This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
File:                     CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json)
Hash identifier:          lR1GSKzfznb/lbozSNbPgDbkK/I4CfCvZeNSn2FUuZU=
Subject key identifier:   B7:04:C6:92:A3:56:2D:7B:23:F7:3F:A7:8B:A6:36:DD:A2:73:2B:38
Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27
Certificate issuer:       /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
Certificate serial:       12B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
Manifest number:          1B1E
Signing time:             Sat 24 Jan 2026 16:47:51 +0000
Manifest this update:     Sat 24 Jan 2026 16:47:50 +0000
Manifest next update:     Sat 31 Jan 2026 16:47:50 +0000
Files and hashes:         1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: +QSBl3EaLsC/ZJcQvZSp6+j9qyH6xegYrVHBI1wN8GE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl
                          rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4793 (0x12b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
        Validity
            Not Before: Jan 24 16:47:50 2026 GMT
            Not After : Jan 31 16:47:50 2026 GMT
        Subject: CN=6974f7b6-7887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ec:4b:3e:01:c5:36:7e:4d:4c:bf:63:50:d7:
                    b6:9a:cb:48:01:6a:6c:3f:00:73:3a:15:64:fa:09:
                    f9:64:ef:3a:dd:bd:8e:2e:d4:36:7e:17:72:78:04:
                    8a:b8:3f:8d:35:d7:ee:0a:4d:7d:ef:73:1e:dd:6d:
                    30:34:d4:fd:e5:f8:86:5c:df:50:eb:50:0b:0d:1c:
                    60:b2:62:ec:3a:ec:74:cf:cb:b4:8a:7f:9f:f3:d9:
                    3e:9f:7d:59:73:ee:a9:c7:fe:a1:1b:4b:eb:94:35:
                    b2:29:22:98:03:1e:13:c4:47:57:36:4f:1b:3d:0f:
                    03:31:ae:9d:98:a7:8a:23:00:85:be:4f:0f:ed:c9:
                    4b:cd:70:a8:db:56:0a:25:da:57:dc:4b:40:d5:8f:
                    b5:5f:7a:01:01:00:6b:70:ce:a0:2e:e3:0b:8d:06:
                    13:95:06:8f:40:7f:18:7d:88:df:4a:72:af:02:06:
                    c7:d1:1b:d7:25:67:2e:e7:75:1c:53:21:15:7f:2b:
                    8c:a7:ee:02:ab:e5:97:32:c9:55:b3:2e:8c:c7:05:
                    70:b2:dc:8f:c4:a8:41:90:45:d5:cf:61:16:38:ac:
                    aa:63:1a:53:14:27:c8:40:9b:2b:ec:62:4c:ee:85:
                    8e:67:ec:66:df:94:dc:48:d1:d6:77:87:fc:cc:e7:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:04:C6:92:A3:56:2D:7B:23:F7:3F:A7:8B:A6:36:DD:A2:73:2B:38
            X509v3 Authority Key Identifier:
                keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7c:2e:3a:86:91:7f:9c:48:05:23:47:0b:dd:7d:82:85:52:
         83:b6:ac:19:d5:7f:9a:fd:4e:27:dc:76:4f:5d:5e:ff:ef:2a:
         78:0a:01:ae:3b:7c:6e:2f:ba:8c:04:43:15:4a:d2:cd:f9:6a:
         ed:ea:a2:91:9d:4a:0a:79:60:6a:d0:bb:ab:1f:7e:18:52:e6:
         c0:ea:16:38:ab:df:df:cb:f7:92:60:ab:87:fa:f2:db:dd:47:
         46:39:f8:b5:b7:13:28:d8:53:0a:19:2e:cb:10:04:fb:29:e1:
         95:6c:0d:0b:d9:0f:21:53:88:46:b9:ed:ef:9b:f6:64:38:c2:
         2b:33:d9:4f:3d:3b:a8:ab:21:23:9c:27:65:5a:0a:28:dc:01:
         89:4e:ec:45:aa:22:ba:fd:37:8c:3a:6d:76:ba:ef:36:59:f4:
         05:ef:3a:91:ce:92:bb:b1:6f:e8:b7:99:1e:44:a8:3e:69:9a:
         c5:f9:90:00:5c:89:25:6f:8a:f4:d6:88:a2:e8:65:93:7e:37:
         41:c6:14:97:27:74:42:b8:d7:a1:36:f2:32:e9:89:85:43:84:
         3a:b0:45:9e:dd:4e:5c:64:68:22:d4:57:40:bc:8c:2b:62:28:
         e3:6e:46:07:a9:c1:7a:43:69:b3:6c:bf:bf:fb:3f:4d:35:7d:
         31:aa:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:29:52 2026 by rpki-client