This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
File:                     GhpArZOkpDB-1yZNR9JSyvYt7_0.mft (raw, json)
Hash identifier:          wKR6Rz+kMkBt0MSoPO1cwyWUw2nXk0EQfQvirUpBIVU=
Subject key identifier:   27:35:3D:36:D3:0F:1C:28:4B:5A:FF:A0:07:AE:1F:C0:02:10:60:CC
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Certificate issuer:       /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial:       0D80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
Manifest number:          0D2A
Signing time:             Sat 24 Jan 2026 17:56:58 +0000
Manifest this update:     Sat 24 Jan 2026 17:56:58 +0000
Manifest next update:     Sat 31 Jan 2026 17:56:58 +0000
Files and hashes:         1: GhpArZOkpDB-1yZNR9JSyvYt7_0.crl (hash: XkJc7GOIyWOiTt2TPvOJFU1SdJB+ur5AU+/sHJvfJH8=)
                          2: E4243712ED6E11F097BA5186596F56BC.roa (hash: AdADyeuKbvrKTEq03B4ZjusjzlWvsX8Lbm8MnAnQaec=)
                          3: 566800AE193C11F094773636C4F9AE02.roa (hash: x5Q7IFWOHg2tUDOM+TNLmmJ3sU4DrJntxSwPcYFFFRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
                          rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3456 (0xd80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
        Validity
            Not Before: Jan 24 17:56:58 2026 GMT
            Not After : Jan 31 17:56:58 2026 GMT
        Subject: CN=697507ea-22f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:cb:dc:e4:a6:73:86:73:1d:57:a8:c9:89:
                    5c:c5:0c:e5:24:82:f2:b5:f8:f5:c3:6b:29:02:0d:
                    63:49:45:c8:f6:31:a5:df:88:22:87:dc:84:08:c5:
                    97:f7:51:b9:71:85:56:f8:e3:6f:21:7d:e4:fa:5c:
                    0d:12:7c:72:3f:fb:f2:68:cc:78:63:06:1b:72:cc:
                    60:c4:10:63:af:07:db:31:c1:88:3e:f7:e1:50:0c:
                    84:59:26:6f:6b:0b:35:64:44:cc:ec:90:13:dc:09:
                    a4:78:79:f6:26:11:14:96:8c:e3:d4:47:a4:93:92:
                    87:cf:f0:50:79:d4:97:ce:c1:5b:a3:96:c2:f9:c1:
                    ce:0f:93:02:57:7f:33:9a:8a:42:f3:78:38:b4:a3:
                    e5:2a:ef:83:6a:ba:3f:a6:a0:ff:fc:38:60:76:5b:
                    d2:4e:52:62:0d:1c:7f:d0:b2:fa:48:34:52:af:00:
                    8a:62:64:73:ac:24:68:67:9f:c6:0c:a3:26:98:bc:
                    d8:e7:f6:a3:d8:c2:af:7b:70:45:85:34:cf:13:98:
                    9b:f9:92:5b:53:14:23:2f:ee:e8:7f:8c:9c:eb:9b:
                    1e:2c:72:6a:ba:20:76:25:4a:2c:f5:ca:fc:ae:17:
                    9d:f5:66:14:b8:03:3f:41:41:a2:15:32:8f:ce:52:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:35:3D:36:D3:0F:1C:28:4B:5A:FF:A0:07:AE:1F:C0:02:10:60:CC
            X509v3 Authority Key Identifier:
                keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:53:14:68:08:a4:d0:8b:46:a9:cf:4f:f6:93:ec:4a:7f:67:
         42:8d:20:b2:49:4e:4c:29:1b:af:04:76:5c:92:e1:3e:08:3d:
         b5:d4:77:b3:81:e3:d3:50:f6:4a:89:a1:68:6c:80:88:87:6d:
         eb:dc:33:c4:51:23:d7:45:a8:63:b5:03:b6:ce:52:3d:9a:b4:
         33:06:a2:e6:4c:e3:a7:8d:82:91:6f:c7:e4:2e:35:5a:e7:7f:
         40:19:4a:d0:9f:f3:0e:84:29:f9:6d:42:3e:98:22:9e:dc:30:
         c7:d9:dc:48:1b:46:a4:9b:6a:62:dc:93:3f:f3:e6:a1:eb:70:
         20:f8:f1:af:c5:27:a9:ef:e6:92:66:58:32:12:d8:bd:fe:2a:
         74:79:0f:4f:7e:10:df:0e:95:a5:31:ba:3c:88:d7:ba:0e:cc:
         0a:2d:31:44:99:b1:05:62:32:27:31:d8:77:3a:af:39:6b:69:
         30:5a:66:f8:93:40:70:3f:c7:ff:9d:7c:de:29:12:d3:88:f4:
         53:1a:26:21:e0:a8:66:51:fd:67:2c:72:cc:4b:cf:e1:20:1d:
         14:1f:c1:a2:f1:7a:3d:17:9f:8c:81:e6:2d:09:ba:05:c9:5c:
         32:c3:ba:5d:93:cb:d5:59:65:e4:c6:c0:e4:d4:6d:65:19:71:
         40:fb:11:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB
RjYyREVGRkQwHhcNMjYwMTI0MTc1NjU4WhcNMjYwMTMxMTc1NjU4WjAYMRYwFAYD
VQQDDA02OTc1MDdlYS0yMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA38zL3OSmc4ZzHVeoyYlcxQzlJILytfj1w2spAg1jSUXI9jGl34gih9yECMWX
91G5cYVW+ONvIX3k+lwNEnxyP/vyaMx4YwYbcsxgxBBjrwfbMcGIPvfhUAyEWSZv
aws1ZETM7JAT3AmkeHn2JhEUlozj1Eekk5KHz/BQedSXzsFbo5bC+cHOD5MCV38z
mopC83g4tKPlKu+Daro/pqD//DhgdlvSTlJiDRx/0LL6SDRSrwCKYmRzrCRoZ5/G
DKMmmLzY5/aj2MKve3BFhTTPE5ib+ZJbUxQjL+7of4yc65seLHJquiB2JUos9cr8
rhed9WYUuAM/QUGiFTKPzlIuzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCc1PTbT
DxwoS1r/oAeuH8ACEGDMMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2
QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDc1Qy8yQkM1RkQ0MDA2QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BE
Qi0xeVpOUjlKU3l2WXQ3XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlUxRoCKTQi0apz0/2k+xKf2dCjSCySU5MKRuvBHZckuE+CD211Hez
gePTUPZKiaFobICIh23r3DPEUSPXRahjtQO2zlI9mrQzBqLmTOOnjYKRb8fkLjVa
539AGUrQn/MOhCn5bUI+mCKe3DDH2dxIG0akm2pi3JM/8+ah63Ag+PGvxSep7+aS
ZlgyEti9/ip0eQ9PfhDfDpWlMbo8iNe6DswKLTFEmbEFYjInMdh3Oq85a2kwWmb4
k0BwP8f/nXzeKRLTiPRTGiYh4KhmUf1nLHLMS8/hIB0UH8Gi8Xo9F5+MgeYtCboF
yVwyw7pdk8vVWWXkxsDk1G1lGXFA+xG7
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:59 2026 by rpki-client