This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft
File:                     Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft (raw, json)
Hash identifier:          m6XbZeijZHjVSwM2eOeKRoy581bl8UYp20MWDL8oNp0=
Subject key identifier:   EC:FA:DC:72:B8:56:F6:A9:42:8F:A1:84:4F:8E:2D:4F:FD:BB:58:4C
Authority key identifier: 56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C
Certificate issuer:       /CN=A91EEB51/serialNumber=562FB302A876783A084158038BD49EF7051A603C
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft
Manifest number:          014E
Signing time:             Thu 01 Jan 2026 03:52:24 +0000
Manifest this update:     Thu 01 Jan 2026 03:52:24 +0000
Manifest next update:     Thu 08 Jan 2026 03:52:24 +0000
Files and hashes:         1: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl (hash: RF5TEmpT+qX0JRk56N0C7Vh2NGX1GXKl3haXJpXjgac=)
                          2: 748B00F4EA8A11EE9295672AC4F9AE02.roa (hash: qJGm5qR8q633zY7nmDna54y82nnbrcUnVg4BUe56QiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 03:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEB51, serialNumber=562FB302A876783A084158038BD49EF7051A603C
        Validity
            Not Before: Jan  1 03:52:24 2026 GMT
            Not After : Jan  8 03:52:24 2026 GMT
        Subject: CN=6955ef78-af3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:c2:e5:d3:2c:b1:ec:79:dc:a9:9a:eb:62:
                    74:65:09:0f:c9:87:32:97:e8:08:73:1a:19:28:c3:
                    c7:9c:69:56:fa:e0:f0:c7:af:48:a5:79:a7:ff:ed:
                    53:98:18:2f:14:59:35:6e:44:61:49:a1:5d:76:14:
                    c6:c3:e3:c6:8a:79:41:e2:d9:bc:41:42:40:75:51:
                    de:2c:87:1e:fe:54:40:19:0c:12:4e:d3:3f:b8:1b:
                    2c:0d:b8:7b:9e:17:e2:4b:0d:0a:b5:28:f1:f7:75:
                    93:74:25:ed:9a:0b:4f:3e:1f:59:a0:13:9d:33:af:
                    b0:4a:15:85:d3:f5:4b:a7:e3:7a:f2:0b:a2:67:dd:
                    dc:89:b2:6a:cc:81:c3:d1:2e:a6:e4:19:f1:58:22:
                    bd:b6:a0:de:fc:f6:c6:64:53:97:10:66:b6:e8:b0:
                    9f:8b:82:de:8d:48:70:88:bf:86:97:1e:92:76:12:
                    42:97:a5:21:55:00:5c:cf:a8:31:bb:46:e4:73:09:
                    28:a2:be:46:5e:02:48:a3:4b:98:7c:e7:be:fc:68:
                    0a:c3:47:bc:8b:a7:26:b2:bd:b6:d7:c0:68:80:68:
                    75:61:95:66:94:19:87:b6:5a:58:e7:60:d7:2a:4f:
                    ff:65:98:f2:56:a4:bd:07:a3:83:2a:70:90:1f:12:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FA:DC:72:B8:56:F6:A9:42:8F:A1:84:4F:8E:2D:4F:FD:BB:58:4C
            X509v3 Authority Key Identifier:
                keyid:56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:5a:dd:0f:c4:d9:8a:3f:8e:88:4c:6f:c7:4d:9e:b8:41:
         c4:4a:21:55:75:93:59:70:43:17:c3:c8:3a:d4:51:f0:be:40:
         05:75:76:7f:24:63:94:03:3d:bd:a3:8f:aa:1e:f3:20:67:19:
         81:43:2c:b1:ce:85:8c:cf:19:d6:f8:d3:8f:30:ca:c0:01:f0:
         40:5e:04:ea:aa:c4:ad:8e:0b:f3:c1:10:cf:2f:50:29:9f:40:
         3d:3f:6e:48:00:f5:7e:94:d4:45:f6:2b:20:a5:67:67:b5:9d:
         ea:e7:63:73:c0:cf:ad:c0:d6:4e:cc:25:6c:68:ac:25:f2:3d:
         6a:84:00:bc:e4:34:92:7b:63:dd:ed:1f:ba:a1:30:0f:a7:cc:
         d1:a1:77:cc:5c:26:e4:04:91:64:31:5e:8d:8e:36:2f:2f:a0:
         33:7d:24:4b:5d:39:66:38:bb:ff:2c:2d:64:d1:20:32:5d:12:
         3a:5c:24:d2:82:3c:d0:66:b4:ea:dc:82:0e:c7:1e:0b:0d:13:
         47:51:e3:f5:9d:2b:41:c0:a3:95:ee:85:09:91:be:13:00:9b:
         8c:2c:dd:5d:21:73:9a:9a:a5:dc:97:40:7c:a2:1c:17:46:2e:
         59:e9:b2:3d:cb:a8:c1:2a:90:fc:bf:29:e4:a1:5b:50:3a:68:
         8e:aa:f9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 08:17:12 2026 by rpki-client