This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
File:                     Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft (raw, json)
Hash identifier:          GiI6r3LzaCuBMOWSsxTzsNL1YXzkQ2711CHtOqAdASA=
Subject key identifier:   1B:8F:E1:07:BF:48:E7:FF:86:D7:3F:6A:85:F3:45:25:B5:15:11:C3
Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7
Certificate issuer:       /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
Manifest number:          89
Signing time:             Fri 23 Jan 2026 05:40:55 +0000
Manifest this update:     Fri 23 Jan 2026 05:40:54 +0000
Manifest next update:     Fri 30 Jan 2026 05:40:54 +0000
Files and hashes:         1: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl (hash: De9SGTXkd/74ImHGMX3G7k8EMIoEU6A9LDHm3tlIfXY=)
                          2: D7605790272B11F08FF39632C4F9AE02.roa (hash: tLDukBXW9s6SSFm9uRxrq7oWsERjQHnbhkDpHLbqNUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl
                          rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7
        Validity
            Not Before: Jan 23 05:40:54 2026 GMT
            Not After : Jan 30 05:40:54 2026 GMT
        Subject: CN=697309e7-f56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:72:a8:8e:d9:85:4c:dc:b6:ba:ff:15:8d:
                    e7:59:a0:26:a0:8a:6d:a9:01:20:2b:eb:a9:08:2b:
                    61:05:e0:29:17:24:7f:94:8b:26:43:7e:b1:31:5d:
                    7d:e5:e5:ad:9d:00:48:c7:d1:38:59:f5:4d:40:a6:
                    58:db:c8:b6:5a:dc:bf:f0:56:f2:5f:b3:c9:3f:0e:
                    d7:c3:94:8d:cc:c4:52:ee:89:62:ab:5f:9a:86:0d:
                    bb:61:34:c7:09:03:73:e8:03:48:28:b4:c2:33:2b:
                    be:99:a8:6d:a4:a1:79:4e:b5:b6:ef:bd:96:79:7f:
                    e8:96:95:73:51:89:49:bf:69:ee:01:3a:87:85:1a:
                    25:a6:45:24:df:b5:38:65:76:dc:80:6c:f6:be:61:
                    d6:39:fd:cd:1d:6b:6e:ff:91:f0:03:49:cc:bf:39:
                    2d:8d:49:7a:17:5e:bb:5c:20:22:42:92:33:cf:24:
                    db:90:02:95:5a:bf:55:a9:f2:8e:64:b3:fa:02:e4:
                    93:e1:10:57:5b:c8:07:78:b4:1b:0a:a9:c0:2e:f6:
                    01:b5:21:05:d3:16:7c:4d:b3:84:8b:d2:8d:24:eb:
                    8c:bb:d8:35:de:da:55:e5:c5:d0:8e:03:85:2d:1a:
                    9a:83:7e:d3:22:1a:f4:f2:52:18:ff:18:70:2d:9e:
                    d8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8F:E1:07:BF:48:E7:FF:86:D7:3F:6A:85:F3:45:25:B5:15:11:C3
            X509v3 Authority Key Identifier:
                keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:92:98:2e:5d:d6:2a:1c:06:c8:73:24:4c:41:5b:27:e5:2c:
         a2:6f:fc:f0:6d:e4:bd:be:cf:c4:f2:af:da:3d:70:10:25:2a:
         2a:1b:96:3f:54:d6:fb:93:b7:de:86:8b:16:2b:a6:15:95:75:
         99:3e:74:c3:76:f0:2e:d0:fa:59:6c:02:84:c4:dc:97:f4:1b:
         7b:da:e7:50:5c:51:44:c9:ed:c9:de:78:7b:40:48:e5:07:cb:
         dd:6f:ec:fd:1d:0c:01:63:52:90:f2:4d:4c:f0:0e:22:d4:a6:
         7a:51:c8:64:ff:22:c0:0d:2c:53:31:81:9b:37:73:db:3d:50:
         d5:dc:13:15:08:e0:f5:34:68:08:10:bb:41:a2:19:fe:3b:bc:
         8f:bc:44:3e:ed:55:76:db:3f:ce:7a:90:56:b0:fd:09:8a:2e:
         96:95:1e:19:e3:d3:ca:98:33:2b:e5:8e:41:1d:43:85:b3:16:
         aa:18:83:e6:3e:36:d5:fc:2a:c8:e5:04:19:5e:f6:68:e5:32:
         fc:82:36:87:b1:1e:3d:36:e6:ba:1c:e9:49:be:24:8e:93:d3:
         96:90:1d:91:bf:66:b0:7f:f7:4c:0b:0c:a0:c5:b8:f5:e0:fe:
         53:b4:7e:6d:3a:85:b3:36:18:67:f9:d1:63:1a:f6:ed:49:0f:
         8c:4f:39:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:16:41 2026 by rpki-client