This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
File:                     rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json)
Hash identifier:          sJZN/uRDmzgE/ixuC4ygC6YMv2KOFNB4aSeRoVawr3Q=
Subject key identifier:   35:73:59:D1:0D:E1:6E:0D:A8:9A:9D:E0:E8:29:D6:85:D0:1A:EC:A3
Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
Certificate issuer:       /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
Manifest number:          55
Signing time:             Fri 23 Jan 2026 06:17:25 +0000
Manifest this update:     Fri 23 Jan 2026 06:17:24 +0000
Manifest next update:     Fri 30 Jan 2026 06:17:24 +0000
Files and hashes:         1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: Bg3RAeOswSp/dmQ0wOKHaZkqsC2eK7X6Ko/dpyKYs08=)
                          2: B752BBF0EF0811F098A4972A416F56BC.roa (hash: 2T0nbsARM0NDVINUgk5h14wNIURPiV4Wu61wFVDn6fw=)
                          3: 802EA36AE88B11F09D8DF0484F6F56BC.roa (hash: zCqGlFEtiuWaDyku74flbFtIq+LD7ag6rO52zwCMkI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
                          rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
        Validity
            Not Before: Jan 23 06:17:24 2026 GMT
            Not After : Jan 30 06:17:24 2026 GMT
        Subject: CN=69731275-cfe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:55:27:bf:89:f8:1e:0a:7c:dd:62:09:9e:
                    7c:80:08:04:14:d2:49:13:d7:11:3d:50:ac:fb:2d:
                    90:aa:be:57:34:28:36:c3:95:ec:5f:e1:24:71:43:
                    63:d5:a9:2b:d8:31:6a:ea:77:f4:1f:ff:40:70:d1:
                    79:a4:68:f0:1b:f7:c8:13:26:29:5b:9b:03:e8:e4:
                    8d:ab:5f:d4:f3:7e:20:d9:2e:c8:f5:43:9f:fa:c0:
                    2c:5c:57:17:94:01:e7:6c:67:dd:97:b9:27:06:47:
                    9c:1f:5f:cc:2c:0b:ef:c4:4f:ac:2a:86:94:22:c4:
                    d7:fd:ff:c5:29:0b:55:b6:b1:20:a7:40:2c:be:f5:
                    40:a8:cd:05:e9:e9:1e:58:12:93:92:10:70:71:7a:
                    ab:bd:4d:98:bb:56:bf:7d:bc:e5:42:34:29:ed:5f:
                    69:9e:1f:61:e7:a9:2f:3d:be:26:ab:9e:54:d0:51:
                    da:ce:e0:79:57:38:55:b2:d7:d9:79:df:64:3d:46:
                    4e:e8:55:88:0c:1c:f5:31:98:5b:ba:49:ed:61:c2:
                    57:aa:e0:14:19:05:23:c7:bb:90:7a:fc:fa:e3:8b:
                    92:bb:e4:b3:ed:f9:ad:cb:4b:59:2c:2c:2f:02:3c:
                    4b:fd:cf:65:ab:40:fd:08:2c:53:5f:6a:3c:5f:95:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:73:59:D1:0D:E1:6E:0D:A8:9A:9D:E0:E8:29:D6:85:D0:1A:EC:A3
            X509v3 Authority Key Identifier:
                keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a7:61:65:c8:87:15:aa:54:54:93:98:c0:7f:1a:96:09:0b:
         db:8c:a4:39:93:99:7f:39:55:25:fe:0d:b2:ce:bd:e8:60:e8:
         7d:04:fa:89:15:e1:64:92:32:0f:5d:e5:2a:1a:fb:d6:17:95:
         ba:10:01:d1:c1:be:2b:31:67:22:ad:87:1c:49:6c:d5:5c:09:
         b5:8f:0f:21:f4:0f:ed:bb:f2:ea:69:75:e8:c2:51:79:ff:8e:
         97:7d:84:0f:ab:68:78:01:06:df:26:f2:76:e1:85:4f:1f:06:
         53:6f:50:ed:35:80:fa:c4:45:58:d6:92:76:6e:30:2f:dd:73:
         42:37:c1:b5:ac:41:b6:44:1c:29:30:ba:ae:1c:0d:39:30:ab:
         53:3f:04:8e:1f:a4:b0:57:ea:0c:a0:c3:d8:c8:82:99:be:49:
         81:7b:57:fb:8a:94:e9:bd:8e:d8:87:ab:75:19:d0:8c:b4:8a:
         a4:77:7d:7c:7d:a1:a1:a0:96:ea:c7:9c:ca:15:48:77:fd:8d:
         32:5e:75:fa:e6:11:16:7d:4b:9e:d9:30:35:ac:eb:72:bc:78:
         8a:47:6e:ae:32:94:85:42:55:06:89:68:62:73:a5:44:a4:8a:
         98:d9:ca:cf:fe:47:12:58:0c:7f:38:ec:3c:43:97:bd:bd:6d:
         b1:72:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:20 2026 by rpki-client