This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
File:                     g9YM-N6oAia4ByS83mcD0Q1lf_4.mft (raw, json)
Hash identifier:          rjOyCRO43vlswrix8QbGaMDAp5qSJyWj1Q+RGlIatt0=
Subject key identifier:   23:40:BE:0C:5B:37:A9:F3:0B:2C:E5:2D:FE:75:0A:E4:A9:95:95:59
Authority key identifier: 83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE
Certificate issuer:       /CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
Manifest number:          07EB
Signing time:             Sat 24 Jan 2026 22:19:51 +0000
Manifest this update:     Sat 24 Jan 2026 22:19:50 +0000
Manifest next update:     Sat 31 Jan 2026 22:19:50 +0000
Files and hashes:         1: g9YM-N6oAia4ByS83mcD0Q1lf_4.crl (hash: db5f1LQIEUm334sBnUlVo9KVWl4DTg2jlqOU7eFzid8=)
                          2: FC1D8B7A9C7C11ED96690F39C4F9AE02.roa (hash: GaFDcUcEWV5tnryiYR88U/olXhGbw6GEBeuHpqFSkow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl
                          rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F7A1, serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
        Validity
            Not Before: Jan 24 22:19:50 2026 GMT
            Not After : Jan 31 22:19:50 2026 GMT
        Subject: CN=69754587-190c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:da:2d:b8:34:e7:d8:31:94:36:6a:34:18:
                    3a:05:d5:dd:74:bc:5a:e1:d3:ee:de:e7:e9:53:6d:
                    18:2e:a2:5e:59:f7:ad:df:10:9a:64:45:a2:2d:80:
                    9d:64:98:c1:1d:43:09:6a:f1:00:eb:71:22:84:e5:
                    22:78:80:3b:cd:f1:23:f1:95:d8:54:e5:79:d7:10:
                    37:8a:2d:2f:39:45:3d:43:26:ad:3a:17:f3:6f:b9:
                    51:6c:66:f6:49:92:de:34:4e:e6:a1:7b:64:b7:8a:
                    27:18:a7:89:81:4d:4d:00:5d:aa:6e:f4:bd:48:e4:
                    79:3f:35:ec:f9:7a:ce:da:38:14:d5:97:65:01:52:
                    22:db:5f:40:df:e7:fe:3d:a7:2c:82:a1:7d:67:b1:
                    9a:de:f4:5e:93:e8:a2:1a:e0:0c:78:81:40:4c:27:
                    a9:ad:84:3d:70:da:30:2b:7c:b8:b6:5e:19:41:b3:
                    1a:2a:e4:6c:59:53:1d:14:c8:3e:35:8a:ec:c0:a3:
                    1f:d8:ae:12:11:34:08:a6:c5:f1:ce:6c:02:f6:c8:
                    f2:ec:8a:31:05:51:da:52:b5:e6:a0:a0:f9:ac:4b:
                    2e:97:6a:5e:53:89:37:cc:4f:fa:23:e8:f9:84:fa:
                    f6:2d:22:d4:22:78:0a:7f:ce:33:04:a9:93:66:ec:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:40:BE:0C:5B:37:A9:F3:0B:2C:E5:2D:FE:75:0A:E4:A9:95:95:59
            X509v3 Authority Key Identifier:
                keyid:83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ed:e8:4d:90:f2:2c:22:b1:a3:0b:e7:e1:6c:5c:93:06:4c:
         62:dc:86:0e:4e:18:3d:95:1e:32:3a:c0:bd:1f:2b:b3:ef:94:
         7b:be:fb:2c:da:10:90:41:36:a3:a1:4b:15:8f:90:ae:45:b5:
         bc:05:8e:07:f1:a1:60:be:11:c8:4b:e4:2d:98:08:b4:f0:74:
         72:87:97:1d:8d:0f:b6:06:43:48:95:c7:5d:cb:c2:cc:36:c0:
         56:b3:19:3a:30:09:e4:b5:06:4f:62:1c:38:db:b5:17:de:18:
         dd:d1:bc:4e:f2:3f:a5:66:98:8c:fa:52:f9:59:53:60:e2:e4:
         7b:25:23:f4:41:60:d2:13:f5:dd:3e:f2:8b:84:d1:25:75:45:
         cb:0e:3e:43:ab:1c:58:dc:e7:e3:b9:48:62:22:18:02:a3:fc:
         15:e9:03:1f:21:d8:19:77:c1:71:30:25:6c:df:75:1e:d7:e2:
         7e:87:bf:bb:0b:80:2b:83:4f:ca:cf:fe:6e:1e:80:0a:ea:80:
         d3:02:02:4a:c7:eb:03:7b:23:16:68:0c:31:d9:d3:cc:05:b4:
         df:ea:4d:ed:4d:4e:db:8e:92:f8:6c:a6:64:4c:69:c2:97:18:
         8f:73:2a:c5:be:63:80:5c:ea:e6:5c:62:55:03:75:d8:86:da:
         eb:e5:49:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY3QTExMTAvBgNVBAUTKDgzRDYwQ0Y4REVBODAyMjZCODA3MjRCQ0RFNjcwM0Qx
MEQ2NTdGRkUwHhcNMjYwMTI0MjIxOTUwWhcNMjYwMTMxMjIxOTUwWjAYMRYwFAYD
VQQDDA02OTc1NDU4Ny0xOTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlWTaLbg059gxlDZqNBg6BdXddLxa4dPu3ufpU20YLqJeWfet3xCaZEWiLYCd
ZJjBHUMJavEA63EihOUieIA7zfEj8ZXYVOV51xA3ii0vOUU9QyatOhfzb7lRbGb2
SZLeNE7moXtkt4onGKeJgU1NAF2qbvS9SOR5PzXs+XrO2jgU1ZdlAVIi219A3+f+
PacsgqF9Z7Ga3vRek+iiGuAMeIFATCeprYQ9cNowK3y4tl4ZQbMaKuRsWVMdFMg+
NYrswKMf2K4SETQIpsXxzmwC9sjy7IoxBVHaUrXmoKD5rEsul2peU4k3zE/6I+j5
hPr2LSLUIngKf84zBKmTZuzsawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNAvgxb
N6nzCyzlLf51CuSplZVZMB8GA1UdIwQYMBaAFIPWDPjeqAImuAckvN5nA9ENZX/+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0
MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0FpYTRCeVM4M21jRDBRMWxm
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c5WU0tTjZvQWlhNEJ5UzgzbWNEMFExbGZfNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0Fp
YTRCeVM4M21jRDBRMWxmXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC27ehNkPIsIrGjC+fhbFyTBkxi3IYOThg9lR4yOsC9Hyuz75R7vvss
2hCQQTajoUsVj5CuRbW8BY4H8aFgvhHIS+QtmAi08HRyh5cdjQ+2BkNIlcddy8LM
NsBWsxk6MAnktQZPYhw427UX3hjd0bxO8j+lZpiM+lL5WVNg4uR7JSP0QWDSE/Xd
PvKLhNEldUXLDj5DqxxY3OfjuUhiIhgCo/wV6QMfIdgZd8FxMCVs33Ue1+J+h7+7
C4Arg0/Kz/5uHoAK6oDTAgJKx+sDeyMWaAwx2dPMBbTf6k3tTU7bjpL4bKZkTGnC
lxiPcyrFvmOAXOrmXGJVA3XYhtrr5Unm
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:50:14 2026 by rpki-client