This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
File:                     Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json)
Hash identifier:          SKPzzZfgzxphtu9CtVN3fDOE0ShxkZvJXNgdy60YPVI=
Subject key identifier:   41:0E:A3:57:BE:FD:85:4B:AD:DE:59:A7:DB:E8:85:18:5B:8D:7F:13
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Certificate issuer:       /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial:       2657
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
Manifest number:          2645
Signing time:             Tue 20 Jan 2026 15:33:39 +0000
Manifest this update:     Tue 20 Jan 2026 15:33:38 +0000
Manifest next update:     Tue 27 Jan 2026 15:33:38 +0000
Files and hashes:         1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: zeUaOnzXpHgx5HNKWza6wsJ7eltTXEdaLM0msaRJSm8=)
                          2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: MwkxKey8SdTfX3rA2ndaHPVnUsJ97475p+Dzwmyl9SQ=)
                          3: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: gP1rmRhgK5le3CICuUOYmVhhDItIyOhZ8RIHh+3gkE8=)
                          4: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: UiQJQcjiTKGUKZaMNBKg71L13IK59w5XS6QCL7nnWSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
                          rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9815 (0x2657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
        Validity
            Not Before: Jan 20 15:33:38 2026 GMT
            Not After : Jan 27 15:33:38 2026 GMT
        Subject: CN=696fa052-ca6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f0:22:56:f7:59:e0:bc:14:f0:7f:b2:8b:ad:
                    71:6b:27:8c:31:fc:4a:ae:52:cd:ce:a5:27:cc:b6:
                    8b:df:d9:50:11:68:e4:8d:b2:ca:fe:25:00:3c:c0:
                    a1:7b:1d:48:3b:ba:f1:36:52:ac:27:19:af:38:45:
                    0c:a0:26:6f:e1:92:ef:b5:17:b9:1a:14:16:a4:c5:
                    98:38:a1:70:e4:6d:9e:97:fa:95:3e:83:c7:1e:a8:
                    fe:e7:fc:c7:b4:ae:25:b0:01:b3:d1:d0:04:49:50:
                    5f:24:f9:b0:eb:1c:86:91:45:c3:d3:a8:04:ff:b5:
                    3d:27:bc:a6:d0:4d:37:8b:95:e6:f5:ef:90:01:42:
                    d9:8d:53:89:ab:19:71:35:76:f3:36:e9:a5:2a:6f:
                    fc:ba:41:84:c7:54:d6:5f:64:2c:5a:4c:b0:81:79:
                    8c:40:a0:06:9a:e7:7c:68:3a:4d:5b:78:ec:ac:fc:
                    cd:a7:b0:20:35:55:ac:8b:79:67:78:7f:07:83:f5:
                    42:99:a5:30:c0:3f:41:b0:af:55:a4:5b:a4:1e:2b:
                    be:28:d8:6b:97:84:a8:71:d5:96:0b:7c:cf:e0:51:
                    72:dd:e5:db:fe:5a:81:b6:18:8a:98:9d:1f:72:2b:
                    38:0d:ce:71:ed:5e:74:b6:89:8a:16:be:a9:d5:54:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0E:A3:57:BE:FD:85:4B:AD:DE:59:A7:DB:E8:85:18:5B:8D:7F:13
            X509v3 Authority Key Identifier:
                keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2f:e4:21:92:f6:9e:d4:e5:2d:30:5c:aa:1d:fe:2a:0b:33:
         2d:8d:6a:a1:eb:ee:a4:e3:60:8e:7a:fc:04:57:ff:18:18:e2:
         c4:e4:0a:d2:4e:c2:b3:c1:fa:55:7d:72:44:04:5b:14:51:e9:
         2f:0a:e2:39:c1:83:d4:67:04:a9:b3:70:9b:39:50:30:3b:21:
         6c:21:ae:bf:1b:24:f8:df:eb:31:58:6e:99:dd:1a:4c:23:65:
         c7:e5:60:02:f8:41:d5:8b:58:04:7c:6b:fe:e2:60:83:43:5b:
         10:04:78:ec:1f:54:7a:90:5b:e3:b0:a1:82:cd:75:b6:4d:79:
         b5:28:a4:14:df:02:23:bd:bb:a9:c8:cb:3c:c5:0b:32:a4:a0:
         cb:5f:d2:5c:fe:16:d1:3f:67:0c:89:f1:2c:c3:45:1a:a4:25:
         f5:bb:e0:30:9a:7b:40:96:fa:84:fe:fe:ac:24:ad:a1:7c:60:
         d5:7a:05:b4:d3:6d:40:79:54:a8:6c:f5:29:04:17:17:b7:9f:
         68:d3:50:35:7f:02:50:3e:1d:8b:b6:6e:4c:25:30:0c:e7:91:
         85:54:c5:72:be:4e:49:e7:8a:b4:1e:8d:77:84:95:93:d9:cb:
         e5:5b:29:89:4e:7a:c4:03:a8:03:fc:33:75:a7:2a:6f:a2:3a:
         5b:97:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:44:22 2026 by rpki-client