This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File:                     gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier:          Mp8msDp8jtxCVveKouNQincSGjNaSBVotr3AS1BSTXE=
Subject key identifier:   7F:38:CE:68:53:67:C3:F9:41:80:4D:45:7F:CA:D4:AE:5A:3F:CB:F2
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       06AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number:          0680
Signing time:             Sat 24 Jan 2026 21:51:32 +0000
Manifest this update:     Sat 24 Jan 2026 21:51:32 +0000
Manifest next update:     Sat 31 Jan 2026 21:51:32 +0000
Files and hashes:         1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: J0lGBJ6n6+4VVvHhUc2qBVe2fW0csQcgq6gFjz9yM+w=)
                          2: 899A5138691611EFBED13942C4F9AE02.roa (hash: VYrhe6Mi0RTaO+P8HqkxU1Qva61wirf2XWWIcdNAN4k=)
                          3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: jcE65YGPbY23C0JRfHdMvEfT+xppldiedci4zrgXKQc=)
                          4: A6C94076624711EC9B815772C4F9AE02.roa (hash: XosrUy+Xd/y9+zlNKWBW88xmxi0w+unp/BWLX4a8k/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1706 (0x6aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: Jan 24 21:51:32 2026 GMT
            Not After : Jan 31 21:51:32 2026 GMT
        Subject: CN=69753ee4-f8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:6d:72:39:e1:00:6e:2e:59:ae:64:59:35:
                    39:8b:05:55:6d:63:d7:49:bd:27:18:bf:70:11:ea:
                    81:da:d1:5a:2a:89:7a:d6:cf:66:05:8f:9d:9e:2d:
                    42:2f:b1:aa:48:a8:07:2a:9b:64:bf:ab:e2:b2:de:
                    82:92:0a:25:52:2e:48:82:9d:4d:c1:17:41:f2:fc:
                    09:7b:9c:59:b0:f7:fe:31:f6:12:c1:7f:32:71:3e:
                    3c:5c:a4:e2:d0:b1:6c:81:31:4e:20:fe:18:40:75:
                    7f:f5:24:8d:d9:d4:30:27:a0:82:4e:dd:a8:8a:a2:
                    28:12:ab:96:08:71:c6:0b:fd:7e:ec:95:07:af:b4:
                    21:4c:1c:2a:64:6a:ef:3b:97:36:2d:bd:27:01:90:
                    2e:69:c5:e6:31:5a:77:41:76:0f:dc:5d:28:fd:e2:
                    1f:41:9a:72:35:1e:9a:e8:fd:eb:d3:c7:a2:3d:79:
                    df:d8:06:05:46:57:69:64:e8:74:17:81:89:57:21:
                    fa:03:9d:26:49:6f:e3:ea:43:a0:46:d9:9d:fe:4c:
                    46:c4:8b:64:c1:5a:83:6f:d5:16:50:e4:b9:18:4b:
                    a1:5b:f8:84:a0:b3:50:b5:b8:fc:2c:36:92:a0:a0:
                    79:68:52:d2:73:43:80:dc:ab:2b:c5:f7:14:bf:a1:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:38:CE:68:53:67:C3:F9:41:80:4D:45:7F:CA:D4:AE:5A:3F:CB:F2
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:25:2b:08:00:c4:1d:54:4c:b5:fa:0c:9b:2d:ec:58:5f:e4:
         78:30:ce:6e:53:1b:39:f3:e7:f1:d7:94:ca:96:2d:da:d2:6f:
         9b:55:31:85:37:fc:26:54:09:74:be:b9:35:40:fb:f6:1b:b3:
         14:3e:f1:be:3d:98:39:06:36:e1:82:83:0d:4d:e0:01:03:6f:
         2c:9b:a8:d3:7a:a8:4b:60:a8:bd:3c:cd:7c:3c:d0:fe:aa:13:
         72:50:fe:fc:eb:3a:e8:77:e2:ca:62:48:a4:0d:1d:67:41:d7:
         ce:62:72:a0:34:5e:f7:00:5f:11:68:47:a5:52:7e:17:f6:dd:
         38:90:5f:d1:19:a7:a4:04:9e:04:58:97:75:cb:11:96:8b:a2:
         80:7d:f2:e2:c2:b1:f7:e9:b3:9d:b4:37:18:fb:7d:4f:7e:52:
         bd:e9:b9:e4:3c:3a:d4:dc:2b:75:af:44:cc:8d:01:44:15:64:
         00:cd:9b:d8:8e:e5:4d:b5:13:ee:35:8d:55:ee:5e:f6:fe:5d:
         b4:f4:f7:76:22:25:a6:51:7a:7a:57:5f:8d:44:4b:4e:3c:4c:
         df:9d:5e:0f:33:0f:8d:9c:9b:d4:00:f2:0f:74:ad:a5:4c:f8:
         0f:33:c0:09:31:2c:19:08:05:8c:6d:58:35:39:1f:57:84:76:
         86:c1:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:04:13 2026 by rpki-client