This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
File:                     gJt-bd3kLwYnhD21n6Qa-n87fDs.mft (raw, json)
Hash identifier:          PeN3uEKLej3ntb1T7BgZANNiHh0LCmKHkrArwaSrCbI=
Subject key identifier:   A5:E5:CC:4E:A1:25:D2:3B:8E:A8:D3:71:9E:37:57:AA:D1:B0:9F:D6
Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B
Certificate issuer:       /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
Certificate serial:       081B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
Manifest number:          0815
Signing time:             Sat 24 Jan 2026 20:21:11 +0000
Manifest this update:     Sat 24 Jan 2026 20:21:11 +0000
Manifest next update:     Sat 31 Jan 2026 20:21:11 +0000
Files and hashes:         1: gJt-bd3kLwYnhD21n6Qa-n87fDs.crl (hash: Lvfi7Ujp7wb4tCsa+t0ho81CEpgf/LO7kATKNCugTd4=)
                          2: E331E83206CD11EBA6A91612C4F9AE02.roa (hash: ClScTJuNUI3ehn5b9ACaV/F/3LpPsKfynlYEv83kYE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl
                          rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075 (0x81b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EF96, serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
        Validity
            Not Before: Jan 24 20:21:11 2026 GMT
            Not After : Jan 31 20:21:11 2026 GMT
        Subject: CN=697529b7-ca1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:0a:d0:1f:70:26:c9:40:19:6d:78:e6:2a:
                    47:22:60:4b:72:e2:a2:db:7b:b8:34:ff:09:ba:4b:
                    a2:44:ff:70:f3:ab:ec:a1:c6:d4:0a:65:87:32:07:
                    4b:6c:63:be:97:33:87:b1:5e:7d:c9:bb:f4:c2:a7:
                    87:30:b5:f9:66:8f:9e:5c:be:09:b8:63:da:91:fd:
                    93:60:10:5e:59:a5:ce:29:91:b3:93:de:04:17:1d:
                    65:ec:6f:6a:71:26:ef:94:07:62:03:22:37:d5:d8:
                    0d:d3:d5:04:38:f9:f5:48:67:ab:36:68:79:8f:39:
                    98:ce:e4:99:ec:46:fc:29:4f:82:2a:4e:af:12:f4:
                    b6:87:08:8c:a8:22:47:e9:99:85:18:f6:80:13:1a:
                    1c:37:33:ec:98:5b:a9:eb:d4:27:e4:3f:ca:52:46:
                    2b:2c:80:63:8c:8f:65:9e:6a:1d:be:1c:18:54:e9:
                    4e:64:dc:a8:9e:3b:4f:72:f6:af:3f:2d:3c:a9:46:
                    1a:53:7f:39:2a:a4:73:2e:ed:17:2f:df:77:f5:d4:
                    b0:0e:dd:a8:42:4d:63:1c:7e:1a:59:b6:73:df:58:
                    38:31:eb:87:d7:e1:84:98:90:39:f7:e8:f8:0b:92:
                    f6:55:b2:08:cf:55:3b:ba:11:23:39:52:fb:e4:3d:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E5:CC:4E:A1:25:D2:3B:8E:A8:D3:71:9E:37:57:AA:D1:B0:9F:D6
            X509v3 Authority Key Identifier:
                keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:27:7d:12:35:36:8d:d6:da:d1:bb:71:20:5d:52:76:37:c9:
         87:7a:94:3d:43:9b:a2:22:06:15:f8:04:76:10:4c:be:48:6f:
         7c:1d:af:09:dc:50:eb:a6:17:c3:b9:21:d6:8b:c5:54:d7:86:
         97:d7:fb:d1:30:11:89:90:db:21:3b:93:2f:4e:cb:cc:bb:77:
         3d:a5:57:b7:bf:8b:29:fe:5a:07:bc:22:74:c3:23:69:a7:03:
         5e:02:e8:3e:92:42:b5:8c:aa:45:b8:68:a9:d7:69:c9:93:51:
         03:e5:37:30:8c:77:74:14:34:9f:51:22:c3:c9:89:35:23:c8:
         45:d6:f2:f2:fb:35:19:46:f9:88:6a:88:29:bb:5d:6b:1f:ac:
         35:e9:b4:a1:f4:53:70:c1:b7:a2:56:b3:0a:fa:67:6c:39:30:
         af:a9:73:9f:9e:63:17:8b:84:56:e5:d6:c9:c2:5c:8b:90:8b:
         e2:0b:b0:59:bc:65:bd:6d:08:10:ff:70:2f:9d:a7:51:9f:f4:
         cc:24:a5:c2:a0:49:a1:db:8a:99:d1:b6:3f:48:20:bb:13:0e:
         65:7c:48:d5:fe:b1:42:9e:92:8c:f2:1e:f6:8a:cf:7c:3a:ee:
         3a:38:fd:c6:eb:fa:43:3d:fa:4d:8e:8b:40:99:9c:8f:e3:b6:
         0f:9f:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:52:47 2026 by rpki-client