This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
File:                     VyN5TNgiazMfp2TbnkH16ZS9FJU.mft (raw, json)
Hash identifier:          d6j5tPzJp6M291W9cmt39/jyCyhSuvJh5XcqtAHHH8Q=
Subject key identifier:   EB:CF:87:22:9C:EF:3E:5F:F1:24:46:14:0A:72:93:63:6E:7D:EF:D2
Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95
Certificate issuer:       /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
Certificate serial:       0690
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
Manifest number:          0682
Signing time:             Tue 20 Jan 2026 21:49:01 +0000
Manifest this update:     Tue 20 Jan 2026 21:49:00 +0000
Manifest next update:     Tue 27 Jan 2026 21:49:00 +0000
Files and hashes:         1: VyN5TNgiazMfp2TbnkH16ZS9FJU.crl (hash: GDN1Y99ymxE+mwmZJ3LCt2X8LRbga/GTc4g9X8XKcNg=)
                          2: CE84D1823BFF11EE80C18D54C4F9AE02.roa (hash: MmtTAS7ZMmZ1RYiMAdwwJKtp9Uk2wHFLM2D5jciPiKY=)
                          3: BA9447BCA7D111EB8F85BA22C4F9AE02.roa (hash: LDTK3THfkcofklf28PHpcjhBI5d6rvSRQj+7koBIk+g=)
                          4: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (hash: 9QKmGnaF4XUr0K4IROOwqH5Q5TLExL2Xqyv7L8jbI74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl
                          rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 21:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680 (0x690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
        Validity
            Not Before: Jan 20 21:49:00 2026 GMT
            Not After : Jan 27 21:49:00 2026 GMT
        Subject: CN=696ff84d-838e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:3c:b3:06:29:ed:99:07:38:73:00:03:ec:
                    f0:5b:48:e1:8e:c6:4c:0e:2f:a0:7a:c4:c9:01:62:
                    88:91:5d:c6:4e:a5:88:0a:d6:bf:23:70:64:bc:c9:
                    05:88:c7:02:84:25:7d:f7:df:37:fa:77:de:2e:25:
                    28:3a:d5:3b:cd:c5:3b:63:8b:2d:2b:08:60:8e:2d:
                    59:5d:ed:a8:51:b3:c6:8f:d8:8c:ef:ab:a2:f8:cf:
                    4b:80:16:40:7f:83:0b:86:cc:5b:a4:1a:7d:81:78:
                    40:cb:3e:86:91:c8:a7:ba:96:32:87:b2:18:f7:3d:
                    06:03:41:7b:b8:bb:f0:cd:d8:75:82:ef:50:97:f6:
                    25:84:43:49:d6:4d:14:fc:f7:6c:ad:35:f0:0f:92:
                    a4:68:03:81:21:4c:c4:26:70:07:55:9a:78:47:ea:
                    cf:87:95:82:84:a5:0f:2c:1c:2a:a7:48:b7:8a:a5:
                    fb:7e:81:4f:9b:d6:13:60:14:b5:16:97:e9:7e:3f:
                    bb:d7:1d:27:29:59:71:1b:84:a1:b4:ec:12:31:93:
                    52:fa:a2:14:b9:7f:c7:af:7c:95:c4:6b:8b:78:c0:
                    a5:4c:7e:33:f3:3d:51:51:64:71:5a:a3:5a:18:86:
                    c8:41:a7:80:ec:c1:e9:93:a0:6f:7a:a7:64:e4:a3:
                    77:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CF:87:22:9C:EF:3E:5F:F1:24:46:14:0A:72:93:63:6E:7D:EF:D2
            X509v3 Authority Key Identifier:
                keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:30:3e:11:cd:34:a4:35:76:42:86:7f:25:eb:ea:1d:b9:fb:
         b6:fa:42:d0:b1:21:ef:aa:b1:a3:99:18:99:42:f8:c8:37:f1:
         dd:b9:48:c2:ef:19:d7:cb:4a:54:03:54:1c:dd:f7:12:c5:4f:
         83:fc:64:f5:28:08:53:c6:3c:73:a6:89:6a:49:fa:e2:52:2a:
         f5:3e:1d:6a:25:c5:d1:79:e5:64:79:65:96:82:3c:d0:a6:c0:
         c1:b8:3d:a2:dc:c3:a0:d6:9d:23:a2:2a:f5:98:ba:f2:02:18:
         b1:85:5a:ef:ce:8f:b9:18:43:1a:5c:b8:a2:27:82:c5:38:7a:
         6c:07:91:f8:70:c7:a3:52:25:61:2e:b5:6b:87:4e:5e:0c:5b:
         7b:c5:46:38:a3:1c:75:5e:5c:be:ed:24:32:e4:0b:cb:5b:ea:
         3c:fe:86:d0:b9:2c:ad:8a:d7:88:2e:9f:22:1b:78:23:f8:fb:
         d9:66:b8:cc:e3:f3:9d:11:9a:4b:10:ed:0b:9b:81:22:15:14:
         45:f4:dc:be:e4:63:a5:d1:f2:16:a9:bf:6b:3b:04:13:51:89:
         1a:08:1f:ef:d8:69:11:07:33:ca:68:bf:30:44:eb:af:61:ad:
         98:49:3f:52:07:13:1e:84:c6:d8:29:6a:a1:eb:69:cc:1f:6e:
         27:5e:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 08:00:14 2026 by rpki-client