This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
File:                     VB3RXhVOUI-wD9skXE528q09iB0.mft (raw, json)
Hash identifier:          InjS3wKtW5sA/VRRR+otC5SVjgJNtLA1gMBMxFKXYKk=
Subject key identifier:   4C:1E:E0:38:E5:82:6B:E3:60:72:26:52:11:C7:37:FC:03:6F:37:02
Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D
Certificate issuer:       /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
Manifest number:          63
Signing time:             Tue 27 Jan 2026 06:17:18 +0000
Manifest this update:     Tue 27 Jan 2026 06:17:17 +0000
Manifest next update:     Tue 03 Feb 2026 06:17:17 +0000
Files and hashes:         1: VB3RXhVOUI-wD9skXE528q09iB0.crl (hash: nu1rLs+q+cJfHhFC+fzoRKPW72o4rWJ7M8ib4v40eYI=)
                          2: BA2C0A9E673A11F0B876713DC4F9AE02.roa (hash: iENsMSoALP99bR1N5hhDPtffTTwsxcPuKsVO6aYiFUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl
                          rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 06:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D
        Validity
            Not Before: Jan 27 06:17:17 2026 GMT
            Not After : Feb  3 06:17:17 2026 GMT
        Subject: CN=6978586d-1061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:95:18:07:e4:e5:70:0e:7c:3b:74:66:13:
                    d0:4e:39:16:3f:a1:88:ba:53:ae:73:51:a3:fd:99:
                    06:b9:17:ea:90:e4:e9:d2:a3:12:f9:b6:fb:cf:ba:
                    14:9b:05:67:6f:59:b6:78:33:9c:60:de:0c:d9:f5:
                    d8:bf:01:4b:35:8d:e2:45:3d:f1:f2:22:8e:97:94:
                    87:a7:07:6d:06:73:2a:a4:e0:64:c2:45:c0:ee:cf:
                    25:4c:57:69:df:67:c2:3d:1b:e1:2e:5a:11:04:84:
                    4b:5f:11:27:e0:97:3c:dc:a3:3d:db:3d:85:e1:c4:
                    66:3d:d1:da:2e:97:88:a5:67:83:f5:a2:4a:73:48:
                    50:03:b9:1f:63:ee:4b:4f:28:f5:bb:8f:57:e7:8e:
                    a1:37:7a:b5:52:b3:25:2d:40:c4:99:f6:2b:7f:a8:
                    ae:ee:64:54:cd:a2:ee:b4:f0:a6:f6:05:e1:f7:ac:
                    28:27:1f:89:4a:4b:61:81:57:2d:41:8f:6e:e9:c7:
                    95:c9:ae:32:5e:0d:fd:f7:9e:f1:69:ee:72:32:e7:
                    51:2e:5c:32:93:b3:8e:6a:22:55:6c:63:a2:23:41:
                    15:8d:8c:25:00:b3:ea:fb:14:d6:49:0c:54:a2:c3:
                    d4:31:33:99:ab:c2:a4:1a:88:35:bc:ef:8f:d9:60:
                    3d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1E:E0:38:E5:82:6B:E3:60:72:26:52:11:C7:37:FC:03:6F:37:02
            X509v3 Authority Key Identifier:
                keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:c4:25:eb:a4:7f:6a:df:53:d0:6f:19:e9:d8:58:29:bd:01:
         92:b9:02:b2:7a:da:b9:c0:a5:cb:76:a8:09:a8:1d:bd:53:c2:
         50:ea:79:68:9f:88:3b:e2:f9:dd:20:ad:de:d5:92:52:84:31:
         78:3a:8c:88:11:83:9c:73:7d:31:1d:9f:2e:27:25:5f:cf:1e:
         08:fb:a5:5c:d6:db:04:1b:ff:48:d3:c4:1e:2e:b4:20:ca:95:
         9c:de:eb:e1:62:0c:57:2f:44:d7:1e:ec:41:38:2b:85:c2:7d:
         34:54:2b:85:4b:89:1f:53:5a:05:87:e7:35:6d:8d:77:cb:71:
         72:a3:01:99:ce:3e:2a:e9:1b:22:40:c6:11:b5:2d:12:ac:4d:
         ee:24:d5:fd:0e:bf:c8:e5:f6:ca:b4:75:f5:2f:01:8a:10:df:
         0f:15:00:bd:15:1b:d2:93:14:98:6b:b0:cf:5f:44:ee:7a:d4:
         f6:70:f2:e8:fc:41:6b:3e:38:b7:41:d2:16:8b:53:19:7e:0d:
         c2:a4:39:59:7a:b7:7f:10:eb:c3:ed:ba:94:70:fd:7d:b4:de:
         ff:56:1c:03:64:f3:41:d7:20:54:4c:43:e3:14:91:a8:2c:df:
         40:bf:e0:d6:9c:6f:db:09:6c:c8:0a:24:14:ef:41:01:b0:f5:
         5e:df:65:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 06:25:09 2026 by rpki-client