This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File:                     gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier:          mReydKlEHXKLADmwydPxaoV3kYVLIGPyU+zhqy0wwiM=
Subject key identifier:   04:A6:FD:37:42:13:1F:8A:D3:2C:3E:D7:1F:3E:07:37:D5:B2:45:4E
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       0490
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number:          0467
Signing time:             Sat 24 Jan 2026 23:25:45 +0000
Manifest this update:     Sat 24 Jan 2026 23:25:45 +0000
Manifest next update:     Sat 31 Jan 2026 23:25:45 +0000
Files and hashes:         1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: uMhTrJ5OAPgR4h5ZZflJOHz+ZnpwzRaIX7YgPdo7wX0=)
                          2: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 4nZdHogouXv845c2l3vfkGTuWxNMa8pAfMwGWm9kiHw=)
                          3: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: nTBaw0rGVih7H0eMNeUxYSZWJEjBLwFwXSTskNS1M34=)
                          4: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: lojbrXlAbJoktTwfX33XLdufJ12kkKQ5GKXYlfuRCPs=)
                          5: A5D75708E07111ED9601E941C4F9AE02.roa (hash: T8SCzZDhPByBJIpznoraQVY/oHtUVPl/FFL0kEBzTiU=)
                          6: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: OgDcSpfZCaRldmBrtsqxGYkV57RYdOEs5Zd3oOYd/XU=)
                          7: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: auW4UnHxJ31+muxSOzUSAXH6xyqbP7eemMf3Mu9GQdY=)
                          8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: vx+toULPOCZ0nASP5Ye7Mi6PO9RJnf/5+aW7CpW+qSo=)
                          9: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: dOvAjf7RAVetavYFS5Luk51Mj5sbART3WqfDlwnlFcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Jan 24 23:25:45 2026 GMT
            Not After : Jan 31 23:25:45 2026 GMT
        Subject: CN=697554f9-d1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:61:0c:5d:b8:61:99:d2:39:22:d2:b9:cf:
                    5a:3a:6d:87:61:3f:b7:18:ff:72:47:f1:af:49:ba:
                    40:33:bf:50:d5:0c:d2:b3:03:50:77:bc:19:a0:0d:
                    27:17:c6:57:fc:f7:6f:8a:b4:1b:fa:28:dc:09:3f:
                    c5:bd:05:65:20:e6:0a:e2:5a:22:62:97:a0:43:30:
                    89:c5:81:a0:8d:57:c1:54:a1:49:5b:43:44:a2:c9:
                    00:4d:be:e2:b1:88:05:d1:83:7b:91:f8:9d:3e:73:
                    a9:3f:1e:f2:69:cf:0b:c7:c7:04:b4:9b:73:07:4c:
                    1b:b8:02:0b:9b:d5:50:b9:5e:e1:7b:ed:aa:ee:89:
                    e8:f4:0f:7e:94:0c:f9:70:51:ea:cf:be:83:70:de:
                    8e:65:07:fb:dd:b0:49:28:90:b0:59:22:e5:ed:bd:
                    40:e4:66:2a:2c:ea:12:5d:61:1d:5e:d8:18:ce:40:
                    48:61:42:f7:13:98:a2:f1:2d:e0:37:22:ef:50:01:
                    98:3b:19:f4:f3:f9:73:a7:84:b2:aa:38:a3:c4:31:
                    1f:62:8b:51:06:39:d2:b0:e6:6a:25:e2:d6:7c:60:
                    fa:67:7b:35:c6:ce:93:d1:b5:8c:82:c5:cf:c7:34:
                    92:db:54:12:1d:d7:bc:95:3e:35:87:b4:3e:ba:1b:
                    fb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A6:FD:37:42:13:1F:8A:D3:2C:3E:D7:1F:3E:07:37:D5:B2:45:4E
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5b:c9:e3:e4:7b:d5:e9:27:17:d3:71:06:b3:92:37:ea:44:
         84:9e:78:6d:44:c9:2c:c6:d3:70:eb:bf:2b:13:5d:c3:45:51:
         63:ad:6f:25:d9:3c:2d:c0:ff:9c:b5:b8:59:3c:56:bd:45:28:
         32:01:f3:d0:0a:7d:a8:49:46:71:c6:63:53:c4:fe:47:97:26:
         14:f2:0f:66:51:02:a4:7c:ef:b5:e2:e0:88:2f:26:98:17:14:
         09:0c:f3:41:45:1f:db:7f:f8:7d:8d:70:1e:c9:e6:59:12:d3:
         42:c5:1a:60:0b:95:9c:47:44:f7:93:16:70:39:8d:73:94:f2:
         4b:32:6c:95:10:b3:b4:bd:71:47:96:aa:d3:2e:53:29:6a:a7:
         24:46:fe:84:37:03:eb:d1:d1:81:c0:e5:ef:5b:d5:cf:a3:c5:
         7c:05:bf:89:f3:1d:ee:5d:fe:2b:a7:69:5a:20:88:a3:bb:1b:
         36:9e:b1:71:f1:f0:57:4e:a9:d9:9b:ca:1a:a5:27:12:30:91:
         b0:71:a8:aa:44:e4:29:2e:96:47:62:af:0b:ff:59:8b:68:e2:
         9a:a0:61:b3:b3:95:2b:d2:f3:bd:3e:39:2e:b5:44:a0:a1:31:
         ff:15:10:9a:64:09:1e:b1:c6:34:e1:07:d9:ec:81:95:66:69:
         18:39:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:17 2026 by rpki-client