This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
File:                     G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json)
Hash identifier:          r8nqZVAn59uZtyNx/iCvlXQc4Hpb9wQVNWLq9Zhahow=
Subject key identifier:   98:D1:F1:E3:DA:30:D3:E3:7A:DA:16:3D:F4:D6:6B:C1:3E:5D:D7:AB
Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90
Certificate issuer:       /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
Certificate serial:       0C33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
Manifest number:          0C2C
Signing time:             Sat 24 Jan 2026 18:20:00 +0000
Manifest this update:     Sat 24 Jan 2026 18:20:00 +0000
Manifest next update:     Sat 31 Jan 2026 18:20:00 +0000
Files and hashes:         1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: pybhGYiYpLDME9scQcthURBQLQS3U2J3yEjrGTw9q5g=)
                          2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: 8seskI/5/VQRZazAh70N9kr0X5I8gYV92db2rNZfLeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl
                          rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3123 (0xc33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
        Validity
            Not Before: Jan 24 18:20:00 2026 GMT
            Not After : Jan 31 18:20:00 2026 GMT
        Subject: CN=69750d50-8d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b5:00:a2:ad:a7:78:8d:93:3c:77:2f:00:ef:
                    47:c3:22:2f:b8:dd:e9:81:03:5e:57:b2:2e:02:88:
                    d7:1d:b8:0c:cf:6d:91:26:4a:74:42:96:d1:23:06:
                    b1:9a:6e:32:16:3c:51:ea:54:c1:f0:98:f9:8c:c4:
                    f9:cc:ae:a9:d9:18:fb:19:69:ef:78:8d:97:34:51:
                    6d:6e:14:42:c6:7e:b3:c6:b0:be:9e:e0:1f:32:fb:
                    a2:61:4e:6a:59:f7:16:8d:8e:f0:2e:3b:60:1d:84:
                    68:7b:29:60:7c:92:7f:27:92:28:8c:4b:f2:a6:38:
                    a1:5d:14:73:0c:2c:23:27:8b:89:0b:87:39:aa:c9:
                    b7:6e:f6:53:49:1e:5a:28:32:3e:8b:1e:a9:b4:19:
                    84:cd:5c:98:2f:60:8f:65:fa:01:98:f5:11:94:18:
                    d0:01:44:21:29:3c:18:60:19:c1:19:bc:55:3d:0b:
                    9a:38:75:fc:52:ba:e5:3c:3a:a2:1a:28:87:28:79:
                    38:38:49:51:3c:d0:90:b8:30:a1:f7:c0:e0:d0:fd:
                    d9:75:64:26:51:a2:18:bb:2a:c5:39:2f:43:01:14:
                    d0:44:e9:39:7c:b7:39:c7:5f:e8:aa:4e:63:7f:10:
                    05:8f:cd:d5:3a:a8:42:04:4d:f6:a5:db:ef:9c:b8:
                    af:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D1:F1:E3:DA:30:D3:E3:7A:DA:16:3D:F4:D6:6B:C1:3E:5D:D7:AB
            X509v3 Authority Key Identifier:
                keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:5a:fb:82:d1:9a:79:15:61:77:a9:09:ff:0d:19:b8:1d:4f:
         24:7f:9f:58:e0:45:d5:56:ad:53:7a:17:08:da:e2:f7:4e:44:
         b0:42:1c:45:c4:1c:13:6c:09:80:4a:75:af:85:e4:7b:92:0f:
         e2:b7:07:3f:1a:8f:59:ec:65:e3:23:35:27:56:dc:f4:94:30:
         2f:a1:66:45:69:b0:65:93:6b:4f:c5:99:22:c7:07:c0:c6:ac:
         bd:b7:1e:e4:bc:a0:a2:8c:d4:53:62:3a:c6:d2:21:37:99:0f:
         82:b5:22:e7:e8:5a:55:a2:a7:c0:63:e5:6a:56:05:31:a0:6e:
         38:c6:e2:ff:af:6f:84:3d:3f:e2:28:b5:58:77:a3:ea:37:94:
         9c:21:39:49:19:4a:fd:3f:06:bf:e1:77:38:09:53:5c:81:6d:
         2e:27:fc:41:eb:7b:85:00:aa:c1:2c:ef:0f:62:4e:81:ce:d2:
         e7:2c:29:e4:da:bb:90:b4:2c:69:a2:15:ae:49:12:34:c6:76:
         c1:f8:35:c4:d1:6d:31:99:e9:61:b4:bf:fc:75:e1:39:39:3a:
         7f:1a:e1:10:51:cc:19:a8:d5:bd:03:74:c0:7f:e3:27:c8:95:
         49:2a:be:73:cd:42:55:d8:1e:d0:bc:54:d2:b7:02:3b:0c:96:
         e8:34:28:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:16:29 2026 by rpki-client