This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
File:                     gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json)
Hash identifier:          S+vLQEbUBlX+kHmg2Pk3XthMEvZUd9IRg4f831YdNWc=
Subject key identifier:   BE:DF:0F:F5:BA:8D:10:29:F3:C1:A2:EB:6B:D2:D0:81:E2:E9:6F:EC
Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
Certificate issuer:       /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Certificate serial:       3514
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
Manifest number:          3514
Signing time:             Sat 24 Jan 2026 14:21:39 +0000
Manifest this update:     Sat 24 Jan 2026 14:21:38 +0000
Manifest next update:     Sat 31 Jan 2026 14:21:38 +0000
Files and hashes:         1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: gTTnLpPACU8BWg/Nk2AAU8g+9VFxtPiSRVkc2KfCvK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13588 (0x3514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
        Validity
            Not Before: Jan 24 14:21:38 2026 GMT
            Not After : Jan 31 14:21:38 2026 GMT
        Subject: CN=6974d572-9f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:c8:72:48:13:20:a3:09:60:90:74:3f:45:
                    23:2c:e9:f4:1e:ff:ba:17:e4:ea:59:77:92:30:ad:
                    72:4e:09:35:8a:18:1d:07:41:07:06:00:81:0f:21:
                    4d:d2:a6:a8:cb:b8:61:0d:de:42:a4:bd:27:90:b1:
                    f1:99:db:15:a7:f5:da:75:70:d6:a0:c3:ab:ea:21:
                    7b:72:66:79:a4:a7:2b:50:3d:20:6f:6d:fc:52:62:
                    f0:77:5a:bc:46:4a:9a:7b:1e:2f:93:ff:f8:f7:56:
                    29:e9:89:5f:44:c9:42:a1:eb:ae:1a:87:7e:98:7e:
                    21:4c:f3:fe:2c:c8:cb:c5:15:c4:9f:98:a5:8f:90:
                    f1:69:88:bf:90:3e:d6:95:03:71:3c:0c:2f:47:77:
                    8a:48:44:a1:f9:7f:97:3d:03:88:b4:8d:a8:f5:d2:
                    ee:1f:68:4c:d3:89:62:e1:b9:03:ee:a1:31:eb:ac:
                    6d:30:d3:4d:8c:31:1d:a9:81:99:7b:b3:dc:88:b7:
                    81:83:36:14:e3:a6:4d:1a:59:c7:5c:58:ff:21:f6:
                    50:80:db:1c:6d:a6:12:a4:94:0d:b8:75:6b:b3:f8:
                    c6:de:be:f0:f1:9a:0f:ee:4c:e0:d7:ae:72:4b:2a:
                    84:f3:01:2d:a5:1c:b8:a3:c8:82:d1:15:63:c4:3a:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DF:0F:F5:BA:8D:10:29:F3:C1:A2:EB:6B:D2:D0:81:E2:E9:6F:EC
            X509v3 Authority Key Identifier:
                keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:57:b7:e5:bb:51:3e:ce:f9:0b:bd:66:24:af:f8:58:e4:1c:
         c5:c2:19:b5:c6:e4:ae:ee:a3:f5:23:f4:9a:a8:91:51:e8:1d:
         55:b9:36:d9:29:03:15:d3:b0:50:9a:39:18:5e:43:10:52:a0:
         31:c8:11:af:04:e6:a3:3e:6d:e6:b2:8e:62:fd:34:25:e4:ea:
         56:d7:e8:bc:ea:f4:06:1e:4e:14:2a:6c:96:2e:b4:82:92:2f:
         d9:59:c7:09:8b:03:32:66:10:2f:ed:41:1f:8f:b0:31:5d:80:
         fa:01:08:50:46:86:62:fb:15:30:04:0d:28:82:09:72:19:4b:
         0b:b3:00:57:b7:bb:d3:d4:72:3a:50:31:d0:d3:35:1d:6a:21:
         ff:ce:11:ac:49:e0:98:82:cc:36:8e:07:88:fd:f7:97:57:97:
         25:5f:41:4c:00:a7:f4:c0:fb:13:70:ae:bb:b7:0f:01:1a:12:
         27:54:cf:8b:f4:f1:78:b0:c5:bd:77:39:c9:7d:6e:45:a0:f1:
         ec:f9:4e:3a:3b:dc:0f:9e:ae:3e:56:c3:e8:12:54:65:02:c1:
         f2:79:de:80:be:da:68:ea:dd:d2:ee:c5:21:ad:d3:ac:42:d8:
         f0:90:8a:60:da:8a:cd:2d:a9:6f:fd:d9:da:ea:01:a1:d5:a4:
         a8:72:6a:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2
MTExRDBGRkEwHhcNMjYwMTI0MTQyMTM4WhcNMjYwMTMxMTQyMTM4WjAYMRYwFAYD
VQQDDA02OTc0ZDU3Mi05ZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxXnIckgTIKMJYJB0P0UjLOn0Hv+6F+TqWXeSMK1yTgk1ihgdB0EHBgCBDyFN
0qaoy7hhDd5CpL0nkLHxmdsVp/XadXDWoMOr6iF7cmZ5pKcrUD0gb238UmLwd1q8
Rkqaex4vk//491Yp6YlfRMlCoeuuGod+mH4hTPP+LMjLxRXEn5ilj5DxaYi/kD7W
lQNxPAwvR3eKSESh+X+XPQOItI2o9dLuH2hM04li4bkD7qEx66xtMNNNjDEdqYGZ
e7PciLeBgzYU46ZNGlnHXFj/IfZQgNscbaYSpJQNuHVrs/jG3r7w8ZoP7kzg165y
SyqE8wEtpRy4o8iC0RVjxDqqSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7fD/W6
jRAp88Gi62vS0IHi6W/sMB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl
QXRwcWdfS2dIeEZoRWREX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChV7flu1E+zvkLvWYkr/hY5BzFwhm1xuSu7qP1I/SaqJFR6B1VuTbZ
KQMV07BQmjkYXkMQUqAxyBGvBOajPm3mso5i/TQl5OpW1+i86vQGHk4UKmyWLrSC
ki/ZWccJiwMyZhAv7UEfj7AxXYD6AQhQRoZi+xUwBA0ogglyGUsLswBXt7vT1HI6
UDHQ0zUdaiH/zhGsSeCYgsw2jgeI/feXV5clX0FMAKf0wPsTcK67tw8BGhInVM+L
9PF4sMW9dznJfW5FoPHs+U46O9wPnq4+VsPoElRlAsHyed6Avtpo6t3S7sUhrdOs
QtjwkIpg2orNLalv/dna6gGh1aSocmpF
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:07 2026 by rpki-client