This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft
File:                     cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft (raw, json)
Hash identifier:          aRmBJbM1jq+nIsZWH9H6z//iPnUO3eGOw185bGyDVfc=
Subject key identifier:   DA:76:8E:BA:6C:F3:6F:52:03:45:42:FE:79:CA:13:01:9D:95:B3:ED
Authority key identifier: 70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4
Certificate issuer:       /CN=A9184684/serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft
Manifest number:          7D
Signing time:             Fri 23 Jan 2026 05:48:55 +0000
Manifest this update:     Fri 23 Jan 2026 05:48:54 +0000
Manifest next update:     Fri 30 Jan 2026 05:48:54 +0000
Files and hashes:         1: cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl (hash: YK40A5KIyMITGVm4csvYfT+HruDk3ZzYOryvDFmEKQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184684, serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4
        Validity
            Not Before: Jan 23 05:48:54 2026 GMT
            Not After : Jan 30 05:48:54 2026 GMT
        Subject: CN=69730bc6-52c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:dd:37:6b:d2:34:6a:fa:c8:80:31:71:4e:b3:
                    cf:8d:ff:05:9e:b2:02:77:87:9c:ae:71:31:4f:f8:
                    c2:c4:82:a1:d4:1b:8f:2a:f5:63:7c:3b:bd:b9:45:
                    29:ee:54:eb:da:ca:3c:59:19:47:f7:56:53:b5:e7:
                    b5:99:6b:5f:5b:ab:e2:71:5e:ee:ec:27:f4:61:45:
                    52:d0:2d:61:2d:cc:e2:3f:a3:8f:a2:33:84:fd:8d:
                    ec:f6:5c:e5:e5:c2:95:56:d4:9d:6e:9d:48:e3:a3:
                    5e:e2:f9:97:07:db:76:6d:dd:70:8b:ba:d1:bb:a8:
                    c1:b1:86:9d:62:da:79:3c:52:1a:f9:f6:02:56:1b:
                    01:a5:42:d5:9c:dc:02:33:2c:34:97:93:5a:92:3b:
                    22:5d:a8:2c:bb:a0:af:47:fc:43:50:30:5c:25:21:
                    37:35:b2:fd:a3:61:3c:24:bb:47:4f:ac:7e:0f:03:
                    ac:15:07:e3:a3:0c:a3:16:ea:f1:7c:8b:5d:81:2a:
                    34:e2:ec:38:07:b4:dd:bb:ad:ec:fe:cd:bf:18:ed:
                    7a:db:85:99:01:2f:06:e4:59:cf:40:f1:51:22:de:
                    b9:29:19:a5:ee:05:cc:84:4b:aa:ce:3c:95:ec:13:
                    9e:8b:4f:20:89:ad:ec:11:85:ec:11:3c:51:57:12:
                    3e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:76:8E:BA:6C:F3:6F:52:03:45:42:FE:79:CA:13:01:9D:95:B3:ED
            X509v3 Authority Key Identifier:
                keyid:70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:87:60:fc:ac:78:23:bb:ae:2a:b6:c5:be:ff:b6:2e:45:bd:
         99:0e:9f:88:72:5d:ba:17:ce:76:34:f2:f4:70:71:08:5d:b0:
         24:a6:69:29:61:fe:e3:8d:71:8c:ae:b2:c9:96:e0:b0:93:0e:
         a7:e9:d6:c0:4c:a1:38:8c:18:f8:64:e2:e8:33:83:f3:76:16:
         70:db:31:7d:6a:f1:21:7c:2e:44:0a:82:07:bf:d6:5d:81:eb:
         38:7a:0c:b5:69:e3:9f:ee:8c:2c:c9:6d:5a:25:34:ec:02:e2:
         95:0f:60:b9:2e:9c:c9:77:fd:59:4a:d0:2d:e5:11:d5:cb:20:
         2c:b9:4a:4a:da:79:78:b0:17:97:f1:c8:5f:bd:4a:4b:1d:73:
         30:ff:ab:e4:3b:d9:de:8e:ce:90:75:0e:d3:9f:8c:e6:00:43:
         cd:8d:6d:38:79:a5:e8:4b:a6:2e:cc:69:d3:fb:f8:c7:85:88:
         3a:3a:41:d5:26:ae:11:95:b6:db:50:65:06:5d:28:98:51:9d:
         27:b7:96:67:54:fc:4a:39:9f:ba:b6:c7:2d:b0:e5:69:a9:50:
         04:a6:3b:51:83:ac:e7:ad:87:79:2f:67:b6:8e:40:ea:e8:90:
         c0:16:0d:65:d9:52:bf:36:a1:42:fc:68:33:1c:55:21:3a:46:
         39:88:d9:0a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4
NDY4NDExMC8GA1UEBRMoNzAwMjA2M0JGMzAyQ0JBNDZGOTI0NUIwNzlBNDlCMTFB
RDk2RUFFNDAeFw0yNjAxMjMwNTQ4NTRaFw0yNjAxMzAwNTQ4NTRaMBgxFjAUBgNV
BAMMDTY5NzMwYmM2LTUyYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDy3Tdr0jRq+siAMXFOs8+N/wWesgJ3h5yucTFP+MLEgqHUG48q9WN8O725RSnu
VOvayjxZGUf3VlO157WZa19bq+JxXu7sJ/RhRVLQLWEtzOI/o4+iM4T9jez2XOXl
wpVW1J1unUjjo17i+ZcH23Zt3XCLutG7qMGxhp1i2nk8Uhr59gJWGwGlQtWc3AIz
LDSXk1qSOyJdqCy7oK9H/ENQMFwlITc1sv2jYTwku0dPrH4PA6wVB+OjDKMW6vF8
i12BKjTi7DgHtN27rez+zb8Y7XrbhZkBLwbkWc9A8VEi3rkpGaXuBcyES6rOPJXs
E56LTyCJrewRhewRPFFXEj43AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2naOumzz
b1IDRUL+ecoTAZ2Vs+0wHwYDVR0jBBgwFoAUcAIGO/MCy6RvkkWweaSbEa2W6uQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0JGQ0FCNUNDMzk4
NjExRjBBQ0M1NTkxNEM0RjlBRTAyL2NBSUdPX01DeTZSdmtrV3dlYVNiRWEyVzZ1
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY0FJR09fTUN5NlJ2a2tXd2VhU2JFYTJXNnVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0
Njg0L0JGQ0FCNUNDMzk4NjExRjBBQ0M1NTkxNEM0RjlBRTAyL2NBSUdPX01DeTZS
dmtrV3dlYVNiRWEyVzZ1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAiHYPyseCO7riq2xb7/ti5FvZkOn4hyXboXznY08vRwcQhdsCSmaSlh
/uONcYyussmW4LCTDqfp1sBMoTiMGPhk4ugzg/N2FnDbMX1q8SF8LkQKgge/1l2B
6zh6DLVp45/ujCzJbVolNOwC4pUPYLkunMl3/VlK0C3lEdXLICy5SkraeXiwF5fx
yF+9SksdczD/q+Q72d6OzpB1DtOfjOYAQ82NbTh5pehLpi7MadP7+MeFiDo6QdUm
rhGVtttQZQZdKJhRnSe3lmdU/Eo5n7q2xy2w5WmpUASmO1GDrOeth3kvZ7aOQOro
kMAWDWXZUr82oUL8aDMcVSE6RjmI2Qo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:27 2026 by rpki-client