This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
File:                     p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json)
Hash identifier:          Kr/WJQDeiH9UAeS5cMq5xYTkchCLD6w1zOKDBz1nPSo=
Subject key identifier:   67:53:D5:77:E7:C3:89:5D:E6:52:71:6A:8D:B8:82:A4:8D:01:21:90
Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D
Certificate issuer:       /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
Certificate serial:       0B9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
Manifest number:          0B94
Signing time:             Sat 24 Jan 2026 18:34:54 +0000
Manifest this update:     Sat 24 Jan 2026 18:34:54 +0000
Manifest next update:     Sat 31 Jan 2026 18:34:54 +0000
Files and hashes:         1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: 48TL1IWujU63BsK3S+NeW139s7JdlQcTYxj1a1YV9WI=)
                          2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: AK153DE4IViUL08h9ezbFgHOOI6exu7JR3ZXNtY89U0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl
                          rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2973 (0xb9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
        Validity
            Not Before: Jan 24 18:34:54 2026 GMT
            Not After : Jan 31 18:34:54 2026 GMT
        Subject: CN=697510ce-25b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:3b:e7:ee:10:4b:07:84:69:d0:f1:b7:b2:
                    b5:e4:42:7f:d2:5a:f8:a3:08:c8:cd:78:70:57:f9:
                    6f:a6:4c:da:c3:56:b1:73:20:37:23:5d:90:ef:0e:
                    91:88:4a:1a:39:ae:02:14:5e:ae:c4:a7:8e:45:16:
                    0c:c5:b4:18:78:9e:59:44:66:37:06:be:ba:b7:c5:
                    22:a8:82:fe:b4:92:2f:98:33:50:60:c6:1f:ea:33:
                    fd:87:20:16:7c:ba:27:ad:bc:cc:c3:ec:56:f8:24:
                    2a:3b:5b:15:bf:ea:37:54:3c:c7:76:b1:98:5f:67:
                    ca:13:8e:db:fe:dd:22:de:87:ae:7e:a4:5f:c2:98:
                    41:3e:71:46:80:4a:da:a4:7a:b9:49:f9:26:b9:9c:
                    2a:c9:3b:10:b1:ce:31:3a:4d:64:aa:24:8c:ac:a6:
                    16:4a:55:a7:8e:fb:93:e7:6f:4b:04:da:81:da:59:
                    82:ea:a3:c9:bd:5d:da:01:24:a4:49:22:33:e7:ca:
                    66:0e:c7:9b:8d:1b:09:28:07:76:0d:2a:fe:7d:db:
                    fc:7e:5f:f9:01:b5:af:ff:b8:6c:73:cd:54:25:cf:
                    c3:a7:22:d9:f8:db:40:b7:1a:ca:b8:db:99:23:0a:
                    bc:2d:32:c6:29:c7:27:31:09:39:2e:87:b8:06:26:
                    7a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:53:D5:77:E7:C3:89:5D:E6:52:71:6A:8D:B8:82:A4:8D:01:21:90
            X509v3 Authority Key Identifier:
                keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:8b:af:73:9c:ea:9d:48:96:89:a7:9e:f9:fc:c2:b0:43:3f:
         76:25:36:c3:7b:9e:b8:67:c1:a6:93:b9:20:48:5e:61:5f:7e:
         71:ca:c2:ba:89:93:5b:df:a9:cf:2c:6e:32:b2:75:3f:e3:cd:
         88:a2:9c:27:c3:25:b5:b7:2e:13:df:37:1b:02:0b:05:8c:27:
         de:47:2b:43:02:ee:26:4b:54:72:4c:17:60:d2:be:2d:82:b1:
         dc:a8:90:86:59:8c:6b:3b:8a:be:2a:3c:21:51:86:60:85:a0:
         10:67:ad:f0:3f:de:14:1d:fe:58:a3:29:12:67:b3:95:51:f6:
         a8:66:e8:db:b9:a4:65:45:52:69:0e:1c:57:e7:c9:d2:2e:39:
         8c:f6:0b:72:b9:46:68:13:d6:73:58:82:a3:d2:39:13:c3:75:
         99:aa:0b:7e:f7:cb:1e:b3:86:35:3f:d7:21:cb:79:b9:be:5c:
         07:7d:82:98:bd:01:83:f1:e6:c8:34:33:b8:89:da:eb:fa:35:
         21:50:b3:2a:f3:47:65:71:91:dc:d8:9c:18:3c:e0:69:d7:7d:
         32:f5:5e:54:62:55:f6:d3:a4:e3:86:83:36:f5:03:07:48:fd:
         80:51:96:31:a5:e9:0c:e4:4e:f6:d7:7e:f6:33:be:a1:4a:fc:
         36:2f:79:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:05 2026 by rpki-client