This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft
File:                     vjdwS4x985dWFxlK8q3u2hzJvPY.mft (raw, json)
Hash identifier:          YdNES4M2Puyo9DRJcWstAs1ZTAYVPhpyiqIlZeG+YTs=
Subject key identifier:   0B:61:89:C6:E8:8A:8F:6B:94:F7:1F:12:A2:50:D7:EC:51:10:A1:54
Authority key identifier: BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6
Certificate issuer:       /CN=A91D0432/serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6
Certificate serial:       0247
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft
Manifest number:          0242
Signing time:             Sun 11 Jan 2026 01:07:52 +0000
Manifest this update:     Sun 11 Jan 2026 01:07:51 +0000
Manifest next update:     Sun 18 Jan 2026 01:07:51 +0000
Files and hashes:         1: vjdwS4x985dWFxlK8q3u2hzJvPY.crl (hash: KHMjIn0dFjh+3ckaX0WDi1jxTJCTOIBvMOJJSG+5lqU=)
                          2: 539DF534D1FB11EDA0A31C2FC4F9AE02.roa (hash: ZwuvYUkBHuPjyaZwcok71ZoBlPTV1oL4tY+NTXiSqLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl
                          rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 01:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0432, serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6
        Validity
            Not Before: Jan 11 01:07:51 2026 GMT
            Not After : Jan 18 01:07:51 2026 GMT
        Subject: CN=6962f7e8-70ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:56:9e:6c:84:ca:7a:b3:db:37:df:d8:61:
                    42:e7:9c:34:38:4b:c0:33:86:6a:df:80:6a:89:3b:
                    fa:a2:7b:7a:7b:23:b6:81:80:4b:a5:8f:b4:10:dd:
                    c3:c6:5c:42:70:88:f6:0b:b5:83:59:82:9b:33:66:
                    61:f3:c1:db:8b:da:0b:3e:d3:35:63:40:13:f7:e2:
                    2d:53:e2:ec:22:75:91:3f:ba:09:36:32:34:84:e2:
                    58:8d:72:02:a7:d9:88:83:24:ce:58:90:3d:2e:8b:
                    6f:fe:4e:09:7f:ba:98:29:a8:61:a4:3b:3f:b7:90:
                    22:d0:e1:b0:a9:f1:80:d4:be:ac:60:48:cb:43:53:
                    26:28:b3:a9:f6:74:1f:2e:85:dc:f3:e1:28:b8:11:
                    b0:9e:fd:8c:eb:b7:23:5d:60:d7:4c:49:1f:a1:7b:
                    25:87:2d:a6:b0:b5:17:81:6d:2e:3e:d0:60:62:7d:
                    14:5b:15:75:c7:e1:7d:cd:7b:62:c4:89:41:86:39:
                    8f:2d:b4:06:96:e6:ee:2e:ba:b2:da:32:c7:3d:04:
                    1d:3c:0d:55:3a:d0:46:88:a5:9a:69:b6:57:f0:22:
                    6e:18:92:9f:f9:d4:c1:56:46:54:c5:16:8b:12:d7:
                    d9:35:fc:d9:12:e0:bf:96:25:6d:da:7e:b5:f3:3e:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:61:89:C6:E8:8A:8F:6B:94:F7:1F:12:A2:50:D7:EC:51:10:A1:54
            X509v3 Authority Key Identifier:
                keyid:BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:20:7f:4c:64:4c:96:f2:e7:40:d8:1c:90:e7:c3:8a:25:
         a0:44:a5:10:dc:e8:81:ad:61:8d:e3:4e:03:a2:85:f6:52:b8:
         c1:23:cb:be:57:97:f9:74:59:9f:41:a7:b8:8b:37:6c:f6:bb:
         1d:03:ed:4c:88:23:11:a6:35:a3:ad:1f:75:5e:ed:b7:bc:a7:
         fc:89:73:ce:59:44:16:2a:ca:e5:29:c8:49:5d:0d:f3:2f:7c:
         9c:8b:99:28:b4:af:35:ab:05:44:16:7a:9a:9a:50:e1:6e:8b:
         61:53:a0:6e:ea:83:f8:53:a7:32:72:6e:9c:c2:d6:03:43:9d:
         7d:5f:33:41:e9:02:f2:e8:6c:93:b3:c6:46:a8:19:56:a7:3d:
         15:92:2b:b2:a6:f4:de:fe:5d:6e:c5:93:93:28:2e:e4:ae:f7:
         dc:0c:39:3a:cf:6a:a3:1b:59:55:7d:98:18:36:b2:ae:58:f4:
         35:c3:c1:57:e8:d4:5b:38:b6:59:87:a2:12:44:d2:d5:ce:8a:
         b6:38:9a:53:b6:fb:ba:af:e9:aa:15:d1:e5:c1:0a:b6:66:3d:
         6c:cb:1b:9f:a1:54:c7:ab:98:57:ba:b6:24:ae:24:90:b2:94:
         95:37:65:cd:9b:67:e7:50:d0:60:45:d0:f6:bb:3c:b4:b7:4a:
         1c:c4:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:48:40 2026 by rpki-client