This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
File:                     GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json)
Hash identifier:          5vQ2TmB7cqLZoyyP8SDrTmUJgxs/DgKGnSGXIiuBCJs=
Subject key identifier:   BE:F2:B0:00:7B:13:4A:D9:34:C1:EA:4B:26:16:D6:87:C4:75:67:80
Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
Certificate issuer:       /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Certificate serial:       09F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
Manifest number:          09E4
Signing time:             Sat 24 Jan 2026 19:21:29 +0000
Manifest this update:     Sat 24 Jan 2026 19:21:28 +0000
Manifest next update:     Sat 31 Jan 2026 19:21:28 +0000
Files and hashes:         1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: bQ8lM2AXuL66GJTSK/8oVjrK8evPlJ0m+bvw9G61uSU=)
                          2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: F610C7Ym+IbTxaB7/QFjiGQSnmA/MEfTbDdc0n6x2y4=)
                          3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: AS8hUi479g1JOMhqd/DGudZL1BV4/ri0MrfNsHx+xyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
                          rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2548 (0x9f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
        Validity
            Not Before: Jan 24 19:21:28 2026 GMT
            Not After : Jan 31 19:21:28 2026 GMT
        Subject: CN=69751bb9-f634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:82:a7:f2:3f:32:49:ff:26:83:00:17:eb:
                    f2:ec:31:48:46:26:02:cb:b8:3a:04:0e:ab:ce:2f:
                    ca:79:52:99:82:a8:3c:05:de:91:f2:44:2d:fd:e5:
                    0b:c9:e5:f1:73:13:b1:e9:31:1f:d1:55:ae:41:f1:
                    bb:0b:be:50:d6:87:6c:d6:32:a7:d9:3f:8c:22:92:
                    d9:b4:34:e8:ce:00:85:cb:78:9d:32:0b:ee:75:3d:
                    35:f2:a1:9b:aa:aa:ad:f2:be:28:8d:fb:c3:1c:4d:
                    1a:7a:cd:41:f7:30:95:8c:43:08:4e:2b:6c:67:26:
                    ee:a0:c5:96:9e:22:75:59:3e:04:ef:5a:10:a4:f4:
                    28:ce:16:1b:4c:0f:a7:9f:59:53:cc:04:87:0d:60:
                    e2:17:56:b2:4a:be:44:3a:03:60:bc:ce:ae:66:f6:
                    b4:e2:8b:cd:32:12:b4:6d:16:43:5b:da:01:95:c9:
                    4b:b9:9e:78:0e:3b:6c:81:aa:05:67:92:f2:da:36:
                    19:7e:16:18:d8:20:60:ae:f4:c9:57:1b:06:ef:0a:
                    a4:e1:c8:95:c9:c7:73:85:98:d7:98:3f:61:9c:d5:
                    bd:32:aa:89:ae:34:a6:53:15:05:41:51:09:56:f9:
                    83:a6:e3:58:84:96:7c:0b:cc:78:13:c2:2b:d8:db:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F2:B0:00:7B:13:4A:D9:34:C1:EA:4B:26:16:D6:87:C4:75:67:80
            X509v3 Authority Key Identifier:
                keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d0:5e:af:ea:bb:da:49:c4:6d:e4:3d:65:70:de:55:5b:f2:
         9b:7c:fe:91:08:0a:b1:34:1b:53:95:54:4d:d3:a9:c6:42:06:
         29:2f:5f:54:79:18:f3:e6:2b:38:e8:ab:63:23:41:cd:c3:f4:
         da:78:fd:e9:59:7d:92:60:5a:6c:40:53:d1:f1:5a:32:e9:05:
         53:25:c4:ad:bb:f6:d5:86:a6:fb:26:de:e9:be:8e:e0:55:ba:
         39:97:52:f8:9c:f0:8b:52:70:83:8a:03:77:b2:1e:54:1f:16:
         11:0e:d8:d3:c3:99:26:0c:a1:a5:e5:a1:80:e9:e1:c5:16:88:
         ef:52:a7:df:36:d4:81:75:41:50:58:31:0c:7d:6c:f7:cb:b2:
         05:de:c2:0b:c4:68:59:99:5c:26:84:43:f2:cd:f8:fb:24:83:
         c4:24:1a:f9:01:f6:5c:b1:7b:99:45:3c:18:ed:a2:e4:9c:0d:
         8b:ef:13:11:c9:cf:25:91:dd:17:1a:3c:88:82:82:fc:b3:af:
         fd:5e:40:93:14:0b:05:3f:9c:cc:8f:d4:e3:0a:ce:e1:57:76:
         e9:18:01:af:b2:83:0a:0e:2f:4a:b2:f6:02:1f:9d:86:a0:c5:
         58:79:f6:ba:0f:2f:81:c9:bb:cc:89:22:9f:d5:5c:f5:44:5c:
         61:c4:1e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:12 2026 by rpki-client