This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
File:                     gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json)
Hash identifier:          O6IQOuCUmrxCeb5hyzpfK3gD6VViENl80Xw/LlMcf9Q=
Subject key identifier:   49:D8:44:1A:AF:C4:72:F7:7E:64:84:90:4E:A5:83:B1:FA:CB:CC:9C
Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Certificate issuer:       /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
Manifest number:          EC
Signing time:             Sun 25 Jan 2026 04:38:56 +0000
Manifest this update:     Sun 25 Jan 2026 04:38:55 +0000
Manifest next update:     Sun 01 Feb 2026 04:38:55 +0000
Files and hashes:         1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: T6Q9AKa6RD5sOfLk/2qEyBUpJy6RXw1HSkZdKGGvcBM=)
                          2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: b7PxFokUIXPBGz+iss/nauBD0ImGfyI3acw64tuMWC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
        Validity
            Not Before: Jan 25 04:38:55 2026 GMT
            Not After : Feb  1 04:38:55 2026 GMT
        Subject: CN=69759e60-a3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7c:7c:6c:b4:cc:00:49:e0:4d:0c:c8:d1:c1:
                    9a:93:fe:50:88:ee:b3:64:23:21:d2:8d:e9:75:dd:
                    ae:5e:37:9a:d0:fa:6f:ad:b4:2e:59:f5:d7:da:76:
                    fa:38:52:81:07:5c:a4:b1:39:26:c6:86:08:43:9e:
                    ca:48:14:fc:b0:c8:84:96:81:00:c9:5b:bc:92:7a:
                    86:ab:b5:aa:e5:63:ba:a9:1d:76:10:8d:7a:eb:c5:
                    82:63:08:4a:9b:6c:b9:ae:bf:72:09:50:07:21:e8:
                    86:97:da:ae:7e:af:2f:bd:91:97:ce:93:a9:2f:21:
                    50:3f:d2:df:e7:1a:66:cf:cb:c2:73:8b:ed:0c:fd:
                    4e:f7:fc:1b:27:8a:ee:12:e4:4d:68:4c:5d:79:2c:
                    3e:fa:9c:83:cf:31:45:b8:99:ec:c1:10:af:7c:83:
                    9c:ab:7f:78:51:64:00:35:c0:e1:3a:23:f3:c3:d3:
                    f4:f0:2d:05:4e:4f:04:75:1b:e6:f7:de:eb:fc:72:
                    7d:3c:7f:7e:e6:10:b8:1a:ac:25:75:5a:3e:9d:84:
                    28:ce:de:84:bf:bf:ce:a6:26:43:94:b3:cb:b5:2f:
                    6c:fa:8c:62:8c:f0:b3:ba:9c:ed:53:01:9c:87:64:
                    2e:79:33:d7:ff:e2:68:a4:fa:36:63:07:98:7e:82:
                    e2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D8:44:1A:AF:C4:72:F7:7E:64:84:90:4E:A5:83:B1:FA:CB:CC:9C
            X509v3 Authority Key Identifier:
                keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0f:9c:73:d9:29:c1:2e:c8:d9:9e:08:b9:2a:bd:ec:7e:de:
         bd:ff:24:bb:e8:3e:c5:32:77:64:34:bc:e9:2b:09:97:c7:23:
         97:81:f4:3a:11:34:c1:11:55:65:ec:dd:a8:b6:27:71:03:08:
         0e:39:fd:05:f0:47:81:e4:94:4d:32:93:75:59:53:26:f8:82:
         04:61:d4:74:e2:c4:61:41:e5:99:b1:06:70:b7:71:58:d0:9d:
         d4:3a:17:7a:fd:29:d7:07:5c:cb:32:92:1f:4e:e1:d4:a2:16:
         8f:a1:82:84:70:f6:03:7b:c2:56:4e:42:dd:b6:6d:e3:2b:43:
         72:b2:08:8b:84:94:16:4f:f3:50:ec:6a:ec:2e:27:56:e6:27:
         d2:83:cc:38:31:16:78:38:0d:41:51:19:4d:5b:9b:33:3f:17:
         55:ea:c4:fd:04:7e:f5:02:07:39:6b:fc:1a:e7:6a:a5:6d:8b:
         d1:3b:fb:c4:e0:47:ac:1c:ff:fa:0b:a9:5b:4d:ef:53:cc:a3:
         c4:c9:39:68:54:45:e7:06:41:a3:a5:2a:5b:0a:7d:bf:b5:ff:
         37:ae:84:8a:ca:93:d3:5f:34:1e:bd:5d:dd:4d:6c:a8:e2:76:
         01:05:e2:e8:77:16:ce:9a:8c:8b:91:d9:21:68:86:d6:08:96:
         57:b8:60:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:53 2026 by rpki-client