This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
File:                     gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft (raw, json)
Hash identifier:          xJUycnTt2CfTYX362QcbWQWyPOfBD8qVIDDNxNtbCCA=
Subject key identifier:   54:09:F8:98:D1:19:50:E9:3D:7F:3A:7C:EB:ED:94:C5:3D:F8:FC:F2
Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
Certificate issuer:       /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
Manifest number:          84
Signing time:             Sun 25 Jan 2026 05:45:26 +0000
Manifest this update:     Sun 25 Jan 2026 05:45:25 +0000
Manifest next update:     Sun 01 Feb 2026 05:45:25 +0000
Files and hashes:         1: gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl (hash: 0kuELp0kQ28FXKcawsZoLa/U031D4Q26hEC8kkuP4Dw=)
                          2: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (hash: teBU/xY5fyCYlDvGRSOFgRvi80EiZfgHjGrIEnrk+fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl
                          rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
        Validity
            Not Before: Jan 25 05:45:25 2026 GMT
            Not After : Feb  1 05:45:25 2026 GMT
        Subject: CN=6975adf6-1f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:e4:03:d8:68:94:ce:03:c8:ea:db:cf:99:
                    7a:f4:4a:42:2f:98:f8:cb:9e:e0:54:a9:27:e9:52:
                    a7:ac:11:d5:b3:9f:a3:fc:46:ad:d6:dd:0f:69:da:
                    9f:f9:c0:5c:67:47:0e:f1:28:e0:1a:1a:62:80:e6:
                    dc:4e:b0:d9:4b:8d:fe:1d:1b:1e:1e:d9:4f:d6:65:
                    b0:5a:0f:5f:f4:94:29:0c:21:a6:c7:81:1c:c9:ed:
                    e2:cb:18:d3:19:ed:3f:5c:38:d0:67:b7:d5:27:38:
                    db:0c:02:c5:db:18:38:d7:9c:2e:e1:49:54:4e:4b:
                    70:d6:6e:28:6b:4c:d2:76:78:12:7b:ca:6f:df:6d:
                    40:3a:7c:23:27:bb:41:f0:bc:e6:bf:7e:7d:ec:1b:
                    38:56:1e:72:0d:bf:81:1e:6c:9a:b1:2b:8d:9b:a0:
                    d3:21:3a:10:0b:5f:2c:02:f4:7e:40:af:0b:37:8b:
                    81:8b:5a:2f:76:21:c1:71:10:e0:fc:72:ad:bb:e0:
                    e9:a2:41:96:58:87:c6:f0:bd:df:35:a1:48:46:2c:
                    15:98:dc:07:50:53:71:15:97:1c:51:c6:1d:24:26:
                    75:28:dd:f6:8d:71:3c:b8:02:e7:1b:f0:f1:23:75:
                    b1:58:6c:a2:a3:60:17:21:91:33:b0:c6:27:f7:da:
                    23:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:09:F8:98:D1:19:50:E9:3D:7F:3A:7C:EB:ED:94:C5:3D:F8:FC:F2
            X509v3 Authority Key Identifier:
                keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:26:d4:7d:1b:22:ee:d1:c2:0b:a6:ff:73:56:00:23:60:22:
         47:24:4a:07:0d:46:86:f8:84:33:b2:b1:67:75:84:f5:30:05:
         ae:f5:b5:22:8d:98:97:43:43:9c:33:6d:03:8e:05:09:01:99:
         b3:35:6a:8b:34:30:24:2f:e1:f5:91:4e:47:3b:f3:c0:26:ed:
         d4:2c:40:03:67:e8:4f:ca:c2:93:6b:05:8f:a4:b8:05:e6:77:
         cb:d6:8a:2e:e0:24:11:24:cc:a9:57:cf:5c:f3:32:09:68:20:
         03:ed:c0:7f:b9:00:c9:06:69:9d:ea:54:a7:cf:32:a1:ed:66:
         5d:0e:86:bd:c5:64:8f:89:35:6b:2f:b3:a1:4e:88:6d:10:dc:
         35:92:cd:0a:61:3f:e0:5c:ad:0f:c9:25:a0:14:26:87:34:e7:
         fa:6d:6b:52:ff:b0:91:32:bf:d1:40:3c:ca:9e:31:fd:0e:4c:
         c0:82:d1:04:d3:bf:65:10:28:df:7a:b0:3c:7e:93:73:e9:6d:
         2d:9b:e2:6d:0a:e6:3a:6d:d4:ac:1f:9d:a1:1d:3f:9e:6f:bf:
         6c:78:af:87:13:79:3c:eb:c4:92:a7:cc:44:07:b8:33:6c:8a:
         36:46:13:61:f6:b1:28:94:a4:62:34:e0:55:2c:a3:bb:a2:8e:
         3c:a5:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:46:02 2026 by rpki-client