This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
File:                     GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json)
Hash identifier:          cGARJdy93XK6Vubm9R22J661i8kIJFk8gis0H/+oBZw=
Subject key identifier:   79:2A:A9:E9:4F:43:02:92:E7:0B:71:34:A1:40:A3:48:2B:3D:58:57
Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71
Certificate issuer:       /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
Certificate serial:       06D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
Manifest number:          06D2
Signing time:             Sat 24 Jan 2026 21:27:09 +0000
Manifest this update:     Sat 24 Jan 2026 21:27:08 +0000
Manifest next update:     Sat 31 Jan 2026 21:27:08 +0000
Files and hashes:         1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: +Z/SB/rz8S1Ad8fBQ2VtC1Tv86wvlGjI0ed5F5A/CTU=)
                          2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: j+dLoRV+1O81d7fGrVAaKGQRyaLFal/pTYtw+D6AbWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl
                          rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752 (0x6d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912111B, serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
        Validity
            Not Before: Jan 24 21:27:08 2026 GMT
            Not After : Jan 31 21:27:08 2026 GMT
        Subject: CN=6975392d-0a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:f3:28:f9:2c:f9:25:69:f1:06:55:db:b4:
                    a3:81:f5:d8:d9:c3:bc:19:fe:45:03:99:81:78:3a:
                    d8:9f:05:2d:5e:80:44:51:55:0d:00:4d:1d:06:ed:
                    96:dd:3e:8b:28:b7:dd:62:8a:d9:93:f4:7e:32:d4:
                    54:b5:cf:ba:99:00:c7:da:73:d8:26:5f:34:a7:6d:
                    f8:11:3b:5a:bc:7f:d5:32:61:64:ba:5f:e2:55:b2:
                    dd:e7:34:3a:80:3f:36:41:0a:d0:fa:95:84:19:ad:
                    73:71:38:42:b5:e6:26:d9:f3:3f:52:da:b2:b7:9e:
                    10:c0:09:30:d4:f2:72:d1:bb:a4:28:c0:0c:82:75:
                    b6:a4:b2:65:ee:52:a1:07:89:8e:ea:30:56:2d:90:
                    b3:82:c0:89:7e:ab:4f:68:ff:21:09:e6:72:e6:e6:
                    52:9f:9e:5a:7f:3e:e2:13:bd:47:7a:17:72:cf:78:
                    c2:44:cd:04:9d:35:c8:ac:7c:6b:8e:ee:6f:67:68:
                    0e:d0:dd:ed:c5:a0:ec:b1:e3:64:ef:67:ad:fc:25:
                    f9:96:5b:9e:ed:19:5a:d9:4a:a1:f7:58:ac:9a:58:
                    55:7e:05:2a:98:e3:0d:85:11:c2:29:06:d6:40:5a:
                    87:dd:ae:2a:f8:67:4f:f8:04:b7:f3:84:71:e0:81:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2A:A9:E9:4F:43:02:92:E7:0B:71:34:A1:40:A3:48:2B:3D:58:57
            X509v3 Authority Key Identifier:
                keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:25:e2:56:58:45:4e:f5:c4:54:27:7f:1e:e9:68:79:a7:a2:
         7c:27:d9:49:69:74:8e:fc:95:83:14:19:3d:9c:01:1f:a6:fa:
         44:84:3f:51:d5:7f:05:9a:f5:f2:35:6d:e6:e8:ab:bc:16:ca:
         84:39:1c:3a:a6:52:5a:cb:58:92:f9:a5:f9:7d:ab:60:15:d3:
         c9:86:4f:e8:43:eb:5f:6b:57:de:03:a5:3a:0c:a1:03:5b:04:
         72:fd:49:7d:7f:a8:f2:05:ba:b5:3b:1d:ef:29:e2:94:2a:c5:
         9a:e5:17:92:3c:3b:bf:ca:15:53:67:76:e6:94:5e:27:59:08:
         ce:5e:1c:dd:8a:b0:5f:80:4d:b9:df:98:5d:de:80:02:07:55:
         a5:61:0e:52:07:26:11:06:66:dd:c2:24:8e:a6:6d:4a:21:3b:
         aa:f1:84:c5:31:93:ad:61:13:cd:fe:20:10:e2:3e:be:f0:87:
         02:89:6d:70:67:ca:2f:15:bd:c6:42:03:e3:5a:46:14:f0:57:
         e8:ab:6c:9f:33:6f:65:db:19:40:08:ce:33:91:1f:5f:03:8c:
         1c:9e:49:4e:ac:2e:6f:0c:c6:6c:ce:fe:ed:60:1b:d6:72:8b:
         09:34:e5:89:83:e2:01:32:05:3d:6f:e7:f5:32:a0:0f:29:b5:
         1a:dc:bb:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjExMUIxMTAvBgNVBAUTKDE5QTgwNUQwMjY5NTU2ODNGM0ZFRTU2M0Y4RTZBMEEy
NzhGMEJGNzEwHhcNMjYwMTI0MjEyNzA4WhcNMjYwMTMxMjEyNzA4WjAYMRYwFAYD
VQQDDA02OTc1MzkyZC0wYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJLzKPks+SVp8QZV27SjgfXY2cO8Gf5FA5mBeDrYnwUtXoBEUVUNAE0dBu2W
3T6LKLfdYorZk/R+MtRUtc+6mQDH2nPYJl80p234ETtavH/VMmFkul/iVbLd5zQ6
gD82QQrQ+pWEGa1zcThCteYm2fM/Utqyt54QwAkw1PJy0bukKMAMgnW2pLJl7lKh
B4mO6jBWLZCzgsCJfqtPaP8hCeZy5uZSn55afz7iE71Hehdyz3jCRM0EnTXIrHxr
ju5vZ2gO0N3txaDsseNk72et/CX5llue7Rla2Uqh91ismlhVfgUqmOMNhRHCKQbW
QFqH3a4q+GdP+AS384Rx4IHFrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkqqelP
QwKS5wtxNKFAo0grPVhXMB8GA1UdIwQYMBaAFBmoBdAmlVaD8/7lY/jmoKJ48L9x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTExQi8zQkQyOEYxQTg1
RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZvUHpfdVZqLU9hZ29uand2
M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dhZ0YwQ2FWVm9Qel91VmotT2Fnb25qd3YzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTExQi8zQkQyOEYxQTg1RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZv
UHpfdVZqLU9hZ29uand2M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCuJeJWWEVO9cRUJ38e6Wh5p6J8J9lJaXSO/JWDFBk9nAEfpvpEhD9R
1X8FmvXyNW3m6Ku8FsqEORw6plJay1iS+aX5fatgFdPJhk/oQ+tfa1feA6U6DKED
WwRy/Ul9f6jyBbq1Ox3vKeKUKsWa5ReSPDu/yhVTZ3bmlF4nWQjOXhzdirBfgE25
35hd3oACB1WlYQ5SByYRBmbdwiSOpm1KITuq8YTFMZOtYRPN/iAQ4j6+8IcCiW1w
Z8ovFb3GQgPjWkYU8Ffoq2yfM29l2xlACM4zkR9fA4wcnklOrC5vDMZszv7tYBvW
cosJNOWJg+IBMgU9b+f1MqAPKbUa3LtI
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:42 2026 by rpki-client