This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft
File:                     gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft (raw, json)
Hash identifier:          NIXBwrB7n4wmnjewqHKB2q7AFK6SU/4+rCp6kcPZrno=
Subject key identifier:   FC:8F:47:E6:4C:01:DE:82:84:7A:57:EC:81:F0:36:3E:87:B9:11:01
Authority key identifier: 81:BF:DE:91:69:D5:C2:C0:EB:45:17:62:07:53:73:76:99:DF:16:AC
Certificate issuer:       /CN=A916C6A1/serialNumber=81BFDE9169D5C2C0EB4517620753737699DF16AC
Certificate serial:       0606
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft
Manifest number:          0601
Signing time:             Sat 24 Jan 2026 22:08:17 +0000
Manifest this update:     Sat 24 Jan 2026 22:08:17 +0000
Manifest next update:     Sat 31 Jan 2026 22:08:17 +0000
Files and hashes:         1: gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl (hash: lpMnMjCNFqiGXfnZSzfx5dDO/mlsEMCRDjlkqD8Z7pQ=)
                          2: 72AA1A38D7CB11EBB8307453C4F9AE02.roa (hash: YHV0pOPKI4RCYfRV7LWo65eFNEXv2JBj+IEUg9SpWKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl
                          rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C6A1, serialNumber=81BFDE9169D5C2C0EB4517620753737699DF16AC
        Validity
            Not Before: Jan 24 22:08:17 2026 GMT
            Not After : Jan 31 22:08:17 2026 GMT
        Subject: CN=697542d1-54ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:0f:b2:ef:7d:af:83:93:b6:07:8b:1d:a3:
                    f6:f0:01:d9:7c:d4:c7:5c:0b:d4:40:3c:fa:a5:ff:
                    b7:cc:67:f6:b1:57:28:4b:92:54:ad:2e:b6:3e:3e:
                    5f:83:89:7d:ab:69:74:38:ff:f0:95:1e:b3:5c:68:
                    cd:0f:ff:ad:ae:d7:3d:ac:94:6c:f9:25:8a:5f:26:
                    4b:4b:fb:60:53:35:99:20:07:ec:7d:cc:72:d3:f6:
                    08:ee:6b:2b:c8:f9:23:ac:92:ea:06:29:22:c4:ea:
                    00:4c:25:cc:a3:ec:ce:c0:d1:51:7e:cb:1f:ab:af:
                    85:16:d5:07:6a:3d:3f:df:65:d7:96:87:ca:4b:70:
                    f4:c1:34:5b:b8:58:2d:92:70:3d:72:b2:8c:27:11:
                    87:16:0a:3c:07:a2:2d:5c:9f:3c:f2:7a:de:8c:c4:
                    f6:8f:03:7e:69:3f:11:b4:5d:f7:c8:02:77:a6:d7:
                    66:40:fc:1d:84:4b:fb:21:6c:d1:45:79:67:a3:93:
                    1f:18:3c:cf:2f:16:66:db:b5:d6:13:44:da:23:f3:
                    72:49:5a:05:59:ef:ad:46:e9:10:ab:a4:f2:52:99:
                    85:7d:25:90:1a:16:df:40:78:23:8e:e2:af:55:40:
                    0b:1f:35:ed:93:1a:21:99:da:08:9e:79:31:2a:07:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8F:47:E6:4C:01:DE:82:84:7A:57:EC:81:F0:36:3E:87:B9:11:01
            X509v3 Authority Key Identifier:
                keyid:81:BF:DE:91:69:D5:C2:C0:EB:45:17:62:07:53:73:76:99:DF:16:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:47:69:8c:70:9e:8c:55:00:fb:0c:42:04:4c:17:19:82:d1:
         d6:ab:ca:c0:17:f2:18:8c:a4:a0:b7:ca:64:9d:e8:fd:bf:af:
         30:c4:44:1c:21:39:49:c4:06:44:c6:dc:80:8d:16:4e:b6:55:
         ee:e5:13:24:39:d1:9d:fb:68:65:a0:04:96:87:21:56:6b:28:
         e4:b6:f6:5b:72:8c:90:a2:a3:f7:4f:b0:5d:e6:80:a9:2e:3a:
         4a:e6:26:42:5a:e0:d1:01:be:f0:4c:c0:b5:fd:dd:1d:35:ca:
         d9:e6:39:db:ed:43:66:ad:71:80:c9:07:53:d9:ea:22:ab:f2:
         2f:39:58:db:67:9e:14:33:20:7e:55:3e:77:20:11:90:99:74:
         8b:35:8c:8d:dc:a9:58:94:85:93:82:9e:bd:c2:44:79:9b:e9:
         7a:d2:55:b0:a1:d4:3d:99:6e:c1:16:1b:26:a4:54:c6:a0:bd:
         4c:a5:23:38:09:86:b2:20:c8:a3:af:4f:fb:ed:23:ee:0e:a9:
         d7:e5:fd:63:93:82:ec:63:31:f2:c1:e5:5c:07:60:97:09:09:
         0e:62:07:22:be:19:57:ae:21:c5:20:01:a1:06:db:39:98:3c:
         50:1e:92:15:87:e0:c0:e1:ab:20:ee:68:94:18:22:0f:b2:31:
         81:c5:4f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:50 2026 by rpki-client