This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
File:                     gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft (raw, json)
Hash identifier:          vMcKdVJnC3cEfc8Ghw6hpOgrMNKR6EfYP2pLTudul+Q=
Subject key identifier:   64:E0:D4:68:04:08:F2:59:05:E6:2F:A7:72:5B:90:D4:C6:75:BB:DC
Authority key identifier: 83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75
Certificate issuer:       /CN=A91357FC/serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
Manifest number:          27
Signing time:             Fri 23 Jan 2026 06:42:01 +0000
Manifest this update:     Fri 23 Jan 2026 06:42:01 +0000
Manifest next update:     Fri 30 Jan 2026 06:42:01 +0000
Files and hashes:         1: gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl (hash: 5UMZ72gXFUDTIiBBfI/VZi6wMfy4pjV2SPpEDRj7BDg=)
                          2: 11D4EBBABDFA11F08D47856DC4F9AE02.roa (hash: +yUMs2QhbOLp8IUh9/T9V8ki+77tccWA9/o1nEfb+yg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl
                          rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91357FC, serialNumber=8325D0C68AABCFD9AAC89F6AED684D4992EF3A75
        Validity
            Not Before: Jan 23 06:42:01 2026 GMT
            Not After : Jan 30 06:42:01 2026 GMT
        Subject: CN=69731839-7e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e9:c9:6b:76:70:9f:b2:32:bb:48:0f:7e:ab:
                    82:fe:58:b8:d3:b1:42:22:27:97:77:0b:76:78:39:
                    9d:af:a9:2e:d0:be:8d:c7:92:d4:73:4f:2a:c2:b3:
                    00:c7:56:79:a6:15:52:40:84:fe:31:53:70:92:ab:
                    c5:2e:1f:f0:3d:a0:ae:0a:b6:7e:22:1b:52:30:9a:
                    75:f5:22:8a:e2:9c:bd:70:13:e9:bd:48:f5:f8:0f:
                    bf:22:5d:74:a3:65:4d:5a:6f:a6:57:9c:18:54:f7:
                    2f:a5:35:3e:65:8d:ee:93:57:19:e3:40:47:65:23:
                    c6:b0:e4:88:a4:5d:fe:40:02:b7:d7:a5:c7:0c:da:
                    b3:86:2f:43:79:11:2d:42:d0:2d:68:ef:fa:b6:87:
                    dd:4b:17:58:b3:55:40:33:4e:e7:24:a6:47:0a:43:
                    e1:52:6a:e9:7b:81:72:2b:cb:5f:12:6b:1d:85:38:
                    d3:84:f7:8b:03:c1:b0:9c:e6:e6:fd:08:e8:56:8d:
                    df:fa:81:68:d6:37:70:1d:75:77:17:6b:98:0d:3c:
                    eb:ac:ac:b4:aa:92:5c:76:c7:cd:17:a3:e8:bb:59:
                    de:22:8e:58:93:13:96:92:67:6c:a1:b8:95:40:fe:
                    60:d5:50:cd:b0:ea:e4:df:ef:d1:89:08:08:ae:9b:
                    64:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E0:D4:68:04:08:F2:59:05:E6:2F:A7:72:5B:90:D4:C6:75:BB:DC
            X509v3 Authority Key Identifier:
                keyid:83:25:D0:C6:8A:AB:CF:D9:AA:C8:9F:6A:ED:68:4D:49:92:EF:3A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/90B9FD18BDF911F082CD526CC4F9AE02/gyXQxoqrz9mqyJ9q7WhNSZLvOnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b4:9e:4f:f1:37:60:a7:9f:b9:c7:c9:db:aa:80:c1:d8:00:
         42:2a:36:ba:10:0e:53:45:ff:8d:93:f1:82:06:cd:f0:bc:1e:
         74:93:fc:d9:f4:9d:51:20:c6:c5:b2:7b:dd:62:f7:99:de:59:
         8e:00:46:6e:59:dc:c8:d1:64:0a:84:64:d9:a0:cf:5d:98:f9:
         53:fb:53:17:f8:43:5f:44:4c:c8:56:04:29:d9:e8:1e:e8:03:
         16:c8:e1:85:08:ec:f3:97:2c:c0:f8:4a:89:af:e8:f8:99:35:
         61:1c:b4:8e:75:8f:15:39:ae:2b:42:e3:b4:cd:39:77:a9:9d:
         a9:a7:92:bf:be:17:c8:1f:53:5f:49:7b:23:62:9a:37:45:32:
         f3:09:8f:23:a9:1a:d7:77:25:bd:47:74:f9:7c:40:ad:09:9c:
         94:05:89:85:c1:c9:5d:bc:f0:19:4b:bf:6f:9f:4b:7b:83:12:
         f4:c6:3e:85:ac:28:fb:44:1a:dd:36:1a:e5:ad:f5:dd:fd:ed:
         97:9c:dd:f0:51:f0:4c:91:c3:b9:4f:24:87:3e:d9:8c:43:9f:
         5b:fd:23:2e:e8:79:96:05:c7:ee:fa:3d:84:a1:6c:8c:20:3d:
         8d:f2:af:92:3d:96:b9:7f:b0:7c:48:0f:21:a0:58:5d:32:dc:
         32:ca:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:59:15 2026 by rpki-client