This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
File:                     GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json)
Hash identifier:          Se4BUT2B4jg4E4s7OE7nAiaExkg73029O7wbrzwmNYs=
Subject key identifier:   B9:3D:6D:F7:F5:B1:61:C5:91:D7:0D:60:E7:29:A5:15:A0:69:B0:9C
Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B
Certificate issuer:       /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
Certificate serial:       03AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
Manifest number:          03A8
Signing time:             Sat 24 Jan 2026 23:53:09 +0000
Manifest this update:     Sat 24 Jan 2026 23:53:08 +0000
Manifest next update:     Sat 31 Jan 2026 23:53:08 +0000
Files and hashes:         1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: b76XVmH5Ra1ga3hQqDMCicL9MeBccqSro45OAmqTueE=)
                          2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: VrhPXWtsHfk2lJWy8i4sbHEkjus4/qGWqNNqlObOXf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941 (0x3ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D32, serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B
        Validity
            Not Before: Jan 24 23:53:08 2026 GMT
            Not After : Jan 31 23:53:08 2026 GMT
        Subject: CN=69755b65-bff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:85:72:51:92:cc:f1:73:58:3b:c4:98:48:
                    cf:d1:7a:ad:3d:ed:9d:c3:58:6e:60:d5:d5:e8:12:
                    70:12:62:bd:58:65:5e:84:8c:bb:64:37:c2:70:70:
                    45:7d:56:70:2a:cf:dc:fd:60:bd:8e:8a:f4:cd:08:
                    2c:2f:4f:5c:b4:7d:2e:4a:64:3e:7b:bc:85:8b:ff:
                    77:ff:f3:cc:dc:9a:2b:5c:ac:67:36:36:48:d1:65:
                    6f:30:cc:37:32:31:19:db:e9:d0:07:0a:c7:c4:db:
                    0c:d7:d1:12:c5:d2:53:e4:54:fe:93:e3:39:cc:ef:
                    4e:69:07:d8:79:e8:37:50:22:71:90:6d:73:bd:05:
                    ed:ca:10:59:24:ce:eb:7f:c1:c4:c5:b4:d1:e5:da:
                    d5:78:11:1c:25:e1:b7:20:7b:8c:41:59:d7:e0:7f:
                    fc:41:ec:a8:7e:bf:10:f7:8f:26:85:0f:ef:77:f7:
                    69:4b:68:1f:ae:93:7c:4f:a0:4d:45:1b:e5:df:f3:
                    3c:19:8e:f1:d6:c8:c9:c0:1b:4a:cc:5b:06:a0:77:
                    e0:48:ce:15:cb:3f:64:b6:05:35:43:02:cf:96:b8:
                    52:b2:4a:81:f9:ce:f1:49:75:fe:14:ea:21:d7:e6:
                    67:df:65:ec:3d:1d:81:e2:55:09:4e:61:3f:fc:20:
                    8c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3D:6D:F7:F5:B1:61:C5:91:D7:0D:60:E7:29:A5:15:A0:69:B0:9C
            X509v3 Authority Key Identifier:
                keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c1:e8:88:3e:d7:0e:8a:1d:0c:91:be:7c:28:f4:f8:bd:b4:
         33:0d:96:6f:3e:f1:fa:25:dd:15:01:d1:ad:dd:06:f2:71:42:
         2f:75:17:43:1b:32:4e:54:da:db:72:1a:84:4c:d2:50:46:67:
         77:7d:58:3e:59:da:0d:2d:b1:c6:33:ec:23:cf:30:31:50:8e:
         4e:7b:9e:94:47:49:4c:db:67:87:7b:9e:1a:2e:cf:27:4b:eb:
         10:2e:ed:ec:e1:12:75:fa:cb:0e:2e:f4:64:a5:56:a9:fb:5b:
         74:47:7c:3c:26:21:d7:45:a0:ba:19:ac:57:6d:cf:bf:56:04:
         d1:cd:ab:f2:6a:e3:95:92:38:36:4e:c8:52:76:29:18:1a:9d:
         00:74:51:4b:59:05:bd:66:4c:df:3e:87:b5:ed:1e:c0:0d:89:
         76:58:fe:37:bf:2e:a9:fa:70:6f:35:99:d0:ad:e8:7b:29:17:
         78:05:2b:11:1a:aa:5d:a5:ff:54:e1:6c:72:8b:a9:f3:24:ca:
         27:5a:50:88:ac:bf:6e:4e:a1:d1:1d:16:f0:61:8b:6d:03:68:
         9d:3a:73:f8:60:8e:d3:16:c4:3a:2a:70:24:5b:c8:c0:b1:36:
         0e:8e:1b:90:10:cb:80:0a:29:22:5e:d3:06:3b:0a:1f:94:4b:
         9a:22:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:15 2026 by rpki-client