This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
File:                     gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json)
Hash identifier:          cu9amrHNyWneu6F63A0ePuDDHfeYj0H61ee1lIpBBtw=
Subject key identifier:   C0:87:14:DB:0A:92:6C:3A:17:3F:45:D0:51:E4:B8:DA:E2:8E:A7:F3
Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17
Certificate issuer:       /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
Certificate serial:       0BC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
Manifest number:          0BAA
Signing time:             Sat 24 Jan 2026 18:33:05 +0000
Manifest this update:     Sat 24 Jan 2026 18:33:04 +0000
Manifest next update:     Sat 31 Jan 2026 18:33:04 +0000
Files and hashes:         1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: A3hYnw3FUWaWXHW/Xd+QtxBntFmIuh73Oy6yL3kxPS8=)
                          2: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (hash: lteU0o64kIICtIo+zbEltkZ82DIGdAKRcEg8q8f09gQ=)
                          3: 1671D380603711EF97BB395FC4F9AE02.roa (hash: wcjq6nrAdlH8UWi0JyTi5KR6p/GMdWrETyKZJT7hWSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3008 (0xbc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
        Validity
            Not Before: Jan 24 18:33:04 2026 GMT
            Not After : Jan 31 18:33:04 2026 GMT
        Subject: CN=69751060-0480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:7a:2d:a2:fd:53:52:0e:b6:da:21:10:03:
                    88:fc:38:5e:14:9b:e4:07:50:d3:87:7b:c7:b2:9e:
                    36:a7:73:c2:60:05:4f:28:8a:d7:a6:90:e0:91:f0:
                    fe:e6:d0:f5:fe:47:f8:f0:49:ce:b9:d8:1f:72:53:
                    18:b3:cf:1c:70:b0:61:5e:b4:50:cb:ba:38:25:93:
                    95:bc:da:b8:8d:37:ac:83:88:c4:82:78:34:01:b2:
                    f4:7d:9f:ab:f7:7d:13:fe:ff:46:3c:ba:10:03:a0:
                    7a:41:6e:09:dc:31:bc:aa:c2:ce:db:f9:00:0a:80:
                    f8:92:df:53:bb:e0:33:cf:0b:22:77:d8:a5:ce:7c:
                    04:01:87:e3:20:c1:99:45:87:16:c3:57:b5:b9:1e:
                    ed:b7:1b:cf:4c:76:a5:e8:d9:98:d8:c5:e1:4d:40:
                    1c:d5:77:2c:20:34:0d:cf:4f:4d:22:ea:82:8b:f0:
                    91:fa:07:f1:dc:c1:98:b5:53:42:4b:24:98:00:7c:
                    62:58:52:0a:1e:b4:b1:fb:ba:20:1a:77:ee:5a:6c:
                    c0:cb:0a:d0:05:f3:08:c2:c6:78:00:5c:cb:13:82:
                    3c:e9:90:56:99:d2:d6:09:28:72:d4:3d:94:69:c3:
                    cb:ca:d3:bd:9c:c6:dd:0e:2a:41:83:ac:cd:48:ae:
                    62:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:87:14:DB:0A:92:6C:3A:17:3F:45:D0:51:E4:B8:DA:E2:8E:A7:F3
            X509v3 Authority Key Identifier:
                keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:09:86:07:8c:ea:5a:2c:bd:22:69:67:d9:96:a0:e9:e4:
         52:37:6f:10:11:91:bb:c4:85:35:63:26:7d:23:e8:15:57:d6:
         c4:2e:bf:03:0a:70:68:ae:39:55:be:06:a4:d7:c8:6e:15:82:
         e3:c8:6b:e2:d6:da:59:49:e4:92:b6:62:49:3c:07:23:7b:81:
         20:43:6a:f6:8a:d7:24:1c:16:8e:ee:a7:db:0d:6c:52:1a:33:
         b1:09:08:d9:f2:a1:39:71:71:a3:02:59:6c:19:ee:51:b7:2b:
         d7:b4:f0:a3:11:dc:1d:e8:da:d3:31:4e:81:78:52:0b:9c:c6:
         c3:e8:c2:70:d5:36:ea:36:36:68:cd:d2:3e:34:20:d1:64:4e:
         de:3d:94:36:1e:4b:58:8a:77:22:a3:f7:90:8d:5d:60:e6:1b:
         a2:38:72:d5:98:b5:9e:45:10:94:c9:b4:45:40:9f:54:cc:2b:
         7e:3a:ff:f5:50:13:3b:29:29:c7:aa:2d:b0:f4:cc:88:7f:79:
         13:f7:bb:a4:53:1d:46:60:67:53:73:8d:c9:af:99:81:71:e1:
         ac:4b:f8:66:62:15:c9:08:c3:a6:65:6a:8b:80:40:ab:1a:ac:
         af:6f:97:8d:ae:08:f7:ba:dc:22:3c:ca:6e:d2:9a:f7:21:3e:
         21:92:9d:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx
RjI2NUQ0MTcwHhcNMjYwMTI0MTgzMzA0WhcNMjYwMTMxMTgzMzA0WjAYMRYwFAYD
VQQDDA02OTc1MTA2MC0wNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1SV6LaL9U1IOttohEAOI/DheFJvkB1DTh3vHsp42p3PCYAVPKIrXppDgkfD+
5tD1/kf48EnOudgfclMYs88ccLBhXrRQy7o4JZOVvNq4jTesg4jEgng0AbL0fZ+r
930T/v9GPLoQA6B6QW4J3DG8qsLO2/kACoD4kt9Tu+Azzwsid9ilznwEAYfjIMGZ
RYcWw1e1uR7ttxvPTHal6NmY2MXhTUAc1XcsIDQNz09NIuqCi/CR+gfx3MGYtVNC
SySYAHxiWFIKHrSx+7ogGnfuWmzAywrQBfMIwsZ4AFzLE4I86ZBWmdLWCShy1D2U
acPLytO9nMbdDipBg6zNSK5iPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCHFNsK
kmw6Fz9F0FHkuNrijqfzMB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE
ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx
QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUY1MS9BODgzRTgxQzNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0
MnVlLXZSeWFkTHNmSmwxQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAB2QmGB4zqWiy9Imln2Zag6eRSN28QEZG7xIU1YyZ9I+gVV9bELr8D
CnBorjlVvgak18huFYLjyGvi1tpZSeSStmJJPAcje4EgQ2r2itckHBaO7qfbDWxS
GjOxCQjZ8qE5cXGjAllsGe5RtyvXtPCjEdwd6NrTMU6BeFILnMbD6MJw1TbqNjZo
zdI+NCDRZE7ePZQ2HktYincio/eQjV1g5huiOHLVmLWeRRCUybRFQJ9UzCt+Ov/1
UBM7KSnHqi2w9MyIf3kT97ukUx1GYGdTc43Jr5mBceGsS/hmYhXJCMOmZWqLgECr
Gqyvb5eNrgj3utwiPMpu0pr3IT4hkp0v
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:15:48 2026 by rpki-client