This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft
File:                     gO0g9_wH3gyfPBuOKunNP85u2yE.mft (raw, json)
Hash identifier:          MYoqeeF/ZqLgwVQrjVSpafCgaEHr6biYSFQ0ONVZKmE=
Subject key identifier:   1E:16:56:16:65:97:2D:85:03:BD:48:EA:EF:30:59:3E:C0:11:20:37
Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21
Certificate issuer:       /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21
Certificate serial:       05C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft
Manifest number:          05BD
Signing time:             Sat 24 Jan 2026 22:20:24 +0000
Manifest this update:     Sat 24 Jan 2026 22:20:24 +0000
Manifest next update:     Sat 31 Jan 2026 22:20:24 +0000
Files and hashes:         1: gO0g9_wH3gyfPBuOKunNP85u2yE.crl (hash: w2L615fpsNaE+clwRa49dl8ljpvo1vfzyOQHSp/GowE=)
                          2: 972D6576112511F08AC1A549C4F9AE02.roa (hash: iUN31JJZ65NVMi/nX6/HwIma9Bq/CyMVkVwHymfBoW0=)
                          3: 513D702E112511F081CC4E49C4F9AE02.roa (hash: lxHIKpYE2VB/iD5eZnrcRwEkdnEECKdwwLnTikKnybg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl
                          rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21
        Validity
            Not Before: Jan 24 22:20:24 2026 GMT
            Not After : Jan 31 22:20:24 2026 GMT
        Subject: CN=697545a8-ee6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:e0:ff:2f:cb:83:f0:66:e7:d3:04:fb:eb:
                    9f:18:8c:4c:cf:89:62:df:73:7b:58:3d:d5:7a:7f:
                    94:e2:fb:48:6d:1f:41:02:d6:37:6f:4d:82:3d:67:
                    57:26:6c:7c:9a:34:65:8f:05:f2:08:04:c8:84:0d:
                    1c:20:40:f4:cb:bb:39:91:8b:4c:0b:3f:8a:af:3c:
                    b4:b7:1a:bf:83:4a:3b:2c:3a:0d:f5:4e:87:a7:c5:
                    9a:83:6e:b1:03:3d:d7:13:68:95:d4:f1:bc:03:f9:
                    92:11:c4:1b:70:9d:1b:48:b1:b1:8b:27:59:e0:6a:
                    ef:b6:ef:65:a1:7d:6f:6c:62:7f:4b:3e:00:5e:4c:
                    a5:5e:59:7c:c1:dc:5a:b4:68:2c:79:05:c1:4c:8e:
                    36:5d:cf:ff:41:45:89:72:5e:8b:cd:0c:7b:c7:18:
                    f6:e9:d5:06:9a:d4:3f:37:a5:e0:f3:a8:c8:f8:9e:
                    e6:cc:ef:a8:0a:9a:25:41:38:cd:ce:9d:6f:c1:ec:
                    09:a3:03:55:15:53:e8:0b:57:bd:1b:45:d6:17:97:
                    57:09:a9:1a:b0:07:4e:aa:17:02:4f:01:4f:53:d7:
                    5b:9a:bf:8e:70:0d:6f:f2:5f:39:cd:b8:63:16:78:
                    9b:f7:60:ff:b2:a3:50:f0:ed:99:e6:14:7e:2e:ec:
                    e5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:16:56:16:65:97:2D:85:03:BD:48:EA:EF:30:59:3E:C0:11:20:37
            X509v3 Authority Key Identifier:
                keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:b3:e8:2c:26:07:e2:ae:2d:f7:45:41:cd:15:ed:5e:24:
         7c:cb:9e:e6:fe:f2:ab:8d:ed:31:a0:17:4c:47:ff:47:4d:8a:
         82:ab:59:ce:23:50:0c:10:10:dc:c1:d1:ad:48:61:50:cd:71:
         da:34:89:d7:cf:24:79:f3:62:f1:3e:e1:a4:78:08:7b:ac:bb:
         05:85:16:ac:44:6d:50:19:4d:3c:46:7a:25:b6:70:7b:cb:9c:
         a6:a1:6c:95:17:fb:8f:97:97:ee:a3:97:86:a7:65:5b:c9:64:
         16:8b:6d:7a:99:0c:55:76:42:c0:8a:e3:78:1a:0e:a5:20:11:
         f1:b7:d9:5d:c2:cf:1c:69:d7:1f:01:c7:40:71:45:42:c1:b5:
         21:ba:96:db:2f:b2:e2:0a:13:53:69:5e:a5:45:25:e2:a1:56:
         bd:b0:89:cd:8b:91:df:1c:5b:b5:a3:7f:b1:75:49:f6:da:b3:
         59:48:61:f2:7a:c4:fa:b0:ac:41:e1:5d:f2:3f:64:75:aa:aa:
         9f:bb:bd:f2:56:51:3d:49:bb:e8:b9:9c:4d:91:61:d9:82:b6:
         36:e1:72:ac:83:fc:ac:df:8d:65:a2:76:12:fc:fc:f1:91:d1:
         d7:94:b2:b1:b3:cc:45:93:f4:3e:5f:80:f9:3a:82:0e:9c:69:
         8e:15:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:22 2026 by rpki-client