This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
File:                     gyAF3EXYwTKohRVcQx0zMZrPbY0.mft (raw, json)
Hash identifier:          xnO+CWWfd3aYJRoXd7mCljd16+sQRZwNTowhOwDx4sU=
Subject key identifier:   31:76:03:C1:F5:4B:93:94:44:25:8E:B1:9D:2A:70:7B:5F:9D:F9:2C
Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D
Certificate issuer:       /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D
Certificate serial:       1CD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
Manifest number:          1CC0
Signing time:             Sat 24 Jan 2026 18:13:32 +0000
Manifest this update:     Sat 24 Jan 2026 18:13:31 +0000
Manifest next update:     Sat 31 Jan 2026 18:13:31 +0000
Files and hashes:         1: gyAF3EXYwTKohRVcQx0zMZrPbY0.crl (hash: BAHW1mMXzir7+Esdo/jt2V/K5wkvhYjYPbtbRA6pLAY=)
                          2: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (hash: MMMDjax2VpmCYMjeqRuHmtuUZZDySkPPoKxoEx4L0GE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl
                          rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7380 (0x1cd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D
        Validity
            Not Before: Jan 24 18:13:31 2026 GMT
            Not After : Jan 31 18:13:31 2026 GMT
        Subject: CN=69750bcb-a714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:e8:58:26:79:c4:84:62:c9:8d:78:4b:2d:
                    41:6c:be:c0:23:0f:30:5f:13:29:b1:31:6d:32:e9:
                    34:0c:6c:bd:6a:45:6e:14:b1:0a:fe:bb:f5:b7:c9:
                    84:f2:85:14:b2:be:8f:ff:4c:17:96:00:55:8c:4d:
                    8c:35:e8:c9:50:54:6f:d9:78:5f:52:7b:e1:7f:42:
                    4d:cf:16:8a:e3:9b:2b:84:d9:0f:e3:6f:e3:3a:a1:
                    99:f1:0a:32:1c:8a:cd:58:d3:14:b6:5d:9c:ae:cb:
                    27:dc:ec:b8:4c:fa:71:a0:ce:18:e4:02:40:df:55:
                    73:74:12:12:ad:b5:7d:a6:39:f7:36:fe:39:65:e2:
                    70:bd:47:3f:ef:1f:e3:bb:4d:4d:3a:62:5b:a6:fe:
                    f6:bf:70:b0:43:97:9a:0a:a3:e3:3d:e9:7d:ab:2e:
                    64:37:d6:83:bb:04:5f:8f:87:40:53:18:65:02:d8:
                    92:ff:29:9e:e2:58:e8:90:e8:47:9c:cf:96:12:25:
                    e9:3c:e4:6f:45:4f:36:18:31:cb:53:9b:d9:5c:32:
                    9f:38:33:23:51:a4:5d:07:1c:cf:05:5d:50:ec:5f:
                    28:8b:a9:d3:f5:05:09:36:88:e3:15:d3:70:3f:01:
                    53:f2:49:05:14:c7:39:19:f3:fb:d7:24:91:bd:a7:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:76:03:C1:F5:4B:93:94:44:25:8E:B1:9D:2A:70:7B:5F:9D:F9:2C
            X509v3 Authority Key Identifier:
                keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:1f:26:fb:92:b6:6c:25:c7:ef:a4:2d:6f:97:c6:6f:f8:
         52:da:a0:bc:02:48:f6:1a:1f:e3:6a:d5:ad:c3:a8:63:f2:54:
         d7:07:44:c6:02:4a:cd:cc:b3:1b:a0:95:d5:10:31:88:8d:eb:
         a6:47:19:f1:78:27:7e:7e:d3:29:57:51:27:6c:9c:2b:bf:d3:
         45:e9:a0:d4:dd:b0:e7:b8:cf:f4:f6:91:e9:8d:f2:28:c8:9a:
         07:77:4e:cc:df:cf:ef:d8:62:74:41:86:84:70:0e:76:25:cb:
         3b:92:e2:14:87:60:70:c4:60:68:d9:2f:81:eb:f0:40:15:2e:
         ee:d2:e8:6b:8b:98:5e:2a:05:f4:e1:be:bf:36:7c:b7:35:e2:
         52:ac:93:9a:87:b2:eb:9d:7f:67:31:ba:c0:57:17:c9:3e:b7:
         02:c4:a3:81:6d:ce:d8:aa:7b:b6:ed:6e:6d:90:f5:54:cc:8b:
         2e:92:7c:40:11:52:54:91:8c:b2:21:bc:54:1d:17:ad:6d:55:
         69:70:18:93:9c:d2:5b:d8:58:45:1b:34:d2:69:ca:7d:35:e2:
         15:20:90:38:c7:17:f8:6c:a9:e4:0d:08:07:8f:33:6a:c8:74:
         d1:8e:9d:7f:69:c1:01:61:90:3b:06:fd:8e:58:8f:08:8b:1f:
         a3:6c:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:54 2026 by rpki-client