This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
File:                     gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json)
Hash identifier:          mM0ueBP+RhKY7dvXJIeFqYgAaxjQzuBAJEpy24TufsM=
Subject key identifier:   E8:8F:03:A3:13:DD:43:AC:CB:16:02:AC:FC:06:8D:B6:26:81:B5:D7
Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
Certificate issuer:       /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
Manifest number:          3D
Signing time:             Fri 23 Jan 2026 06:28:34 +0000
Manifest this update:     Fri 23 Jan 2026 06:28:34 +0000
Manifest next update:     Fri 30 Jan 2026 06:28:34 +0000
Files and hashes:         1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: W7mpDV10iS2ggZF8nt4Wp4ZEwjFXRWSw/r6+cqwE9/s=)
                          2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: Ty3keWksVpROp5e1j4cINLe1/6qFn8g6RY9zGQ2Ec2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
                          rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE
        Validity
            Not Before: Jan 23 06:28:34 2026 GMT
            Not After : Jan 30 06:28:34 2026 GMT
        Subject: CN=69731512-445e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:8e:7a:38:c5:93:6f:1c:96:53:9a:01:d0:
                    73:f3:f2:1b:33:0c:64:8c:c5:cb:79:70:ab:7f:cd:
                    9d:7b:98:d9:25:cd:8c:4f:66:61:0a:c3:eb:83:68:
                    ca:76:ed:da:10:16:e1:f2:4b:46:2e:a5:99:db:8a:
                    2f:cb:16:ce:f5:f6:f8:15:11:07:1b:6c:b9:a6:9e:
                    7b:51:d0:f5:9a:81:50:68:7f:aa:47:3a:d9:86:c9:
                    87:c6:61:9e:67:0d:fa:03:d5:87:e2:f8:3e:7e:32:
                    3e:9a:af:a4:6a:e2:83:0c:e9:73:3a:6b:42:ed:a7:
                    b9:5c:25:66:ea:be:16:41:8c:09:a7:d5:5a:46:34:
                    8a:0a:f0:5c:be:35:98:a2:a5:29:35:6a:19:d1:83:
                    fa:33:b6:53:28:b9:e8:27:34:a6:88:bc:a9:e0:e0:
                    42:17:81:ab:60:9d:3b:c8:92:f4:26:d7:31:16:87:
                    73:52:1e:dd:fc:29:e0:59:c2:c2:be:17:3e:6d:54:
                    0c:79:5f:39:0a:9b:e7:c3:5e:8c:1e:b0:b3:bf:60:
                    98:13:77:68:31:ea:df:9a:12:c1:bd:bd:fa:1e:21:
                    57:c9:8a:ab:b0:f6:2b:15:14:8b:99:2b:a7:8c:ff:
                    2a:92:b4:48:b7:00:b0:7e:ac:b7:e8:60:f9:ac:e9:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8F:03:A3:13:DD:43:AC:CB:16:02:AC:FC:06:8D:B6:26:81:B5:D7
            X509v3 Authority Key Identifier:
                keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:b0:be:b9:fb:ec:5c:80:5b:e3:da:c4:84:36:f0:7d:34:48:
         b9:d9:c2:e9:50:06:9f:31:f5:ba:71:4d:d0:ea:41:4e:4b:85:
         c3:06:27:2c:f4:95:75:2e:04:d7:cb:bf:47:b3:2c:9e:35:66:
         f5:db:67:1f:cc:04:4c:74:50:16:cc:8c:86:a9:3a:0e:29:ac:
         1f:45:f9:7f:a8:b1:da:60:1f:6f:ea:28:5b:35:8f:f5:7b:4e:
         10:d2:56:3d:0e:e5:69:7d:07:c7:c8:a0:72:97:5a:ea:6f:0d:
         d9:ec:0f:27:37:19:54:62:3e:94:84:57:59:a1:69:50:b4:76:
         73:15:a9:3e:33:1d:9c:f1:8b:85:01:f7:9e:7e:43:37:8b:3c:
         b3:27:9f:4f:96:b9:72:bc:3e:f8:8a:63:f5:a4:1e:8c:d1:7b:
         73:02:e9:b5:6c:b5:cb:97:88:f5:e8:65:6f:29:b1:fc:69:da:
         94:0c:6a:f9:f9:db:41:ca:79:45:60:2d:44:18:1b:4c:76:59:
         76:d2:f8:c4:44:f1:ff:c8:2b:2b:1b:77:22:d1:29:46:ee:3b:
         e5:19:52:da:91:c7:b1:b7:de:92:08:bd:b9:80:70:ba:2c:50:
         67:83:dd:25:69:d7:61:10:f4:79:1a:63:6f:d4:17:66:91:dc:
         3b:aa:20:f0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RjU4NDExMC8GA1UEBRMoODAwNzE3NjVFOThCMzk2MTI1ODhEMzc4NTcyMTQzMkMz
MjYwN0ZFRTAeFw0yNjAxMjMwNjI4MzRaFw0yNjAxMzAwNjI4MzRaMBgxFjAUBgNV
BAMMDTY5NzMxNTEyLTQ0NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCWMI56OMWTbxyWU5oB0HPz8hszDGSMxct5cKt/zZ17mNklzYxPZmEKw+uDaMp2
7doQFuHyS0YupZnbii/LFs719vgVEQcbbLmmnntR0PWagVBof6pHOtmGyYfGYZ5n
DfoD1Yfi+D5+Mj6ar6Rq4oMM6XM6a0Ltp7lcJWbqvhZBjAmn1VpGNIoK8Fy+NZii
pSk1ahnRg/oztlMouegnNKaIvKng4EIXgatgnTvIkvQm1zEWh3NSHt38KeBZwsK+
Fz5tVAx5XzkKm+fDXowesLO/YJgTd2gx6t+aEsG9vfoeIVfJiquw9isVFIuZK6eM
/yqStEi3ALB+rLfoYPms6UINAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6I8DoxPd
Q6zLFgKs/AaNtiaBtdcwHwYDVR0jBBgwFoAUgAcXZemLOWEliNN4VyFDLDJgf+4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg0L0ZGRjgwMjE4OURB
ODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dFbGlOTjRWeUZETERKZ2Yt
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ0FjWFplbUxPV0VsaU5ONFZ5RkRMREpnZi00LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG
NTg0L0ZGRjgwMjE4OURBODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dF
bGlOTjRWeUZETERKZ2YtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAL2wvrn77FyAW+PaxIQ28H00SLnZwulQBp8x9bpxTdDqQU5LhcMGJyz0
lXUuBNfLv0ezLJ41ZvXbZx/MBEx0UBbMjIapOg4prB9F+X+osdpgH2/qKFs1j/V7
ThDSVj0O5Wl9B8fIoHKXWupvDdnsDyc3GVRiPpSEV1mhaVC0dnMVqT4zHZzxi4UB
955+QzeLPLMnn0+WuXK8PviKY/WkHozRe3MC6bVstcuXiPXoZW8psfxp2pQMavn5
20HKeUVgLUQYG0x2WXbS+MRE8f/IKysbdyLRKUbuO+UZUtqRx7G33pIIvbmAcLos
UGeD3SVp12EQ9HkaY2/UF2aR3DuqIPA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:04 2026 by rpki-client