This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
File:                     Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json)
Hash identifier:          IfbOuIpjk0iYoNHV3jnBzHZJ+T/qBzwliTjl+XPifM4=
Subject key identifier:   D9:BB:27:F9:54:68:74:20:5C:BD:A7:87:EB:A7:0C:F8:63:04:5E:1A
Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
Certificate issuer:       /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
Manifest number:          C6
Signing time:             Sun 25 Jan 2026 05:06:29 +0000
Manifest this update:     Sun 25 Jan 2026 05:06:28 +0000
Manifest next update:     Sun 01 Feb 2026 05:06:28 +0000
Files and hashes:         1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: E0ohMRrCsmvy8xWH6YlHFbINgPJS5ab1AFk3D2kHoSg=)
                          2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: ItkaXldx6gtahTIjrAXDCkQay4mCRAu8VzlcwRatTFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
                          rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
        Validity
            Not Before: Jan 25 05:06:28 2026 GMT
            Not After : Feb  1 05:06:28 2026 GMT
        Subject: CN=6975a4d4-37a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:0b:ee:28:6e:d4:1c:65:dc:05:30:06:e7:
                    c8:75:fd:37:a6:0b:37:c4:c3:02:c5:9d:36:86:8d:
                    e0:f8:50:b3:76:56:0e:f2:8b:04:98:c3:08:1e:3c:
                    b8:fc:fc:8c:65:54:ce:b3:7d:b2:01:b0:80:0f:87:
                    ad:1d:49:42:62:c0:ba:0b:ee:1e:0e:b8:cc:10:79:
                    1b:8a:eb:6a:ea:5e:79:3b:2e:15:28:1a:da:d5:9b:
                    63:d1:f9:e4:28:71:77:d4:7a:6f:cc:69:a1:6e:af:
                    14:c3:ba:ef:df:99:e0:d4:c2:29:58:71:ad:f9:b9:
                    96:00:2d:37:43:4f:02:17:0f:29:60:a4:b6:3e:d7:
                    2b:5b:a1:69:a5:95:3f:19:00:43:2f:6b:6e:19:80:
                    cc:52:45:2c:30:36:33:25:36:51:3d:75:72:4c:6d:
                    e8:88:21:4e:c7:b3:68:d3:39:c3:34:b3:7c:7f:95:
                    21:32:11:de:33:ce:2a:05:f7:c0:42:67:3b:49:ff:
                    47:aa:26:ce:f4:88:a4:ac:6e:55:4b:e8:c6:7f:9b:
                    05:9b:8f:9a:75:c2:df:6e:bf:6d:72:e0:25:b5:6b:
                    40:67:88:25:85:a9:0a:24:3d:ad:17:bd:b7:54:37:
                    8a:3e:ea:da:28:fb:b3:f9:d2:cc:44:fe:0a:b8:37:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BB:27:F9:54:68:74:20:5C:BD:A7:87:EB:A7:0C:F8:63:04:5E:1A
            X509v3 Authority Key Identifier:
                keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:46:f6:1e:66:26:08:bc:96:3b:e3:06:8f:af:85:33:ae:e2:
         ba:40:29:c0:91:d9:43:75:eb:39:a3:db:1f:40:30:c9:02:54:
         20:82:8a:82:79:98:31:8b:1b:7b:a1:f6:41:25:97:41:13:37:
         c4:50:36:a3:e3:08:0e:3b:f7:18:9e:6e:0e:e7:f0:26:63:d6:
         83:95:d7:38:96:87:b9:a5:b8:70:1f:86:3d:76:08:5c:7e:a9:
         6e:ea:e8:0b:93:6b:77:0b:37:cd:53:e9:e9:a4:ae:62:57:89:
         6a:76:c0:49:b3:97:0d:33:13:25:30:ee:b5:4b:6f:5e:51:b9:
         95:00:1b:02:e0:ae:89:1c:83:7a:c1:8d:0a:0f:45:ae:cd:d2:
         ab:cd:95:c2:c3:da:b1:1d:d7:f0:48:fb:64:10:f8:c4:5b:c0:
         16:59:4b:87:38:9f:38:2a:e0:24:d2:5d:76:92:ce:ed:b3:9b:
         fa:62:9f:3a:e2:76:d1:87:75:4a:cc:63:7e:a8:a2:92:a3:57:
         cf:63:47:87:6d:09:45:ee:12:31:a5:32:79:95:ef:8b:f0:61:
         5c:a7:12:24:24:88:6f:e2:e8:0c:b7:ae:0e:bf:d7:8d:ef:a7:
         08:db:02:23:9c:ba:54:bf:68:7a:70:97:14:9e:5a:6b:08:54:
         9e:74:8a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:09:59 2026 by rpki-client