This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
File:                     cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json)
Hash identifier:          ytbrY0XY/YAgK9z6ltgfZpW+yC1q1lDwSKhKOxI0gr8=
Subject key identifier:   5F:16:A5:06:73:1D:D7:59:34:29:9C:D6:34:88:8A:82:BE:8F:0C:80
Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82
Certificate issuer:       /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82
Certificate serial:       030C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
Manifest number:          0304
Signing time:             Sun 25 Jan 2026 00:21:30 +0000
Manifest this update:     Sun 25 Jan 2026 00:21:29 +0000
Manifest next update:     Sun 01 Feb 2026 00:21:29 +0000
Files and hashes:         1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: uvLQ5x9MMcdLZ7QIrWSJ3oN0a9MlivTsxNI2RhAHi0s=)
                          2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: JT4dplBUu4v9YQvNGUvDei5LqVZTJF+BU50zqJrOD2A=)
                          3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: JRRHFHRH/uVW0PHutMy6lJB/eW/QXu294EFbaPi8iXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl
                          rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82
        Validity
            Not Before: Jan 25 00:21:29 2026 GMT
            Not After : Feb  1 00:21:29 2026 GMT
        Subject: CN=69756209-573b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:db:31:a9:55:fc:57:bc:fe:e7:30:dd:5a:
                    77:48:6a:e4:9e:4c:f8:a0:a4:a1:3a:43:74:f2:a4:
                    9c:b7:74:f3:88:18:ea:63:e8:ea:b5:2c:58:f1:25:
                    f3:d2:ba:ff:3d:94:f5:d9:c8:83:26:7e:5f:a6:7f:
                    a0:82:1a:2c:40:6d:07:8b:f3:91:c7:e6:5c:1d:bc:
                    d3:45:e6:e6:80:c1:52:59:13:77:1e:9c:cb:42:ab:
                    07:dc:bc:11:f1:b0:d5:51:f7:ce:85:f7:8a:e6:25:
                    b8:14:54:98:b2:ff:d7:86:f4:cf:5f:76:ad:63:3d:
                    be:98:fc:51:e0:70:0a:2a:80:ee:24:55:b3:26:a8:
                    a9:5d:aa:16:06:89:1d:5a:b4:20:a6:9a:3e:e8:23:
                    9c:e2:3a:5d:a5:58:39:71:7a:89:3c:23:20:6d:ef:
                    10:d5:ad:da:2e:a7:17:4d:02:a1:b2:1c:77:16:17:
                    40:23:e4:5b:36:05:1e:3e:30:21:02:b9:d9:7f:56:
                    54:d1:22:aa:7c:68:d0:22:a6:56:41:8f:63:79:e8:
                    fa:cb:ab:45:97:a0:68:3d:3f:20:13:eb:ec:0a:a5:
                    72:1c:01:0f:86:55:e6:90:ab:05:ea:c9:d2:77:93:
                    13:44:3d:a5:83:3d:ee:56:25:79:fa:a4:e8:f7:b3:
                    82:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:16:A5:06:73:1D:D7:59:34:29:9C:D6:34:88:8A:82:BE:8F:0C:80
            X509v3 Authority Key Identifier:
                keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b2:16:e4:5a:01:5a:58:9a:d5:2d:38:7e:f9:a8:c7:bd:5e:
         af:a0:ad:05:2c:2d:8a:74:33:c9:74:28:8f:ee:c6:10:0f:f7:
         d0:ea:dd:55:cb:93:c0:0e:5c:e6:f8:14:0b:73:e2:f7:cb:93:
         2f:8c:30:af:40:00:20:9e:d3:37:f4:34:ea:97:e0:49:69:4f:
         b7:cf:56:d1:ed:36:34:2e:f3:f8:69:48:79:31:b4:53:4f:d6:
         c1:3d:66:8b:e6:2e:be:7c:4d:2b:f6:86:f1:e5:0e:3e:fe:31:
         5e:6d:14:ad:c1:c1:fd:8e:66:10:d5:0b:c3:d3:0b:37:f5:e3:
         5c:0b:8f:b3:49:99:4d:83:dd:73:42:05:55:25:be:8a:bf:49:
         7f:4e:96:ae:4a:2b:73:09:b5:0f:6d:23:86:5c:fb:a9:01:30:
         2e:a7:37:74:73:48:e3:2a:08:81:75:ad:c5:01:34:f5:5c:64:
         0a:b0:e7:2e:11:0b:7d:d2:32:cc:00:0f:92:63:29:15:34:67:
         ad:34:40:a4:8e:aa:df:58:b2:a1:c0:4a:ba:3f:be:66:0c:84:
         d6:e9:69:6b:b1:8b:4d:31:e4:36:dd:46:16:dc:0a:41:bf:f7:
         a8:ea:3f:ab:8f:cc:49:04:86:11:56:b2:4c:be:2b:38:26:00:
         55:bd:5d:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD
NkVGRTVEODIwHhcNMjYwMTI1MDAyMTI5WhcNMjYwMjAxMDAyMTI5WjAYMRYwFAYD
VQQDDA02OTc1NjIwOS01NzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmt3bMalV/Fe8/ucw3Vp3SGrknkz4oKShOkN08qSct3TziBjqY+jqtSxY8SXz
0rr/PZT12ciDJn5fpn+gghosQG0Hi/ORx+ZcHbzTRebmgMFSWRN3HpzLQqsH3LwR
8bDVUffOhfeK5iW4FFSYsv/XhvTPX3atYz2+mPxR4HAKKoDuJFWzJqipXaoWBokd
WrQgppo+6COc4jpdpVg5cXqJPCMgbe8Q1a3aLqcXTQKhshx3FhdAI+RbNgUePjAh
ArnZf1ZU0SKqfGjQIqZWQY9jeej6y6tFl6BoPT8gE+vsCqVyHAEPhlXmkKsF6snS
d5MTRD2lgz3uViV5+qTo97OCDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8WpQZz
HddZNCmc1jSIioK+jwyAMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2
NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G
MjlBeUpBVGs5alRHNy1YWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcshbkWgFaWJrVLTh++ajHvV6voK0FLC2KdDPJdCiP7sYQD/fQ6t1V
y5PADlzm+BQLc+L3y5MvjDCvQAAgntM39DTql+BJaU+3z1bR7TY0LvP4aUh5MbRT
T9bBPWaL5i6+fE0r9obx5Q4+/jFebRStwcH9jmYQ1QvD0ws39eNcC4+zSZlNg91z
QgVVJb6Kv0l/TpauSitzCbUPbSOGXPupATAupzd0c0jjKgiBda3FATT1XGQKsOcu
EQt90jLMAA+SYykVNGetNECkjqrfWLKhwEq6P75mDITW6WlrsYtNMeQ23UYW3ApB
v/eo6j+rj8xJBIYRVrJMvis4JgBVvV2y
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:26 2026 by rpki-client