Authority Key Identifier:
                keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c0:79:d3:2a:1b:a8:32:5e:ad:90:32:1e:01:9f:d8:2b:13:
         d2:35:8f:53:54:14:c0:40:0c:02:2f:61:4e:ae:78:96:a5:ac:
         7f:a8:b0:d3:c7:75:d5:8d:a6:66:c0:96:cd:a6:a8:f9:e7:05:
         6f:bb:59:8b:bb:50:09:56:8b:c6:b4:3a:8c:5e:c5:49:93:e3:
         5c:c3:c2:84:a6:64:ba:3a:73:f3:da:4e:29:fa:6d:f2:09:93:
         f6:06:48:66:e7:cc:0a:6d:a4:4b:b1:ef:db:ae:b5:c8:9a:aa:
         74:10:19:8f:df:8a:62:be:f7:e0:79:72:38:eb:4d:8f:66:1f:
         a9:a8:88:35:2e:f5:b2:1f:b7:8e:7b:28:e8:d7:33:32:17:71:
         df:73:2f:ee:71:87:2b:44:1c:35:e4:0b:ea:2d:4e:12:be:88:
         c0:53:c9:47:1f:64:2a:39:a2:4b:71:d8:4d:c6:86:35:23:3d:
         f6:63:2a:ab:2c:93:06:75:31:b4:24:e5:a2:bb:20:82:07:00:
         48:1d:4d:e5:d1:9c:11:4b:96:fa:ab:38:0b:a2:f8:bc:e9:65:
         60:cb:da:5d:1d:27:52:e7:02:e5:c6:84:a1:10:0e:4f:81:9f:
         be:6d:03:2e:5b:c2:55:69:3e:c4:94:04:c8:93:fc:b7:28:7f:
         78:1b:d5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:18:30 2026 by rpki-client