This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
File:                     p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json)
Hash identifier:          WIiumlgF5/QmYPE3WdmJiHdkhcjVFCWwgjhD9Me0ktQ=
Subject key identifier:   3D:89:0F:D3:76:85:02:B2:10:DD:32:41:97:83:DF:16:4E:BA:88:AA
Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32
Certificate issuer:       /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
Certificate serial:       0226
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
Manifest number:          0222
Signing time:             Sun 25 Jan 2026 01:24:17 +0000
Manifest this update:     Sun 25 Jan 2026 01:24:17 +0000
Manifest next update:     Sun 01 Feb 2026 01:24:17 +0000
Files and hashes:         1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: kBCZrSOIRLRiQfHza+wrLOk/rGaRzi3BMf3g0VPhflQ=)
                          2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: 475LzmYCu9I1wtql81HCosh9WiMF26s1jk6v328c/zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl
                          rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
        Validity
            Not Before: Jan 25 01:24:17 2026 GMT
            Not After : Feb  1 01:24:17 2026 GMT
        Subject: CN=697570c1-296a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:61:20:5d:4b:5b:df:35:0c:88:c1:20:92:
                    6b:f9:9d:5d:cb:bd:49:16:14:be:b7:57:35:ab:b0:
                    36:28:43:b1:26:54:f5:04:a9:49:85:1d:a6:38:e6:
                    49:2b:b6:8f:97:67:c5:74:e0:c2:93:ee:10:07:f1:
                    b8:f9:ee:39:78:39:72:9b:77:d6:76:4b:11:43:7f:
                    82:3d:40:d2:49:18:32:2f:3c:0b:c6:fe:df:48:52:
                    57:ff:9f:08:47:38:89:38:47:b5:80:94:73:84:79:
                    c3:98:92:79:16:7f:4b:51:a8:c4:45:0c:e1:08:42:
                    50:99:c6:ee:54:e3:82:65:b7:16:04:57:53:cf:c5:
                    e6:83:f6:2e:78:53:6a:bd:00:95:2f:bd:fd:66:5b:
                    94:a7:6d:81:62:92:97:6d:50:d4:b8:7c:8c:ea:fb:
                    e3:21:e1:d6:a3:78:73:cc:f4:30:32:04:be:4a:b6:
                    df:3f:51:c4:dc:82:a8:7b:7a:1b:df:30:8f:13:8f:
                    a8:c2:fe:57:be:ea:fb:c3:f7:40:96:fb:26:1d:a7:
                    9c:8f:8b:37:3a:7b:31:77:a4:71:95:3d:dc:e0:ca:
                    b2:2f:0f:01:39:45:15:ea:d4:50:b6:9a:44:01:27:
                    08:d1:96:88:89:f2:18:22:8c:0f:bb:09:97:b4:73:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:89:0F:D3:76:85:02:B2:10:DD:32:41:97:83:DF:16:4E:BA:88:AA
            X509v3 Authority Key Identifier:
                keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:5a:2e:2b:20:90:d6:62:9b:02:18:9e:41:d9:18:4d:be:28:
         47:98:89:5f:32:f9:d5:0e:89:e5:08:f6:a7:ad:3e:9b:40:78:
         9c:45:36:11:d4:a2:fc:ee:ad:93:82:02:51:df:6e:c7:7c:e6:
         30:2b:4c:92:cc:5e:d0:32:45:bd:ec:8d:27:29:89:db:ce:ea:
         42:ef:bc:57:ba:26:ec:d9:05:64:17:f3:fb:7b:6b:08:89:cd:
         e3:33:4c:01:84:77:7c:da:7e:4d:9e:34:5d:0b:e4:0f:34:ea:
         4e:96:2c:22:a6:93:00:be:96:e1:29:2b:75:98:e2:b0:d9:f5:
         6b:31:f0:cd:bd:55:f7:19:a3:4f:53:79:37:bd:a4:f8:6d:0f:
         54:54:d8:db:a4:8f:f6:92:39:d9:08:81:84:53:22:60:7c:11:
         92:8a:25:7c:3c:11:99:c4:52:c9:9e:d0:0b:38:ab:20:f9:17:
         89:0b:b0:a5:f4:62:e9:53:f1:93:b6:e8:30:55:bd:49:63:4c:
         cf:fb:67:ad:c6:cb:dd:4a:b7:8a:a3:d2:74:52:c3:f5:b1:13:
         13:cc:f1:ea:6b:fb:75:66:34:02:95:52:26:97:59:1f:d1:d5:
         50:52:49:40:94:d0:3e:66:f3:38:ac:15:b8:52:a8:53:b0:33:
         96:c9:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:14 2026 by rpki-client