This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
File:                     goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json)
Hash identifier:          C2Nbc/XZD1LBGppTHMpJ85228X7JXEpaweK2ZFdVt1Q=
Subject key identifier:   8E:41:39:A6:55:91:0C:77:EE:E8:C2:23:68:E2:69:E3:09:BA:45:41
Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
Certificate issuer:       /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Certificate serial:       0617
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
Manifest number:          060F
Signing time:             Sat 24 Jan 2026 22:07:38 +0000
Manifest this update:     Sat 24 Jan 2026 22:07:37 +0000
Manifest next update:     Sat 31 Jan 2026 22:07:37 +0000
Files and hashes:         1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: oAPamNVHB7pRAx1lH+A2zKr6HzvFov8jxwN4WFNsn9k=)
                          2: 2BE5310AF27E11F082456479676F56BC.roa (hash: hY5jheNT3J+lWYYPMYXaqp0yleLHelgC+PswidWJ6k4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
                          rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
        Validity
            Not Before: Jan 24 22:07:37 2026 GMT
            Not After : Jan 31 22:07:37 2026 GMT
        Subject: CN=697542a9-97cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:11:64:b1:00:50:d1:a4:67:cf:05:74:41:0d:
                    ee:db:ae:37:c4:0e:6e:14:9d:59:ab:5d:a3:8e:2c:
                    20:9e:93:b4:2a:69:07:01:e1:a2:ae:db:ba:75:a7:
                    fc:39:8a:17:2e:57:c0:8f:90:29:c3:96:24:15:0f:
                    1d:94:23:09:f9:3e:df:2b:70:ca:de:10:67:24:42:
                    3d:0a:c3:55:64:0d:52:f0:8c:b7:fd:ea:35:4f:63:
                    e6:70:fe:f2:4d:3c:4f:6d:9e:a4:84:94:2f:94:7e:
                    1e:c9:a5:f1:a3:f4:7d:7f:04:90:e1:c4:2d:e1:d6:
                    7b:a3:54:91:7a:88:f0:ed:d8:7c:28:e5:72:1c:b5:
                    f0:ff:8a:58:90:48:91:dc:c3:f0:db:9f:ec:56:ac:
                    6c:68:82:99:98:84:a0:2b:35:dc:b5:b1:59:96:16:
                    35:f2:17:9f:de:c9:ca:f7:56:7c:3f:8c:a1:6b:6f:
                    35:35:46:05:84:c3:f3:1e:59:75:6e:98:c9:84:10:
                    2c:74:98:19:41:21:2f:fa:e6:c8:22:2c:d1:98:c2:
                    65:8e:ff:86:80:cf:8f:6e:9e:77:94:0b:c3:2b:19:
                    f5:0e:1e:59:4b:69:40:64:b6:57:67:cb:89:4d:72:
                    89:37:97:c3:2c:8e:56:cd:4a:b9:3e:ce:78:25:66:
                    0a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:41:39:A6:55:91:0C:77:EE:E8:C2:23:68:E2:69:E3:09:BA:45:41
            X509v3 Authority Key Identifier:
                keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:61:7c:a6:6c:9e:2a:32:c6:2f:f6:ab:1b:ee:bf:e8:36:f2:
         88:54:19:6a:29:c5:9d:2b:44:e7:a5:88:79:84:bd:06:bf:01:
         1b:17:a6:63:82:c9:78:80:4a:01:d0:5d:b6:09:64:f4:e1:c4:
         f8:49:97:bf:fe:81:39:e7:69:b1:09:6a:57:e1:9a:b8:13:ca:
         b4:ac:d3:ff:94:02:d3:90:3d:be:26:67:8d:df:9d:15:cc:51:
         5a:81:ab:92:af:29:08:8b:27:85:c4:33:ff:cc:00:40:4f:09:
         49:e2:9f:38:a0:d4:29:f5:94:66:5b:a3:72:31:a7:04:6e:2d:
         63:f2:85:e5:4f:bc:10:3c:e8:82:e4:88:a5:83:21:32:7c:8d:
         9a:29:5f:fc:b4:c2:5b:27:fd:7b:39:09:e5:c5:fa:ea:69:ba:
         b9:3c:00:f1:8c:05:88:46:41:85:cf:20:fc:c2:5f:1d:65:79:
         b5:6a:cf:dd:33:b2:7d:47:55:ca:b6:70:89:e6:e3:37:7a:44:
         93:61:bf:41:3e:4b:ff:da:dd:52:59:e4:d0:1c:2a:29:43:75:
         a7:ca:06:f5:23:99:d8:a0:a4:7c:e9:cb:48:ea:f7:29:70:11:
         ec:e8:45:6f:74:fd:b0:0e:93:24:b2:09:a9:4e:67:5f:9f:3d:
         82:e3:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:06 2026 by rpki-client