This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File:                     G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier:          tA4HoDpoudXkFevRBg12hnVfca5iz7aQeCP2w+Mk2mk=
Subject key identifier:   FF:19:9E:F2:79:94:CF:06:9A:45:3E:20:5E:61:65:A0:8F:C0:C3:FA
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer:       /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial:       0960
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number:          0960
Signing time:             Sat 24 Jan 2026 19:33:06 +0000
Manifest this update:     Sat 24 Jan 2026 19:33:06 +0000
Manifest next update:     Sat 31 Jan 2026 19:33:06 +0000
Files and hashes:         1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: tkH/fw3BPJiqO8rsAGTNiUcMR8ptgeiwCtb1QJcXrig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2400 (0x960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
        Validity
            Not Before: Jan 24 19:33:06 2026 GMT
            Not After : Jan 31 19:33:06 2026 GMT
        Subject: CN=69751e72-d1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:5a:96:a7:4b:8b:44:77:42:fe:dc:90:b4:
                    4f:82:42:6c:17:5b:4d:e3:35:9c:7b:52:94:f8:b7:
                    a4:75:78:91:91:b1:a8:81:f6:3e:bd:02:85:e4:c1:
                    4c:a3:5b:d8:cb:a0:1a:52:f3:77:90:f0:90:b2:2c:
                    76:dc:01:1e:19:be:bc:a7:20:e4:9b:55:5b:a9:bc:
                    e1:23:26:0b:5a:89:5c:48:1a:a7:00:4f:51:a3:a4:
                    2e:21:d3:02:17:54:c8:da:44:30:4b:98:cd:ea:81:
                    54:70:22:1b:ad:96:25:b3:43:c4:99:cd:ee:d2:6b:
                    3b:52:af:3f:6c:e3:5b:a4:be:8b:94:5a:37:4d:3b:
                    65:ee:27:8e:7a:c8:8c:d7:a9:64:13:b5:06:fb:cc:
                    8b:b8:09:d2:23:6a:e9:60:c3:dc:d7:0b:ea:7e:15:
                    63:ad:8f:9b:48:17:47:d3:38:17:6e:8d:2d:fa:8d:
                    68:25:ac:1a:2a:48:c8:d8:cf:0b:4c:bf:1e:43:d5:
                    3b:e5:0e:a2:01:f1:14:2d:79:8d:0e:df:3b:cf:cc:
                    ac:6c:e6:ff:78:1c:a9:f3:94:8c:01:7d:2f:c7:b5:
                    d4:2e:0a:8b:7f:78:4a:0d:0e:2d:c0:93:db:ca:f2:
                    4f:46:9d:5e:2e:57:3d:d2:74:da:c5:83:5a:76:46:
                    95:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:19:9E:F2:79:94:CF:06:9A:45:3E:20:5E:61:65:A0:8F:C0:C3:FA
            X509v3 Authority Key Identifier:
                keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ef:42:f4:4b:e0:68:41:0a:d0:a5:d7:cc:43:64:2b:33:48:
         82:0e:0b:70:87:3d:87:23:96:5e:a0:08:e2:4f:ec:26:90:8d:
         30:ad:6b:6f:36:60:4d:21:a6:64:29:e5:44:f8:eb:b5:ce:85:
         d3:6c:56:ea:56:68:07:b7:37:68:39:11:7d:3e:e8:38:2e:68:
         a1:9f:39:4d:0f:0c:f7:29:27:4b:78:42:ca:fe:07:3b:66:aa:
         74:31:38:a7:be:84:76:cb:ba:a5:3f:63:44:5b:dd:0c:f3:c6:
         dc:3f:8d:ef:09:47:75:08:6b:1c:54:ba:c8:c9:5c:ee:d4:de:
         6c:90:39:c7:f5:ed:8b:47:1b:87:06:8a:90:b7:59:6a:0d:4e:
         c9:30:be:81:2c:c0:75:ab:86:1a:9e:31:1e:f0:28:34:c3:76:
         c5:58:86:e6:bc:07:ee:5e:4f:a8:1a:00:c5:13:f5:b5:f2:a0:
         75:85:ee:4a:f8:b1:aa:92:0c:c9:3c:fe:32:b5:c3:ac:ab:7e:
         25:14:7a:b7:2c:84:ab:9c:f4:22:2b:30:51:45:1e:ec:6e:f6:
         13:93:99:c8:93:8b:d1:1b:c1:9b:2c:4b:b1:b9:e6:ff:76:73:
         2d:1e:40:33:63:62:20:a6:1d:45:93:d4:ee:34:4a:62:7b:68:
         22:d7:87:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:05 2026 by rpki-client