This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
File:                     g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json)
Hash identifier:          koh5P2ExzgRX+PH+4+h3zAWK+uQZSksZ1kv2Thw6DqY=
Subject key identifier:   67:C8:87:DF:84:BA:5B:BA:62:D6:29:E3:6B:4C:0E:DC:0F:69:28:D3
Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF
Certificate issuer:       /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
Certificate serial:       0ECE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
Manifest number:          0EC7
Signing time:             Sat 24 Jan 2026 17:20:40 +0000
Manifest this update:     Sat 24 Jan 2026 17:20:39 +0000
Manifest next update:     Sat 31 Jan 2026 17:20:39 +0000
Files and hashes:         1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: a3817ebMkzymPbr6XHU3UGzTEqcxpK4hl8Uf7/1nHpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl
                          rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3790 (0xece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162557, serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
        Validity
            Not Before: Jan 24 17:20:39 2026 GMT
            Not After : Jan 31 17:20:39 2026 GMT
        Subject: CN=6974ff68-0694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:d8:04:98:a5:5a:2a:de:fd:96:d9:bc:29:
                    31:09:e8:4a:6d:55:3e:e2:9f:43:08:b4:4b:32:f9:
                    ad:14:5a:e6:f3:90:48:a8:a8:29:98:6b:06:7c:55:
                    a8:c4:ef:32:00:e4:74:70:97:e6:f2:dd:ba:b7:5a:
                    a4:85:fb:1a:60:44:02:e2:d1:d9:b0:86:7f:54:b9:
                    cd:bd:8e:69:80:2e:c5:8e:45:5a:78:51:5e:54:4a:
                    b5:49:9e:38:8d:69:5a:a5:c7:80:c2:e6:ea:5d:4d:
                    e1:51:cb:b0:da:0d:8c:94:a4:35:79:6a:24:b9:3f:
                    ee:82:bf:e7:a5:15:f5:54:00:4a:c1:66:95:f6:31:
                    99:82:a2:f7:05:22:fe:06:37:54:f3:f3:f5:1e:56:
                    a2:ee:5d:5a:82:31:8b:5c:ae:f6:11:c4:97:84:83:
                    fa:bb:4e:26:bc:c7:ae:2b:aa:2c:5e:04:a5:8f:08:
                    40:f1:0e:58:3e:25:61:97:80:81:ce:ee:83:cc:6c:
                    f1:6c:3d:20:40:b1:70:c6:e0:a6:3f:69:3f:71:3e:
                    1a:13:e0:db:ec:15:12:be:e7:f8:7f:cd:f3:08:c9:
                    e5:94:05:73:04:b3:8b:2d:55:b3:98:2e:05:43:27:
                    d3:a6:7c:1c:65:e1:2a:5a:b9:93:32:46:ff:bc:73:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C8:87:DF:84:BA:5B:BA:62:D6:29:E3:6B:4C:0E:DC:0F:69:28:D3
            X509v3 Authority Key Identifier:
                keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:16:45:63:92:b3:50:78:20:7e:22:a9:57:43:56:60:af:c7:
         66:60:88:9b:c0:93:71:ff:8b:59:1d:96:ab:9d:02:e0:e9:ab:
         b1:b4:4b:a9:9f:00:59:ee:88:94:3b:5a:de:9e:03:95:67:35:
         db:95:cf:e4:cf:c6:02:27:d5:66:aa:d9:0c:cd:3e:b5:fd:56:
         62:b9:19:e3:f8:a2:a4:a8:75:14:bb:18:df:77:f0:6a:fc:dc:
         e5:a2:be:98:84:fe:6f:50:e2:cd:a2:eb:81:60:91:f0:d1:ae:
         63:6e:4f:5f:dd:66:d5:dd:cb:30:4e:7d:8d:89:7b:dc:9e:ee:
         81:42:8e:9f:2b:74:56:1a:4f:31:a0:be:46:42:3d:56:ce:5e:
         61:6e:92:ff:27:82:1d:fe:92:83:26:e5:85:06:6d:a7:65:08:
         f0:de:5b:e9:80:54:ad:03:20:6b:d2:fa:8f:28:97:d7:69:3b:
         c1:ed:0b:ee:d3:00:a5:3c:ec:b7:1a:88:76:36:67:88:6d:cb:
         40:ff:af:56:64:38:64:61:b7:5b:06:7f:ec:a6:38:d0:0f:30:
         f1:e6:0e:44:d1:4b:5d:26:ea:d3:f0:01:bf:e1:9d:b0:8e:e3:
         11:b1:a2:76:63:b8:75:7d:40:3f:a9:10:5e:34:1e:38:06:05:
         09:66:90:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:40 2026 by rpki-client