This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
File:                     Gb4TIRiPCXbTLoNtGvulRidmV-M.mft (raw, json)
Hash identifier:          bCxDjHed1Pvsy62i20IpqPEGCxn3ApLyAYYrxcNSG1w=
Subject key identifier:   23:31:4D:2C:9D:EF:DB:FA:AD:BA:E4:53:59:17:84:DB:20:43:B5:6B
Authority key identifier: 19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3
Certificate issuer:       /CN=A91174DD/serialNumber=19BE1321188F0976D32E836D1AFBA546276657E3
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
Manifest number:          05
Signing time:             Sun 25 Jan 2026 07:11:36 +0000
Manifest this update:     Sun 25 Jan 2026 07:11:35 +0000
Manifest next update:     Sun 01 Feb 2026 07:11:35 +0000
Files and hashes:         1: Gb4TIRiPCXbTLoNtGvulRidmV-M.crl (hash: NsgUZu6J+Sv0K6LvXhcLpFqoWtfSbfcL2pptCsBNaK0=)
                          2: 321730E4F5D211F0882E5659486F56BC.roa (hash: Hhg8Ggs1fdizlqeoLRDgynmLJgt9f+jSTtC9+1Y44fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.crl
                          rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 07:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91174DD, serialNumber=19BE1321188F0976D32E836D1AFBA546276657E3
        Validity
            Not Before: Jan 25 07:11:35 2026 GMT
            Not After : Feb  1 07:11:35 2026 GMT
        Subject: CN=6975c227-46aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:01:14:a0:75:27:89:29:7e:6d:08:69:87:
                    14:4c:95:5c:a1:03:41:29:41:c0:1e:1f:ce:d2:d8:
                    52:f7:3c:9c:a6:66:c2:6f:a3:69:d2:a9:02:e7:fa:
                    69:19:83:95:9f:d3:87:e2:b4:6f:f0:9e:51:04:3c:
                    be:23:f7:8e:8b:ec:d8:dd:b7:ea:e1:7e:de:6e:aa:
                    14:cb:a3:84:0d:9f:72:96:84:37:60:49:70:3b:77:
                    89:40:13:0e:06:ba:43:b1:51:f8:28:53:41:0a:18:
                    11:5b:50:b3:f9:bc:3f:ba:7f:b3:9b:6f:31:a7:18:
                    9f:42:36:ae:28:37:08:f9:df:bc:29:17:a8:22:44:
                    3e:fd:af:66:e9:48:a1:4b:12:df:45:15:8d:3a:c4:
                    c5:8f:35:4e:4b:76:32:59:54:df:56:ae:63:22:13:
                    0d:1d:58:14:ba:50:ad:96:21:40:70:57:b1:ad:3e:
                    1b:23:4d:c8:63:2b:2d:f0:50:fa:e4:4b:9b:bb:71:
                    59:a7:c7:e0:50:02:ef:e4:1a:67:93:68:b7:a9:4d:
                    f8:f4:e3:09:60:61:0a:d8:14:c3:34:2a:ca:81:85:
                    09:8f:ab:d4:05:2c:ec:88:cc:e9:a7:6e:37:50:fa:
                    dd:5a:0c:14:88:dd:f5:4d:77:b4:db:47:41:d9:90:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:31:4D:2C:9D:EF:DB:FA:AD:BA:E4:53:59:17:84:DB:20:43:B5:6B
            X509v3 Authority Key Identifier:
                keyid:19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:53:39:22:c3:e3:01:58:c5:11:b5:3c:20:c0:23:77:09:b3:
         69:df:0f:04:ba:e8:a2:f3:4c:8b:a7:0d:b2:8c:5e:7d:1a:5d:
         46:e0:ca:57:62:cd:f7:4e:58:ae:d5:aa:d0:72:7f:d5:c9:7d:
         6e:a4:d2:eb:da:55:fe:3b:61:16:28:0d:b1:c5:8b:84:c6:26:
         d6:97:ce:2f:c4:91:0c:cb:aa:64:88:8b:4e:8b:06:60:bd:ea:
         2a:e9:70:8a:23:bb:f7:48:9f:04:98:9c:2e:9e:36:e0:93:5a:
         21:34:34:37:c8:b3:40:47:5a:06:08:f2:ad:54:05:12:9c:36:
         5d:7f:17:39:bd:5f:61:8c:65:9c:9d:24:92:da:dd:12:63:c2:
         6f:7a:de:07:54:d6:b7:e6:e9:aa:99:d2:64:8f:bd:3f:33:ec:
         b3:62:70:81:bd:17:ec:61:88:00:63:79:b2:e4:8f:67:24:cc:
         ac:58:3f:f4:8b:77:ed:07:f9:87:f4:33:13:63:6a:dc:fb:42:
         35:0b:36:17:e2:be:29:ee:bc:6a:08:bc:46:72:38:99:44:28:
         e4:4c:a6:58:18:00:08:8d:d3:ea:b1:ee:38:e3:10:d0:27:cb:
         31:9f:38:53:6b:da:2f:57:43:b3:54:f5:d9:1e:09:f6:4e:02:
         f1:8f:22:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:02:18 2026 by rpki-client