This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
File:                     CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json)
Hash identifier:          Y4jfhOXYhJZDFZ7EtUgbd7gANz8+8YOze/6qddwyKDg=
Subject key identifier:   AD:20:AA:A9:57:E4:7E:C0:73:27:70:15:D2:A6:2D:75:94:1D:FB:9B
Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D
Certificate issuer:       /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D
Certificate serial:       0C26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
Manifest number:          0C21
Signing time:             Sat 24 Jan 2026 18:21:20 +0000
Manifest this update:     Sat 24 Jan 2026 18:21:20 +0000
Manifest next update:     Sat 31 Jan 2026 18:21:20 +0000
Files and hashes:         1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: ZAIXMEPr+UxFTHihBjOMeVQJAmzTQ7G3VWFVi5Ruogk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl
                          rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3110 (0xc26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D
        Validity
            Not Before: Jan 24 18:21:20 2026 GMT
            Not After : Jan 31 18:21:20 2026 GMT
        Subject: CN=69750da0-ee62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:55:d1:74:ae:6d:7b:ec:6e:d7:64:79:2c:
                    23:dc:bc:10:62:8f:8b:4f:4a:e3:64:a2:46:b4:45:
                    dd:44:73:90:d7:a6:f1:b0:9e:75:d3:fb:7f:33:f2:
                    b2:0f:b9:d9:36:75:d5:ca:b8:d5:e5:5a:cd:46:0e:
                    92:a9:0d:d8:6c:b1:0e:46:26:dd:94:d8:16:f7:13:
                    20:85:c2:b7:b0:99:dc:ee:cd:56:12:68:fe:18:e6:
                    94:d9:87:ac:09:40:6a:02:a9:9c:b8:06:d8:1b:eb:
                    a3:8f:ef:df:52:23:9b:69:34:e8:7c:a7:52:d0:3d:
                    42:6f:c5:c8:13:94:1d:dc:ed:0f:9c:dd:93:d7:52:
                    7a:68:42:4c:73:b4:89:28:46:2e:95:5f:b1:26:4a:
                    fc:8b:ed:53:b4:5b:8a:4e:df:6d:ab:8f:9b:91:82:
                    a7:70:36:22:c1:16:47:77:b1:1b:6d:a9:fc:bc:5e:
                    12:15:8f:a7:7d:7f:90:4c:e9:46:46:92:05:83:92:
                    ae:35:08:fe:ea:72:61:e4:66:43:94:73:90:0d:3b:
                    fc:f4:b0:24:7f:ed:70:05:4b:6b:5d:02:65:2b:09:
                    d8:82:07:98:84:7c:93:18:6e:59:83:dd:51:38:01:
                    3a:3f:bc:5a:ae:93:e0:26:37:2e:cc:9b:bd:52:46:
                    a9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:20:AA:A9:57:E4:7E:C0:73:27:70:15:D2:A6:2D:75:94:1D:FB:9B
            X509v3 Authority Key Identifier:
                keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:54:67:aa:fc:3b:da:cd:1b:ea:97:4b:ea:40:a1:a3:5f:
         15:63:54:bc:ad:ad:5f:13:5f:1d:a6:68:32:30:af:a4:66:87:
         32:06:6b:ef:80:26:49:ac:71:5f:13:bf:0f:3a:6f:14:18:bf:
         38:3a:51:40:5b:c8:c5:08:64:56:c9:5c:7b:13:be:1e:ce:1f:
         d9:cc:e6:7c:78:1b:c2:e4:32:9e:c3:4d:03:21:75:e0:24:5d:
         b8:20:ae:28:d8:d9:20:1e:8e:2a:a9:87:27:de:29:49:46:1a:
         da:e2:2d:2f:c9:24:e9:5f:0d:e1:f2:97:5f:47:73:f0:3b:03:
         26:45:a2:ca:c8:d4:48:a7:ec:37:7c:ec:69:83:4d:a9:93:d7:
         a2:16:05:53:ec:99:01:be:5f:8b:b9:3a:8d:a0:6e:14:91:fc:
         c5:06:1e:01:43:d2:e3:8e:54:56:e6:9a:1e:ff:f0:9d:a6:28:
         f5:c2:52:14:52:55:5e:93:b4:0b:2f:8b:de:3c:ba:32:fc:90:
         3a:59:28:09:b8:7d:bb:1b:2f:47:50:13:d5:a7:f0:42:e9:dc:
         d9:59:32:fe:80:5d:ab:de:19:a4:44:c5:e8:50:cd:b4:9e:49:
         ed:b8:a9:76:7c:d7:fe:8b:18:42:43:18:90:61:27:cc:4a:18:
         36:c5:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:47 2026 by rpki-client