This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
File:                     GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json)
Hash identifier:          xjYQV95vMFTrjiZR26nK05TBG8LQtLeHhAQxCTpR/CA=
Subject key identifier:   E9:1C:BA:E1:8F:6A:30:AF:17:E3:65:2B:37:E0:F6:E9:64:5E:06:7E
Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77
Certificate issuer:       /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
Manifest number:          AE
Signing time:             Sun 25 Jan 2026 05:20:36 +0000
Manifest this update:     Sun 25 Jan 2026 05:20:35 +0000
Manifest next update:     Sun 01 Feb 2026 05:20:35 +0000
Files and hashes:         1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: BzsCFbjEPWAcXAB39hHG5D+PaggkrGoGDYy+/G73FEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
        Validity
            Not Before: Jan 25 05:20:35 2026 GMT
            Not After : Feb  1 05:20:35 2026 GMT
        Subject: CN=6975a823-6f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:db:bc:4c:60:24:4a:78:fc:da:b8:71:b0:
                    06:a1:57:38:1b:5e:a7:e7:f0:bf:6b:23:1d:aa:03:
                    b8:8b:f2:f6:88:74:be:16:3f:0e:56:c9:3c:8f:15:
                    d9:99:38:30:9d:9c:87:af:c2:62:f1:d7:55:68:83:
                    5d:b5:bb:74:ba:63:0c:9c:a8:e7:22:1e:0e:33:e8:
                    9c:00:0a:86:69:71:7f:6a:99:ce:dd:4b:3e:3c:58:
                    bc:13:c6:0b:6b:6e:27:2c:d4:86:ec:14:bd:b2:d4:
                    60:3c:47:c6:1e:ab:68:93:c2:f2:fc:6f:33:ea:f1:
                    d9:d3:55:1f:c3:d4:16:94:5c:4e:22:bd:7c:c1:4b:
                    e5:ad:41:1a:35:3c:ae:a0:0d:e8:e4:8c:aa:56:41:
                    17:ab:83:3e:f8:7b:f5:00:79:1a:3d:28:6f:13:c9:
                    a9:53:8f:6b:29:b7:e6:f4:bb:f4:e8:40:64:14:77:
                    ff:25:df:59:29:dd:c5:4d:ec:2e:20:84:c2:d7:11:
                    43:cb:ce:64:06:29:fe:a8:29:e1:35:5f:10:d9:c4:
                    42:0c:2e:c5:d3:c8:29:c7:a0:b1:dd:50:80:4a:25:
                    00:48:f7:5c:97:96:b2:e6:9e:c1:36:66:80:32:69:
                    12:b5:aa:ed:64:37:8b:94:ea:0d:93:ed:9e:5f:66:
                    e3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1C:BA:E1:8F:6A:30:AF:17:E3:65:2B:37:E0:F6:E9:64:5E:06:7E
            X509v3 Authority Key Identifier:
                keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:25:52:e1:4e:a8:8f:50:7d:cb:b0:a0:50:f3:85:27:2c:9a:
         86:3e:d9:2d:81:7d:c5:b1:97:d1:3c:99:b8:22:dd:bc:21:fa:
         af:6b:f3:2c:43:c2:6b:75:1b:e6:d4:36:a2:6f:78:02:3b:da:
         53:95:4c:1f:e3:ce:5e:04:ca:23:e8:52:b5:59:35:c5:fd:09:
         20:3f:a5:be:88:82:38:a2:9b:41:63:d9:3b:63:d5:e4:bb:f8:
         0f:0a:ee:f3:4b:4c:bc:26:79:7b:a1:19:1b:ec:f8:2e:4b:63:
         35:e2:63:14:d0:55:98:75:55:d9:06:2b:10:10:b9:3a:79:81:
         05:c8:47:d7:cb:49:82:79:7e:59:e9:db:ca:d8:5c:53:cb:ff:
         1a:bf:f2:5a:40:b1:dc:a9:4d:e6:22:64:fd:ff:a7:3c:92:c7:
         fe:47:00:fb:c9:dc:2d:cd:86:fb:55:76:f0:3b:93:d0:76:68:
         c5:28:ae:bb:65:e4:ed:78:59:86:d2:ce:9e:4a:61:a9:ef:73:
         56:e8:f7:ef:16:d6:1e:9b:15:fb:a9:52:d3:20:6d:28:84:5a:
         46:b8:44:d6:b1:20:55:b6:38:27:95:b5:e5:af:3f:da:3a:63:
         d0:a9:36:82:a3:91:cc:db:a9:84:6e:27:85:f0:d8:e2:c7:67:
         cd:7a:97:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:40 2026 by rpki-client