This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
File:                     gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json)
Hash identifier:          rXJ0QSCtmu1P7A4qIsI2pOWG5weTSmstnMEWuOZdkhk=
Subject key identifier:   88:6E:91:73:46:72:07:9F:2E:56:C9:2A:44:F3:BD:82:66:9A:69:B5
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Certificate issuer:       /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
Manifest number:          01DA
Signing time:             Sun 25 Jan 2026 02:08:32 +0000
Manifest this update:     Sun 25 Jan 2026 02:08:32 +0000
Manifest next update:     Sun 01 Feb 2026 02:08:32 +0000
Files and hashes:         1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: G+fmz48s482OhtA1CUG6tLH+KgYouxHc0llDpCm5Vt0=)
                          2: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: mj1/gGJTxf89h4qoy3LQ2MkBeHSgOkUv4tA5AfZK7Do=)
                          3: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: tUVxJzysiR6t8MLO9ai96JsdVfMvMqOUKe7eGXkeEqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
                          rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
        Validity
            Not Before: Jan 25 02:08:32 2026 GMT
            Not After : Feb  1 02:08:32 2026 GMT
        Subject: CN=69757b20-6beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:39:eb:0c:bf:ef:3d:ab:8c:34:1b:03:6b:
                    51:31:93:ef:53:0d:0e:33:a2:ea:64:80:a6:aa:9a:
                    64:51:88:94:c6:67:db:68:8b:41:e8:bd:38:18:cb:
                    45:96:07:0f:ac:5e:c7:3a:b1:e6:dd:ad:04:3a:52:
                    bb:00:7e:28:0c:d2:44:8b:cc:b3:3b:c1:28:8e:43:
                    8e:f1:87:e7:2e:13:0c:bd:a2:22:d3:9a:14:bb:e5:
                    5a:ec:9f:27:55:f4:b0:a2:b0:ee:db:81:d5:ea:1a:
                    55:34:7c:10:51:89:09:44:b9:a7:d0:b1:b5:f9:c5:
                    8c:8a:18:f5:4e:09:e2:c7:63:18:17:d2:76:b0:97:
                    13:d8:0c:51:5b:b3:c5:a2:68:b3:1c:89:6c:60:05:
                    69:7d:c3:95:bb:f6:bb:c5:79:af:82:20:08:1f:84:
                    06:f6:c3:4f:fe:94:66:c2:40:14:3a:58:3a:f5:fc:
                    9d:e6:d7:00:c7:a4:0d:05:db:fc:a5:6b:04:c0:91:
                    71:c7:71:9f:33:c2:31:42:44:b5:42:e8:d8:8e:b4:
                    b5:2c:b2:ac:d1:61:7c:3a:09:34:0d:08:85:e2:f9:
                    ac:9a:c2:6f:59:b3:37:53:62:ff:54:d5:1b:1a:a8:
                    6b:a1:78:14:51:1d:04:bc:32:47:a4:57:43:9b:da:
                    fe:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6E:91:73:46:72:07:9F:2E:56:C9:2A:44:F3:BD:82:66:9A:69:B5
            X509v3 Authority Key Identifier:
                keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ca:6c:35:b6:5f:95:6a:df:df:46:95:9d:eb:4f:1a:04:90:
         ae:f1:d3:71:00:27:bc:78:1f:6a:f3:af:f3:d1:48:82:79:f4:
         fb:0b:6c:ed:db:76:ef:66:64:f6:94:21:31:ee:11:5f:97:da:
         80:8e:8d:92:67:ca:51:3a:ea:08:ef:d3:5f:5f:52:6d:41:13:
         5a:80:d4:f2:f8:25:6c:02:3d:88:66:f5:91:ea:e1:72:c6:27:
         eb:a1:80:59:16:6a:88:58:30:b5:6f:d0:8d:dd:74:79:d1:2a:
         7f:06:2a:ab:68:e1:2c:3f:85:26:5b:a8:69:0c:1f:e1:ba:63:
         9d:42:ba:3a:f9:4f:d7:20:11:c6:04:52:6d:22:d4:94:08:b9:
         0e:e9:55:c4:a0:4e:d6:cd:c2:78:a8:56:8f:96:2b:93:4a:7f:
         41:f0:68:cc:0d:b3:a1:bf:ac:96:c4:66:2d:ae:da:4e:9c:cd:
         b8:6e:fb:0c:83:34:3d:88:b6:ba:7d:25:b3:d2:65:63:4a:05:
         54:dc:1f:3f:03:43:c6:3d:88:dd:50:7e:ec:ff:5e:fe:0c:93:
         b9:bc:c6:76:80:86:af:84:9a:aa:5a:06:a6:ef:4a:69:f2:80:
         53:5a:27:86:2b:1f:3e:3e:d3:69:7a:81:d4:1e:2e:47:08:14:
         bf:cc:66:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:08:42 2026 by rpki-client