This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
File:                     gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json)
Hash identifier:          TPHfWwnlwFIh5Xo7LSx8hybKbMBFuJuX2EvEVImvsg4=
Subject key identifier:   62:A2:D0:B1:5F:E1:7B:EF:60:C4:6E:15:73:47:D5:74:A9:05:E3:7B
Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
Certificate issuer:       /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
Manifest number:          0223
Signing time:             Sun 25 Jan 2026 01:22:58 +0000
Manifest this update:     Sun 25 Jan 2026 01:22:57 +0000
Manifest next update:     Sun 01 Feb 2026 01:22:57 +0000
Files and hashes:         1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: AHqfw3aOCpOJqFQ0GwXT5+URZoV1w+yqHRu+FrZldew=)
                          2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: GUezrK4MuLX9p1Pm9ugLdkW32KkVaxIuYUbsdX0Eo1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl
                          rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160602, serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
        Validity
            Not Before: Jan 25 01:22:57 2026 GMT
            Not After : Feb  1 01:22:57 2026 GMT
        Subject: CN=69757071-b68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:1f:8e:63:1e:fd:19:51:d9:46:d6:ba:f6:
                    15:cb:1e:95:f8:f1:8e:87:60:57:e8:49:24:0f:6a:
                    52:61:a2:bb:21:3b:8a:28:d0:ee:a5:fb:c7:74:1d:
                    1a:3f:8d:30:8a:c3:9e:65:26:a5:9d:cd:35:6d:3e:
                    62:2d:3b:91:5e:c7:9c:a3:4e:0d:1d:b1:d5:77:0c:
                    73:a0:f7:89:9d:9b:29:a8:35:20:bc:f4:32:fb:43:
                    db:53:e8:9b:78:04:41:d5:4e:36:a1:2a:2d:d3:80:
                    11:ba:16:68:30:af:96:78:3e:10:b4:0b:d7:97:33:
                    fa:22:92:2c:d4:31:ae:be:ec:37:fe:76:d5:45:ee:
                    b0:e5:9e:27:30:b2:2b:1b:e1:a0:a0:6d:64:6d:56:
                    5c:16:0b:63:2f:ae:ea:f5:10:b7:d8:57:b1:16:1e:
                    55:c2:01:19:d6:75:bc:14:19:18:f2:b2:37:1e:66:
                    21:f8:ec:18:6f:53:e4:f0:e6:25:1a:67:2a:03:1c:
                    1b:99:c2:dd:75:66:9f:e3:bd:7c:0c:7d:d0:f8:fb:
                    10:fc:6b:64:bf:30:1d:2d:ea:96:62:bd:4e:7b:7a:
                    c8:10:13:34:d1:48:16:96:1f:79:7f:29:8e:51:7d:
                    0f:24:ce:d0:71:84:19:d9:b7:a3:7f:53:ff:e0:54:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A2:D0:B1:5F:E1:7B:EF:60:C4:6E:15:73:47:D5:74:A9:05:E3:7B
            X509v3 Authority Key Identifier:
                keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:56:e9:d9:63:9f:c2:5c:cd:6f:83:ba:81:bf:fe:33:42:7a:
         8c:da:e6:64:82:54:db:1d:ed:fd:84:f5:d8:e1:19:15:55:cc:
         ed:d3:b3:d6:77:3b:58:06:f6:72:4e:46:5c:cb:18:61:f1:a8:
         4b:a1:89:76:76:4c:94:05:61:f8:47:a5:a5:92:14:97:0b:82:
         41:06:74:5a:aa:3c:ab:29:da:92:b4:17:c5:e4:5d:f2:58:85:
         ab:81:29:f9:63:19:59:cc:8d:1c:1b:e2:e7:6c:e1:7a:28:82:
         41:0e:fb:36:0f:fd:ac:3d:82:c0:02:54:df:7c:8e:15:60:12:
         07:04:b2:93:18:28:da:06:ae:64:70:5b:d3:28:0b:b2:84:90:
         49:15:aa:b5:05:5c:5c:f1:5f:24:0c:ce:d3:dd:9e:de:9b:68:
         47:fb:df:24:a0:94:68:90:5b:76:b8:91:d1:25:f8:6a:ed:ea:
         c8:87:49:06:07:c4:c4:26:69:30:a7:24:b4:57:e8:81:19:26:
         db:21:13:5d:3d:65:45:3f:36:27:e1:42:98:66:76:78:30:45:
         8b:64:b7:92:37:fb:88:9c:63:48:2d:f2:17:c3:60:a9:ee:1f:
         08:14:77:07:3e:98:9f:eb:61:b4:03:69:3b:0e:9e:90:83:54:
         96:f0:7c:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3
QTk0ODA3NUIwHhcNMjYwMTI1MDEyMjU3WhcNMjYwMjAxMDEyMjU3WjAYMRYwFAYD
VQQDDA02OTc1NzA3MS1iNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzJIfjmMe/RlR2UbWuvYVyx6V+PGOh2BX6EkkD2pSYaK7ITuKKNDupfvHdB0a
P40wisOeZSalnc01bT5iLTuRXseco04NHbHVdwxzoPeJnZspqDUgvPQy+0PbU+ib
eARB1U42oSot04ARuhZoMK+WeD4QtAvXlzP6IpIs1DGuvuw3/nbVRe6w5Z4nMLIr
G+GgoG1kbVZcFgtjL67q9RC32FexFh5VwgEZ1nW8FBkY8rI3HmYh+OwYb1Pk8OYl
GmcqAxwbmcLddWaf4718DH3Q+PsQ/GtkvzAdLeqWYr1Oe3rIEBM00UgWlh95fymO
UX0PJM7QcYQZ2bejf1P/4FR7cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKi0LFf
4XvvYMRuFXNH1XSpBeN7MB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG
QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC
MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDYwMi9GQkNDODk3Q0FGQjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3
ZUJZQVA3dUp0bE42bElCMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcVunZY5/CXM1vg7qBv/4zQnqM2uZkglTbHe39hPXY4RkVVczt07PW
dztYBvZyTkZcyxhh8ahLoYl2dkyUBWH4R6WlkhSXC4JBBnRaqjyrKdqStBfF5F3y
WIWrgSn5YxlZzI0cG+LnbOF6KIJBDvs2D/2sPYLAAlTffI4VYBIHBLKTGCjaBq5k
cFvTKAuyhJBJFaq1BVxc8V8kDM7T3Z7em2hH+98koJRokFt2uJHRJfhq7erIh0kG
B8TEJmkwpyS0V+iBGSbbIRNdPWVFPzYn4UKYZnZ4MEWLZLeSN/uInGNILfIXw2Cp
7h8IFHcHPpif62G0A2k7Dp6Qg1SW8Hwl
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:45 2026 by rpki-client