This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
File:                     gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json)
Hash identifier:          34vYRYxkhBvNXPAWbZGXjlV80TWIUM8tPg4qjm1zHx0=
Subject key identifier:   8F:9A:70:F8:48:E5:E6:A5:AF:F0:A0:99:8C:20:3A:DC:61:13:37:A3
Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
Certificate issuer:       /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Certificate serial:       0C61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
Manifest number:          0C4E
Signing time:             Sat 24 Jan 2026 18:15:26 +0000
Manifest this update:     Sat 24 Jan 2026 18:15:26 +0000
Manifest next update:     Sat 31 Jan 2026 18:15:26 +0000
Files and hashes:         1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: IRfBkHlci+JO/kppNVffM8E/BZyNvsJtJSJYyNg7jhI=)
                          2: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: qXQzrLjHLMEGSmHbPLY3DTrLOE6y6AG6P8s1JsWZiBo=)
                          3: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: vbaep3wET3+ifW71kGbMN+H4/YmdHdtnb1FCSwufM8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
                          rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3169 (0xc61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
        Validity
            Not Before: Jan 24 18:15:26 2026 GMT
            Not After : Jan 31 18:15:26 2026 GMT
        Subject: CN=69750c3e-11cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:84:1f:0c:47:eb:0c:e7:67:21:5a:99:cf:
                    49:28:50:18:05:f0:d3:bc:13:71:d3:fc:b4:69:fd:
                    52:c0:ff:7d:f9:ac:2a:f1:10:75:f6:55:f3:37:8f:
                    fd:c1:16:cf:f9:5c:e5:87:dd:58:2e:2f:5b:1b:3d:
                    24:3e:99:06:c8:ba:d0:1b:1f:aa:93:15:72:2e:9c:
                    cd:b7:da:7d:39:e1:06:61:3e:a1:6c:09:f3:ff:44:
                    f8:7f:ed:77:fa:4e:20:f8:ae:07:a0:2e:90:48:94:
                    a8:0f:0d:df:9f:1c:de:8c:06:47:ec:5a:87:45:57:
                    5f:2e:2e:e5:fb:92:77:c5:c5:37:f4:5a:82:05:9a:
                    54:17:06:96:d0:a8:11:4e:bd:34:e3:d0:42:9d:68:
                    1d:70:20:2e:2c:00:c5:8d:36:04:be:98:03:69:69:
                    6c:6b:ff:75:82:31:26:06:e0:70:9f:02:2f:55:63:
                    b6:12:d5:47:70:1a:9a:5a:67:7d:2f:f8:d7:37:8a:
                    f6:f0:73:a6:52:19:3b:96:3f:93:f4:b3:40:65:00:
                    14:d4:c2:31:f1:81:4d:b4:1b:d4:dc:64:9c:7c:80:
                    e7:d1:9f:7f:54:c6:92:76:06:50:2d:36:c0:04:54:
                    6b:34:43:08:77:25:49:0a:26:06:a2:0a:a0:5e:d3:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9A:70:F8:48:E5:E6:A5:AF:F0:A0:99:8C:20:3A:DC:61:13:37:A3
            X509v3 Authority Key Identifier:
                keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:30:c4:e4:cb:c3:5f:f4:fe:ff:f4:e1:31:d6:d9:52:32:73:
         72:f1:2d:f4:23:d7:3d:ce:48:75:bb:bd:4b:c3:7a:2d:09:6d:
         09:7a:d8:75:23:5b:88:09:c5:97:d2:fd:c9:32:b3:0b:56:d1:
         28:5c:f5:e2:77:f2:57:30:eb:f9:a5:85:78:db:df:65:02:09:
         ed:d3:22:17:3a:f6:05:01:a1:75:d0:c8:0e:52:92:0d:04:f2:
         c7:f1:7d:e5:a1:6d:aa:8f:e1:7c:6f:51:e1:97:a5:26:00:f7:
         3a:d8:41:74:97:a5:07:33:e0:5c:b0:cd:e8:eb:e0:e3:00:62:
         91:72:e0:0d:48:09:e4:ad:fe:cf:27:73:ce:2f:0f:33:d0:40:
         11:fb:ee:22:35:29:cf:11:b9:a3:bd:51:ff:d3:03:69:54:84:
         bf:d0:e7:a5:68:33:32:63:d3:84:63:f7:01:61:0c:01:9e:7b:
         4f:f8:37:9a:28:cd:38:3c:19:cb:26:4f:b7:4b:85:67:7d:42:
         c5:34:a0:05:87:99:bf:69:06:60:d1:ec:ae:a3:12:bb:a1:92:
         4c:21:53:9b:55:47:08:7b:68:49:88:4f:5e:58:ac:31:0c:10:
         cc:d6:9e:42:65:55:9b:8f:5d:8a:6b:16:8c:13:08:54:9f:4e:
         13:ed:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:58 2026 by rpki-client