This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
File:                     gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json)
Hash identifier:          ZuaTLaR/A6EQeLhrRRMQkYX5OXtWqY1KLzuT2VH1xJg=
Subject key identifier:   FB:83:20:E9:69:52:80:31:50:20:AA:7A:CC:F0:B5:84:5E:DE:50:E9
Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE
Certificate issuer:       /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
Manifest number:          0131
Signing time:             Sun 25 Jan 2026 03:46:37 +0000
Manifest this update:     Sun 25 Jan 2026 03:46:37 +0000
Manifest next update:     Sun 01 Feb 2026 03:46:37 +0000
Files and hashes:         1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: iLHRRWpzwNnvwDSsPJzmp4k1gGKvYzGSj2ioDZdY0Eg=)
                          2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: H+qQQZmD1p/qPnv6XT6KRZsCtfSFefjGnHy0mI1YrpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl
                          rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
        Validity
            Not Before: Jan 25 03:46:37 2026 GMT
            Not After : Feb  1 03:46:37 2026 GMT
        Subject: CN=6975921d-0844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:22:5d:02:bb:00:4a:9a:79:89:a5:38:9e:
                    60:75:98:93:58:c3:69:50:dd:29:cc:bc:91:9e:ca:
                    60:b0:a5:9a:70:08:20:84:ed:33:55:39:5f:97:51:
                    87:ba:1b:8d:23:1a:4c:e5:08:fe:b2:5f:f7:80:77:
                    27:1f:9d:2d:83:11:d9:9d:ee:e6:a5:29:45:91:cd:
                    3c:a3:9f:b8:1a:82:53:e5:20:2b:b6:92:0f:5f:bc:
                    40:4f:97:91:74:14:4a:1f:37:fe:27:87:38:88:39:
                    7b:2c:cb:1a:da:37:c2:12:df:48:56:5b:63:a8:12:
                    27:08:9f:7e:29:3b:64:63:04:54:92:ff:ef:74:bd:
                    d9:a5:b7:af:77:21:44:f5:6e:77:75:cb:8a:10:59:
                    ef:d4:57:f6:73:41:2f:61:10:a2:32:a5:e0:ca:b2:
                    2b:3a:82:22:d0:af:9c:d6:27:53:2a:da:b8:42:84:
                    35:5a:bd:03:d8:65:d8:49:ff:50:20:e6:cb:8a:45:
                    7d:d3:3b:91:1b:c8:4b:8c:b1:7d:9b:30:b5:ac:09:
                    53:b7:bc:39:2d:1c:b5:e2:36:69:f0:82:f2:23:ec:
                    2d:11:32:ea:97:de:15:72:30:0e:d6:c0:e6:56:cf:
                    73:89:06:99:e2:9f:d2:8f:a5:24:94:bd:b1:47:9a:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:83:20:E9:69:52:80:31:50:20:AA:7A:CC:F0:B5:84:5E:DE:50:E9
            X509v3 Authority Key Identifier:
                keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:de:41:26:ab:73:a4:b6:2f:49:82:d9:c5:41:94:8d:e9:89:
         ab:26:65:9b:6c:8c:0f:37:48:3e:0b:d3:09:d1:21:df:d9:02:
         4f:68:1d:4b:58:bc:81:52:1c:d1:03:4b:5b:3b:f5:91:f8:ec:
         f3:6d:75:31:b8:5b:93:6d:8a:c7:19:f5:39:a3:cc:32:37:55:
         6e:8b:65:23:af:68:c3:55:6b:0a:26:c5:71:54:e2:51:22:48:
         8c:fb:dd:b6:ba:a9:6f:da:58:a7:12:ce:fa:19:e0:9c:87:91:
         19:5a:7c:c3:e6:a9:ce:76:b9:1a:57:d5:5b:61:94:d7:b6:57:
         28:1a:bb:f7:0e:a7:97:b2:b6:e2:d4:29:7d:5a:c4:63:2f:17:
         94:b5:89:31:20:14:0c:9d:90:ee:16:d7:81:02:c7:0c:30:8b:
         4c:e3:ec:e6:b3:44:d3:0f:9d:c7:9a:0d:a8:16:cd:7d:e3:c9:
         75:2a:3e:e3:c4:5f:1d:0c:14:61:ad:d9:26:c8:04:e3:15:de:
         64:0c:21:a4:29:73:fd:49:29:0d:3c:5f:53:93:7c:6c:80:39:
         c4:16:3c:da:d2:e8:01:f7:f6:ce:bc:4b:53:b6:5c:71:b1:9d:
         69:30:7d:20:b1:23:10:b6:cb:51:4c:e2:2c:5f:a5:97:8b:51:
         15:43:fa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:54:59 2026 by rpki-client