This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
File:                     gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json)
Hash identifier:          yM2oEBgQCLj5/8fsjCxkCQRw7zeQNLcuop3ymqQRP+U=
Subject key identifier:   16:3C:A6:93:C0:E8:C1:3C:4E:56:10:99:32:A9:CD:46:B1:54:91:EC
Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54
Certificate issuer:       /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
Manifest number:          8B
Signing time:             Fri 23 Jan 2026 05:38:34 +0000
Manifest this update:     Fri 23 Jan 2026 05:38:34 +0000
Manifest next update:     Fri 30 Jan 2026 05:38:34 +0000
Files and hashes:         1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: +4ZJ/QyEnj83sROxzN9Uoc4lEHyZia9PtZtWst5q9QQ=)
                          2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: 1VVixJvC9Ao+Yu3/0+4xin/rpRbqJh0O4hx1E0p4fGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl
                          rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
        Validity
            Not Before: Jan 23 05:38:34 2026 GMT
            Not After : Jan 30 05:38:34 2026 GMT
        Subject: CN=6973095a-ef20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:77:29:74:de:08:35:46:77:78:83:7c:6b:
                    16:78:55:9e:47:37:71:ae:a6:78:18:79:a6:e3:9e:
                    4c:85:af:b6:95:d9:c4:8b:31:00:ae:c9:2a:38:c0:
                    01:af:d5:96:fa:51:e5:29:41:8b:bc:b8:a0:14:35:
                    46:f3:01:cd:09:87:58:7e:b2:37:ca:05:cb:6d:99:
                    45:85:fe:14:74:a1:ea:dd:19:1b:ea:41:c8:63:3e:
                    38:0d:a1:ea:74:69:4e:72:62:68:9b:94:55:92:96:
                    c8:c2:eb:08:6f:74:c8:44:54:3f:59:71:d4:a9:a5:
                    4b:d6:d5:06:25:84:50:6a:f1:d2:d0:ed:0e:6d:4f:
                    10:c6:d6:89:09:5d:7d:72:32:7f:b1:3c:c8:c3:db:
                    6a:85:a7:11:43:c6:ec:4a:90:b1:75:ff:93:eb:28:
                    b7:77:f7:87:39:e0:0a:9e:c4:0c:59:e6:bc:0a:df:
                    46:d6:e6:ec:d4:26:48:78:69:08:a3:86:bb:b3:a9:
                    af:22:92:3f:6d:5c:cd:5f:10:88:02:12:3b:a7:39:
                    47:e1:73:ee:e5:59:b6:46:72:cb:5a:7b:19:55:b2:
                    e1:8b:1c:b5:cf:05:80:39:d5:6b:01:32:b8:e7:15:
                    6f:55:aa:88:31:fa:d1:a0:ab:be:06:df:3e:0e:16:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3C:A6:93:C0:E8:C1:3C:4E:56:10:99:32:A9:CD:46:B1:54:91:EC
            X509v3 Authority Key Identifier:
                keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f4:98:bb:32:ae:57:d1:e8:4f:d7:c6:1e:19:8e:c1:fb:96:
         ca:89:7f:b5:2a:07:e3:2e:0c:18:36:eb:f0:bd:54:d4:df:3e:
         75:9a:49:b9:e0:72:a3:5c:79:43:14:a8:26:52:35:84:ab:dd:
         a2:a3:ea:cf:d6:95:4b:c7:90:71:91:38:b3:28:87:25:23:36:
         8c:ea:62:52:a9:f5:30:6a:8f:6f:9d:9a:17:f8:80:44:fa:13:
         fd:be:af:0f:68:92:af:76:2e:b1:31:d7:f0:b4:c6:5e:9f:a9:
         91:b9:5e:d7:ac:6e:d4:9f:3f:48:28:eb:fc:78:78:b7:11:1c:
         f9:14:63:2b:60:96:97:d4:84:a6:ff:c9:af:0e:ad:e2:64:29:
         ba:85:89:29:9f:7d:8f:4f:4c:66:39:c7:99:c5:cf:46:1a:7d:
         82:5e:4e:b1:d1:1b:fe:4f:ba:34:a5:3b:a1:4b:3f:1b:14:36:
         71:ef:1a:cc:c8:6e:4e:12:6c:f0:8c:a7:49:07:ab:a9:4f:c7:
         c2:1f:a6:f9:e9:2d:c6:5d:41:f0:af:5c:31:e5:e6:0c:c4:4c:
         99:e2:80:9c:3b:4d:0d:52:6b:a1:27:72:7b:6d:36:ab:a3:46:
         74:eb:8f:ad:aa:2f:bd:14:15:68:a1:a3:59:f4:ff:2f:58:72:
         00:16:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:18 2026 by rpki-client