This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
File:                     8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json)
Hash identifier:          jK7UZ11QHt3D56wQqn9zM3qpDEISol6wL1Lk9wFRkXY=
Subject key identifier:   20:EC:34:D0:2F:9D:B1:D7:31:61:27:52:40:D9:61:55:12:03:29:46
Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14
Certificate issuer:       /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414
Certificate serial:       05B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
Manifest number:          05AD
Signing time:             Sat 24 Jan 2026 22:22:45 +0000
Manifest this update:     Sat 24 Jan 2026 22:22:45 +0000
Manifest next update:     Sat 31 Jan 2026 22:22:45 +0000
Files and hashes:         1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: VU0TEUvKK9XBUCuYOr+DJQ6oDXnY0K1I4ZzcYZpB9jg=)
                          2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: 9gxRC5js1FiufwEU1KdLZ+ZBBpP4QjbLjPfn8nzB2wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1459 (0x5b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414
        Validity
            Not Before: Jan 24 22:22:45 2026 GMT
            Not After : Jan 31 22:22:45 2026 GMT
        Subject: CN=69754635-43d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:69:93:0b:32:25:66:b9:87:0d:2d:af:fc:
                    12:38:b7:62:18:36:e8:79:f2:95:8f:d1:f5:d4:af:
                    bd:82:b9:d4:95:2c:2b:c9:93:de:12:15:85:ef:cb:
                    7c:ef:19:dd:7a:b6:99:af:39:b2:b8:f2:c0:ef:14:
                    b9:3b:5b:7c:98:81:64:87:78:f7:26:38:13:d6:3b:
                    27:99:ae:cc:ff:3c:13:21:00:5d:1c:41:c5:6c:02:
                    09:7f:6e:20:cf:20:a5:46:3f:89:77:50:ee:e8:e0:
                    ce:87:0a:f8:8d:c2:2a:d4:c0:d9:35:ef:4b:96:5c:
                    65:5f:f2:55:31:02:b4:29:2f:93:70:95:f8:fe:14:
                    00:d7:3e:ed:1b:81:ee:63:46:7e:ed:40:1f:4b:f0:
                    19:fd:df:db:13:98:b5:6f:d7:cb:d6:b8:15:de:cb:
                    98:d4:5c:bf:a5:8c:c9:1d:bf:61:e0:20:bb:2a:2f:
                    32:84:e9:7c:f7:55:f4:20:88:78:f7:23:7f:30:9b:
                    82:5e:d7:84:10:04:6e:f8:91:87:63:05:b4:ff:61:
                    9e:aa:68:98:2a:b9:17:f2:6e:50:51:93:c8:36:e1:
                    55:d0:cd:68:04:5b:0a:81:cb:21:a8:84:68:00:b6:
                    68:3f:99:38:7a:26:72:b3:62:41:93:fc:2b:37:ea:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EC:34:D0:2F:9D:B1:D7:31:61:27:52:40:D9:61:55:12:03:29:46
            X509v3 Authority Key Identifier:
                keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:16:b8:97:64:57:08:cc:8d:76:51:70:91:b1:53:f1:07:ee:
         a0:63:76:1d:e1:e8:45:58:e6:90:e5:ab:97:a8:f2:39:52:59:
         a5:41:67:9f:c8:9d:af:ad:45:0a:62:12:5b:b6:13:7f:5c:1f:
         bf:4b:84:c4:fa:84:b9:fe:12:92:1d:49:e8:0d:38:03:59:d6:
         68:7e:d8:5c:91:93:3d:6e:a6:fb:57:24:97:e2:5c:b4:bf:fa:
         b6:4d:07:de:01:fa:ed:da:37:8f:51:d0:c0:7a:35:78:8b:31:
         bc:c6:93:18:0e:18:65:7f:7d:4c:e3:7e:60:92:15:40:51:cf:
         03:6c:0a:61:db:eb:cd:ed:56:5d:33:61:76:48:74:0c:f4:17:
         bf:b4:b6:82:88:90:10:4c:94:30:c2:09:aa:c8:71:7e:1e:99:
         7a:9d:f1:b5:30:b7:24:46:79:d5:ed:62:c2:dd:3e:9b:56:32:
         1a:81:41:6f:3a:0d:53:1b:50:b0:17:fd:e1:39:b2:99:34:38:
         4e:11:4d:af:ec:eb:cc:65:a6:d9:96:b2:27:32:b3:f1:d2:5f:
         e5:85:be:47:49:e6:63:6d:bf:bf:b0:a7:3f:dd:78:86:23:5e:
         b1:e2:2c:46:e5:b5:11:48:c2:dc:f7:7b:21:99:96:e6:8d:61:
         e1:56:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:33:39 2026 by rpki-client