This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
File:                     GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json)
Hash identifier:          2Hbh8PHUSjfjTndTSWm51K6Kx8wOVOQfESUbywOl7qk=
Subject key identifier:   82:03:4D:DB:5D:DF:DE:B7:58:9E:DB:7E:48:08:A8:CD:20:46:AE:7E
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Certificate issuer:       /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
Manifest number:          0228
Signing time:             Sun 25 Jan 2026 01:22:16 +0000
Manifest this update:     Sun 25 Jan 2026 01:22:16 +0000
Manifest next update:     Sun 01 Feb 2026 01:22:16 +0000
Files and hashes:         1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: 8q9I+GPn7Dn2CgAU0iHgEuqI8Ct+t0Dx9dXiMvYpMt0=)
                          2: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E=)
                          3: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: EuI+jy3jz6zplStWvLeJaw92baXncm4w2hV/GfKLDMk=)
                          4: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: x5jTQA8XBSMQ8Q+xjjenfP78ItEEc+vCjF2dnXQMxgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
                          rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
        Validity
            Not Before: Jan 25 01:22:16 2026 GMT
            Not After : Feb  1 01:22:16 2026 GMT
        Subject: CN=69757048-b90a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:13:5a:4b:c5:0e:8d:d1:e6:4a:5e:81:db:
                    72:09:26:d2:9d:3c:bb:fa:d9:76:0d:25:9c:c7:a8:
                    e1:b0:d5:11:37:50:b0:5a:47:7f:ae:45:17:7b:ed:
                    e6:59:97:99:67:2c:0e:f3:ce:03:43:d3:5e:94:73:
                    7a:43:9d:83:42:1d:af:50:79:e4:d0:a7:3a:25:ea:
                    20:84:00:f4:c8:08:1b:67:7a:b3:a3:5b:a4:17:79:
                    31:f4:41:ca:b4:df:a2:d6:0c:0d:61:ae:ba:b9:32:
                    a6:f2:d3:f9:73:f9:0b:42:61:39:26:71:4f:f6:31:
                    34:02:3f:b1:d6:ff:ca:8a:67:85:b1:2c:80:fa:38:
                    fb:82:e3:cf:6a:22:a2:e9:8f:9c:63:f3:fd:3f:09:
                    19:2a:7c:f0:8e:df:6f:a0:de:75:b2:b4:06:44:ab:
                    7a:29:72:8c:83:24:77:b8:9e:06:ae:07:00:91:54:
                    89:65:06:37:c2:32:12:68:35:eb:fe:69:37:54:32:
                    7a:b8:42:e7:0e:a8:91:47:b6:d5:60:04:3e:9a:e3:
                    b3:61:73:c5:e6:2d:31:8e:03:eb:9e:d0:aa:54:2e:
                    16:d4:5f:4e:d2:49:a0:64:bb:2f:b7:4e:6d:7f:0f:
                    95:87:4c:e6:98:b4:42:f6:bc:f3:f6:03:23:92:8a:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:03:4D:DB:5D:DF:DE:B7:58:9E:DB:7E:48:08:A8:CD:20:46:AE:7E
            X509v3 Authority Key Identifier:
                keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:37:76:3a:cd:fa:72:ec:fa:f4:ee:ce:ea:ce:d1:e1:e4:1e:
         33:9e:be:51:c6:00:42:8b:98:00:f7:4d:62:80:39:58:02:c3:
         53:55:80:ea:0e:cd:17:de:8c:f2:32:8b:3e:3e:42:f1:f2:55:
         47:32:91:03:8a:44:c4:e7:55:5a:39:9d:a4:ae:85:e1:24:63:
         3a:b0:91:3f:dd:c7:a9:33:4b:1c:d1:94:8d:20:16:d5:4d:fb:
         38:be:fd:79:c7:4d:fb:9a:f5:21:29:d2:3a:fa:be:84:f9:1e:
         80:94:fb:2c:35:a7:c2:ed:11:1c:5e:53:9b:1f:ce:0b:14:3b:
         e2:d0:75:74:81:8b:c6:49:68:c1:c3:6d:d0:f8:f0:17:b5:71:
         76:b0:5a:05:97:e2:9d:f1:f0:97:60:0e:f2:57:ea:26:c3:b0:
         9e:8e:f2:54:5d:9d:e6:98:2e:1f:4c:42:cd:db:9d:d4:1c:14:
         e9:a3:bc:4f:01:91:2c:7c:37:25:3e:12:5b:4b:73:0f:ea:52:
         33:f0:76:64:85:77:e4:1f:e8:03:22:50:2a:19:14:70:d4:43:
         41:ce:9e:83:43:7f:89:2c:8c:be:b6:a2:22:ac:78:23:8a:b1:
         53:4f:a1:c5:d5:84:23:9a:36:d1:b3:63:12:2f:c0:5e:54:80:
         c0:1f:a3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:45 2026 by rpki-client