This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
File:                     Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json)
Hash identifier:          qM0/GoaN878MKTTEfleMCzXJ9gbLyGqPPT9p+a7ALM4=
Subject key identifier:   FE:D8:A1:78:7E:F3:E4:8D:9A:B1:9B:69:4A:B5:A4:12:DC:E0:1E:A4
Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
Certificate issuer:       /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
Manifest number:          020A
Signing time:             Sun 25 Jan 2026 01:39:34 +0000
Manifest this update:     Sun 25 Jan 2026 01:39:34 +0000
Manifest next update:     Sun 01 Feb 2026 01:39:34 +0000
Files and hashes:         1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: RvxrQczlUlSu/TKWB9F8fYcYUY9BC84fdPrD+z7eZLg=)
                          2: 952F87FAEBDA11F082D0705C6C6F56BC.roa (hash: io0ecjEN2RzxSv5iuJw4fnOPjwrnvut5d2KzE1GcZUc=)
                          3: 59ADC606EBDA11F0868F86546C6F56BC.roa (hash: ONcczDIIfK3yhm1H64UIKDcxoQLX5CkoZ0+RbpZl65o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
                          rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
        Validity
            Not Before: Jan 25 01:39:34 2026 GMT
            Not After : Feb  1 01:39:34 2026 GMT
        Subject: CN=69757456-b30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:32:98:7b:76:e7:1e:7e:40:2c:b1:85:22:eb:
                    71:f6:89:f9:c5:1b:22:85:cc:67:ff:23:3e:d2:58:
                    0d:26:20:b2:fb:1d:80:76:24:d0:f4:57:64:c3:ae:
                    7e:6d:4a:fd:d6:49:3b:1a:75:91:b9:58:5f:bb:b3:
                    30:5b:c1:e7:9d:f9:cd:24:bd:9d:78:c0:7c:f9:3f:
                    6c:c7:27:48:fe:97:19:55:20:03:71:65:cc:7e:59:
                    95:95:3b:4d:01:cb:26:f3:6b:5d:57:1d:f9:5c:2d:
                    b5:23:be:f6:b2:d7:68:30:96:35:06:7d:94:92:44:
                    3d:79:e2:90:5a:c5:19:bb:c0:ce:ef:5b:ad:b3:af:
                    bb:27:4a:39:28:76:d7:b8:b5:af:f3:26:79:e6:a7:
                    41:30:4a:19:74:72:20:86:3c:5f:b5:13:66:4d:98:
                    47:d2:96:ce:95:96:20:86:76:09:7a:fd:83:2b:99:
                    68:a7:6c:01:d5:cb:66:bf:ab:7b:b4:7a:60:3f:08:
                    49:a2:3e:70:63:7c:ca:36:d6:76:d6:f1:31:1c:00:
                    42:f2:dc:3c:a8:e1:26:96:89:fe:3f:0e:cb:38:88:
                    e7:de:a7:99:b9:22:e1:29:82:a1:f7:6d:d5:14:5f:
                    52:6d:4e:22:ea:ab:f0:22:e3:72:be:03:e1:52:db:
                    e2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D8:A1:78:7E:F3:E4:8D:9A:B1:9B:69:4A:B5:A4:12:DC:E0:1E:A4
            X509v3 Authority Key Identifier:
                keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9a:73:c2:d9:ff:e7:fe:87:5e:06:f6:22:a7:d5:e9:bd:e4:
         da:d4:ff:06:8a:c6:c3:90:c9:99:63:86:51:9a:70:1b:f3:c6:
         2b:9e:b4:c7:75:a6:e0:ba:9e:6c:44:cf:14:85:77:fd:ff:e0:
         95:de:65:5b:d9:68:1d:47:15:9f:18:91:b3:80:97:fc:08:3d:
         ab:28:f8:1f:32:53:d4:cd:61:bb:09:9d:1a:90:05:5c:cc:3d:
         84:f4:cd:3d:5f:66:ec:cc:3a:d2:8a:f4:59:d8:39:e8:87:03:
         f3:4d:ff:7e:0f:08:b6:db:d6:a0:70:bf:89:4e:0f:d3:b7:21:
         69:28:14:20:42:84:35:27:6f:d5:e1:17:01:f7:08:9b:32:c2:
         d3:ab:fc:c6:e3:a0:51:d4:c4:c8:62:f2:bf:a6:a4:0a:cf:f2:
         4f:e1:46:c4:52:6f:36:29:07:0e:ab:e2:da:aa:4a:e9:b6:7a:
         e9:e9:c4:cb:84:0b:c0:43:d0:2f:7b:dc:97:4b:8d:05:75:13:
         aa:0e:f7:10:90:b8:93:d5:89:0d:fd:30:8b:4a:f1:c4:cd:29:
         5d:a7:11:c4:00:0f:0e:35:75:a2:ba:97:63:20:f7:92:62:23:
         cc:86:03:55:38:fc:4a:b0:41:17:a6:27:88:7e:5b:cd:5a:a3:
         62:01:bf:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw
REQ0OTMwQTQwHhcNMjYwMTI1MDEzOTM0WhcNMjYwMjAxMDEzOTM0WjAYMRYwFAYD
VQQDDA02OTc1NzQ1Ni1iMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgjKYe3bnHn5ALLGFIutx9on5xRsihcxn/yM+0lgNJiCy+x2AdiTQ9Fdkw65+
bUr91kk7GnWRuVhfu7MwW8HnnfnNJL2deMB8+T9sxydI/pcZVSADcWXMflmVlTtN
Acsm82tdVx35XC21I772stdoMJY1Bn2UkkQ9eeKQWsUZu8DO71uts6+7J0o5KHbX
uLWv8yZ55qdBMEoZdHIghjxftRNmTZhH0pbOlZYghnYJev2DK5lop2wB1ctmv6t7
tHpgPwhJoj5wY3zKNtZ21vExHABC8tw8qOEmlon+Pw7LOIjn3qeZuSLhKYKh923V
FF9SbU4i6qvwIuNyvgPhUtvi+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7YoXh+
8+SNmrGbaUq1pBLc4B6kMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC
NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY
MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCmnPC2f/n/odeBvYip9XpveTa1P8GisbDkMmZY4ZRmnAb88YrnrTH
dabgup5sRM8UhXf9/+CV3mVb2WgdRxWfGJGzgJf8CD2rKPgfMlPUzWG7CZ0akAVc
zD2E9M09X2bszDrSivRZ2DnohwPzTf9+Dwi229agcL+JTg/TtyFpKBQgQoQ1J2/V
4RcB9wibMsLTq/zG46BR1MTIYvK/pqQKz/JP4UbEUm82KQcOq+Laqkrptnrp6cTL
hAvAQ9Ave9yXS40FdROqDvcQkLiT1YkN/TCLSvHEzSldpxHEAA8ONXWiupdjIPeS
YiPMhgNVOPxKsEEXpieIflvNWqNiAb8Q
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:27 2026 by rpki-client