This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
File:                     G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft (raw, json)
Hash identifier:          9lMz/FjRHMZulgVVV7Mo6Qa3iTynEHikLR3h42mWMfg=
Subject key identifier:   44:7B:0D:4E:84:C6:5B:55:10:5E:27:EB:2A:36:5B:46:60:CA:61:78
Authority key identifier: 1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4
Certificate issuer:       /CN=A918770D/serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4
Certificate serial:       1C95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
Manifest number:          1C87
Signing time:             Sat 24 Jan 2026 15:58:35 +0000
Manifest this update:     Sat 24 Jan 2026 15:58:35 +0000
Manifest next update:     Sat 31 Jan 2026 15:58:35 +0000
Files and hashes:         1: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl (hash: Bkv8tknvxwX9yVim0/7oyhsayVRVdcGwrJ5+lCq2kW8=)
                          2: 6C5A7912ED2311E680140D19C4F9AE02.roa (hash: w+6iR/F583nwtLejN1ZMM4mivM5f0eBnZv1CsfpH8hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7317 (0x1c95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918770D, serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4
        Validity
            Not Before: Jan 24 15:58:35 2026 GMT
            Not After : Jan 31 15:58:35 2026 GMT
        Subject: CN=6974ec2b-2060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:6b:5e:b7:65:36:13:b9:7e:62:32:9c:ad:
                    35:af:ea:7d:87:eb:8c:54:71:ec:3e:66:5f:0f:1f:
                    11:69:4d:b1:e3:71:93:71:4d:63:95:6b:0e:df:52:
                    e0:9a:4f:10:f9:47:64:74:eb:9a:84:d2:ee:42:2d:
                    31:25:cc:bf:91:2f:0d:1e:0d:c7:1f:41:be:aa:6f:
                    29:58:d6:22:6e:d0:01:a2:de:5d:5a:1a:9b:13:bc:
                    70:b9:cf:5c:fc:86:2f:b2:b0:9f:e2:13:c2:b6:36:
                    4d:ab:db:18:7e:1e:07:51:a4:08:fa:72:d3:38:3e:
                    55:db:30:f1:d1:84:50:a8:01:8a:c5:f5:aa:21:ed:
                    ae:91:2b:d7:5b:7c:4c:c3:7b:dd:5b:d3:17:85:de:
                    79:7d:cf:89:bf:2c:3a:fa:60:05:3a:5e:14:c7:fd:
                    a3:0a:15:48:15:da:dc:d3:72:84:04:60:cf:6b:73:
                    17:52:ba:a2:23:46:b4:ef:a8:28:d9:b5:67:d9:12:
                    7d:dc:1f:d1:29:83:ea:2c:ea:0c:00:4f:e7:db:6f:
                    e5:14:5b:08:06:f7:8b:66:80:d1:46:23:06:7d:cc:
                    70:41:48:57:47:b3:d4:9e:61:75:5a:7e:8d:04:df:
                    d9:b5:9a:10:1e:2d:56:72:64:25:b9:fa:06:d7:c1:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7B:0D:4E:84:C6:5B:55:10:5E:27:EB:2A:36:5B:46:60:CA:61:78
            X509v3 Authority Key Identifier:
                keyid:1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:ac:87:fc:a7:63:91:af:ce:30:0c:8b:15:53:8e:90:cd:
         ee:ad:2a:8c:b3:9c:61:87:e0:bf:44:86:a9:a8:e7:0a:df:f9:
         da:2f:a9:f3:8c:5e:34:9e:79:04:47:ef:d5:aa:c3:74:b4:5a:
         38:64:93:20:05:37:ff:3e:41:64:79:5d:d3:7b:01:fc:27:47:
         80:80:30:ef:58:4f:d7:c2:a6:9d:ca:2a:a1:8b:19:a0:99:0d:
         b9:14:6d:99:eb:95:99:39:9b:b2:ec:c1:61:aa:fe:d8:dd:ff:
         b0:d2:18:88:19:a8:70:10:66:f2:ab:0b:f7:61:1b:e7:05:0f:
         1e:9c:c4:83:d8:e8:b2:83:1d:32:26:38:b8:ae:3a:ac:2f:0d:
         84:28:76:62:11:63:ce:35:88:10:08:e3:dc:4b:30:67:d1:69:
         f5:c7:f6:ef:f5:79:39:8c:83:88:a3:52:c2:fd:7f:37:f7:16:
         c8:ee:55:90:fd:20:16:f0:45:ff:4b:74:c8:cf:4f:fc:a6:88:
         06:15:04:7e:39:d0:9f:c1:0a:30:94:e3:d1:e9:6a:f6:90:da:
         f0:cb:c1:0c:cb:17:3c:fe:dc:5e:20:6e:4a:75:77:d0:69:1f:
         57:11:ba:de:1a:99:d9:48:27:77:85:4f:cd:22:4e:2e:77:15:
         0e:ab:99:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:16 2026 by rpki-client