This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
File:                     GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json)
Hash identifier:          tVHZNol8ai/zYuDFZ1eO8KM4yGOyVl/e5i0WgluLghQ=
Subject key identifier:   75:6E:96:E4:80:46:F5:C7:59:99:B3:5F:8E:99:4C:1D:81:8A:04:0E
Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
Certificate issuer:       /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
Manifest number:          0250
Signing time:             Sun 25 Jan 2026 01:01:57 +0000
Manifest this update:     Sun 25 Jan 2026 01:01:56 +0000
Manifest next update:     Sun 01 Feb 2026 01:01:56 +0000
Files and hashes:         1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: x5SDfLwULc4/OrYbs1xtP/CRFhYfkzJUll+uJqd1odo=)
                          2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: xVQRlc0PkJ4VXTg8SHxKZBLplXrS1P4Dp3rhgyw72w4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
                          rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
        Validity
            Not Before: Jan 25 01:01:56 2026 GMT
            Not After : Feb  1 01:01:56 2026 GMT
        Subject: CN=69756b85-4c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:9a:9a:9d:87:90:3c:e2:f3:02:10:49:ce:
                    fe:b0:cb:fe:8a:cc:f3:17:2e:31:db:b5:15:96:31:
                    04:31:46:e0:3c:15:68:58:01:ad:6e:48:e6:bc:4b:
                    b8:e2:de:e8:e8:15:7b:1a:0d:59:8c:d7:6c:ce:16:
                    48:08:ba:dd:52:93:56:63:a2:c7:9c:f3:56:96:1c:
                    82:cc:92:bc:d1:a8:96:92:e9:36:e9:47:34:ef:37:
                    c9:e1:2b:99:2f:3a:35:80:e7:01:c2:e3:8f:02:e3:
                    1a:a6:9b:ba:85:f6:0a:1a:fc:ee:94:2b:4d:85:6e:
                    8f:4c:75:39:0e:ce:fa:23:01:df:d4:74:bf:45:ca:
                    2a:14:20:6f:a1:de:6e:ba:e2:2d:ee:74:18:df:4f:
                    3f:13:59:0a:17:04:26:6e:36:a9:9b:3b:6e:f6:d2:
                    1b:3f:6d:56:fb:d1:d6:0d:0b:7f:f7:76:93:49:2f:
                    6b:5b:aa:38:4b:be:a3:08:74:da:18:6a:eb:b4:05:
                    0d:f3:d8:71:1e:b0:e0:48:27:ab:46:40:41:13:34:
                    da:3b:d3:2c:4a:34:3b:b6:3e:ae:b0:12:46:df:ba:
                    64:64:d1:be:43:7a:8f:35:05:24:0f:e9:0c:bd:85:
                    20:6e:b0:fd:b7:78:2e:e1:96:28:62:e0:3c:8c:0e:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6E:96:E4:80:46:F5:C7:59:99:B3:5F:8E:99:4C:1D:81:8A:04:0E
            X509v3 Authority Key Identifier:
                keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:24:99:85:18:a1:b0:d1:4a:88:f5:07:a8:78:de:31:5b:a8:
         d0:aa:f9:0a:95:7b:b1:bf:ea:5d:f5:a9:b2:ef:02:ed:80:50:
         6e:82:69:44:56:5c:52:92:11:a7:3d:80:ef:e0:af:59:51:a0:
         97:f7:4f:dd:db:67:da:ba:a3:00:0b:04:ba:63:1b:4a:85:83:
         19:61:7c:53:59:2c:60:9c:d1:cc:32:ad:7b:4f:48:e1:3a:f2:
         7b:48:f0:eb:c1:2c:d6:09:0f:d9:58:69:e2:45:08:e9:2c:7b:
         d0:12:a4:8f:67:2c:6a:7a:44:f8:f1:d5:3a:7a:f8:ff:bf:3f:
         43:d5:41:28:8e:df:36:c0:8a:c0:17:93:ef:23:2a:f6:3d:4e:
         8c:82:7b:91:51:bb:89:76:db:ad:ed:f5:35:d0:45:1d:65:4e:
         c6:73:c8:24:5f:e2:ba:13:a0:b7:89:0f:dd:9d:f1:16:26:55:
         5d:6f:7c:6a:47:79:7b:f2:28:eb:76:0e:31:9f:7d:a8:ed:18:
         71:95:14:77:0a:56:e8:5f:5d:00:f4:47:e1:25:45:2a:3e:bf:
         6b:17:cf:00:ce:9c:f7:ef:46:e2:08:bf:93:32:45:02:74:be:
         bc:ad:06:d0:15:01:fe:31:d6:cf:3d:1d:d8:5c:fc:50:12:fb:
         35:9f:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:21 2026 by rpki-client