This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
File:                     ggCxpefBdgW1czx0_sHvEnOz6iU.mft (raw, json)
Hash identifier:          oCj0jLMu0TS7Lvj7LSdvnZK7o39kpBEJTsWce7juXNU=
Subject key identifier:   B2:54:53:D5:58:8A:AE:C8:49:26:94:81:07:3E:98:D4:91:DE:CC:C5
Authority key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25
Certificate issuer:       /CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25
Certificate serial:       34F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
Manifest number:          34F9
Signing time:             Sat 24 Jan 2026 15:10:32 +0000
Manifest this update:     Sat 24 Jan 2026 15:10:32 +0000
Manifest next update:     Sat 31 Jan 2026 15:10:32 +0000
Files and hashes:         1: ggCxpefBdgW1czx0_sHvEnOz6iU.crl (hash: k2lxJ/utTZwHiYqgWm9xELfPpU5pjxpZIhk11/M8skI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl
                          rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13561 (0x34f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AD0C, serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25
        Validity
            Not Before: Jan 24 15:10:32 2026 GMT
            Not After : Jan 31 15:10:32 2026 GMT
        Subject: CN=6974e0e8-f73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:0c:7a:50:e8:c9:4d:7c:e7:1a:8a:2b:ef:
                    04:05:57:75:a5:2b:7c:a9:67:d0:bd:e7:1a:ac:0c:
                    c0:7f:ca:03:3d:b4:0b:3d:ca:c1:69:3b:fc:cc:f8:
                    e7:7c:90:39:7a:16:96:d7:60:81:7b:27:15:f1:30:
                    ca:35:cc:69:8e:3c:60:cc:3c:02:f2:24:4b:7b:6e:
                    e9:02:25:dd:e7:71:3c:38:24:e0:a9:9c:5c:14:3e:
                    94:90:d9:a9:34:4a:83:ac:47:84:78:ad:17:81:a9:
                    91:55:3e:c7:9c:4d:7d:79:00:de:76:5b:1e:79:b1:
                    a2:82:22:aa:46:62:6a:94:76:d5:d4:5b:80:a8:b1:
                    68:d0:c0:b6:34:9a:d2:6e:ca:6e:d6:94:de:94:46:
                    ca:fb:01:e5:3a:f1:db:f3:9c:7f:f5:93:dc:15:0a:
                    b6:8a:8e:25:28:4e:b0:e4:2e:39:8e:ea:a1:ad:19:
                    3d:3f:52:0b:c0:83:42:f6:53:31:fc:c1:b1:bc:f0:
                    b0:5e:a3:e3:58:83:72:b4:26:7b:93:3d:ab:18:4a:
                    b5:a0:da:f7:75:19:e9:6e:34:62:08:83:77:ef:ae:
                    3f:40:10:22:57:9c:4b:82:52:3b:71:34:d4:59:f1:
                    30:a6:b0:b8:f5:5f:b3:5b:b5:d0:2a:14:25:ae:f8:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:54:53:D5:58:8A:AE:C8:49:26:94:81:07:3E:98:D4:91:DE:CC:C5
            X509v3 Authority Key Identifier:
                keyid:82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a1:5b:e8:6c:09:e4:65:53:e9:53:72:e4:64:57:cc:b3:1c:
         9b:d1:a0:b8:23:b8:41:76:9d:e7:a8:c4:9c:f0:a2:36:81:1a:
         57:74:e0:4d:c4:be:a2:87:ae:29:13:be:8f:7e:d4:fb:b8:20:
         71:3e:dd:2d:01:ec:5d:6e:eb:03:92:d1:17:ef:cd:2f:8b:ce:
         46:c8:e7:01:78:0b:bf:29:1c:48:7f:d9:31:10:d1:45:58:68:
         c3:19:18:d9:7f:f4:b4:28:a9:60:18:7c:02:69:35:04:15:28:
         67:03:78:d9:2f:b9:32:65:93:2c:70:a4:70:af:6e:ef:df:10:
         0b:c0:eb:76:89:52:12:7b:b2:d5:af:85:73:da:3e:20:a3:f7:
         c5:a9:88:6c:01:5e:ee:fe:4f:9b:f5:7a:bb:b1:b9:fb:7e:59:
         8a:75:42:da:02:3f:91:65:5a:c7:03:60:86:3c:d2:6d:e0:39:
         d2:da:27:28:2d:d5:ec:b6:8d:84:cc:3b:36:2b:dd:0c:93:f2:
         da:c9:d6:c7:5b:1e:85:5c:68:a4:8d:45:fc:8f:81:56:39:cf:
         3e:10:e4:e8:4a:b7:21:8b:94:d4:ea:47:a7:0f:a9:da:bc:d1:
         54:4c:74:8b:af:5e:f8:49:f5:f3:e6:48:44:06:34:6e:5f:74:
         03:32:48:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:07 2026 by rpki-client