This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
File:                     g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json)
Hash identifier:          Ku6iblP0zbBjxekKQl50dpH2UnId+5cL1ME2FXwiXsI=
Subject key identifier:   E8:F4:20:D5:EF:DC:34:EC:A6:DF:82:F9:F1:AB:5F:8E:2F:23:EA:EA
Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
Certificate issuer:       /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
Manifest number:          0157
Signing time:             Sun 25 Jan 2026 03:25:20 +0000
Manifest this update:     Sun 25 Jan 2026 03:25:20 +0000
Manifest next update:     Sun 01 Feb 2026 03:25:20 +0000
Files and hashes:         1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: zz2JrLIWqo2z1hWN+4WVAMLKOZUNHmySlQNJycNVjLQ=)
                          2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: Vp6oIV4Kwe3FgHjDClftctReHYiAIs5p4BPX7qetipE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl
                          rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
        Validity
            Not Before: Jan 25 03:25:20 2026 GMT
            Not After : Feb  1 03:25:20 2026 GMT
        Subject: CN=69758d20-c242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:36:6a:4a:81:a6:41:6f:5c:48:06:94:3e:b4:
                    1a:22:86:72:79:56:58:35:06:ce:0e:00:4e:ba:dd:
                    86:26:db:80:8f:9b:a9:a8:02:8f:e7:0a:89:c7:12:
                    40:2e:22:cb:1b:ea:2e:c0:23:4e:34:ce:03:63:14:
                    7a:37:61:44:f4:88:d6:0d:dd:5e:f1:fc:b2:20:13:
                    5f:b5:f1:23:9d:62:52:0f:d1:c9:2b:3f:26:ee:b6:
                    c9:26:eb:bb:8b:2a:c4:ca:4b:d0:c2:b2:42:84:8b:
                    8f:f4:25:b6:6a:ad:39:a5:66:5d:68:51:8e:cf:67:
                    bb:e9:f9:21:b2:a7:4f:20:53:b2:84:bd:4e:60:5f:
                    a3:59:cd:d1:d2:6b:8f:24:b5:dd:9a:7f:f0:1a:ed:
                    f4:7f:e1:7d:e9:e9:4f:ba:39:26:de:39:af:15:98:
                    fb:44:39:57:e4:57:57:7c:78:97:35:20:f7:56:1e:
                    c3:10:23:ba:ff:a7:7a:38:68:69:cf:90:1b:43:25:
                    b9:6a:fb:36:83:ba:03:1f:cc:5a:33:4f:b0:c1:fa:
                    0a:65:fd:6e:f5:f8:80:b4:00:32:5a:93:8f:f1:a7:
                    e6:4f:f9:e7:a4:42:22:7a:c7:8f:c3:73:0d:97:69:
                    4e:7c:99:bc:6b:d6:a0:4a:17:95:d4:34:d7:d7:17:
                    83:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:20:D5:EF:DC:34:EC:A6:DF:82:F9:F1:AB:5F:8E:2F:23:EA:EA
            X509v3 Authority Key Identifier:
                keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f9:7b:81:a7:ed:97:5b:bc:a7:ee:61:2a:a4:43:dc:c2:41:
         a3:8c:b6:6a:22:ba:ea:fc:b8:54:f2:56:cd:b3:f0:7d:f2:fe:
         c9:a4:62:58:6b:4b:ab:6a:b0:45:8b:57:76:f2:3b:cb:30:1e:
         c1:c1:09:fa:06:01:15:53:36:7c:98:32:09:d7:3d:68:ef:30:
         1e:64:65:97:47:ea:bc:bb:c4:a9:af:9b:c5:04:6c:ff:98:44:
         69:79:57:b1:13:82:6e:7e:c8:b9:93:5a:fd:2f:26:60:1e:07:
         ba:3e:96:0f:da:d4:31:67:e4:8e:8f:84:01:b5:53:b1:8d:ce:
         9c:b0:8e:17:6d:82:87:59:00:89:a4:b1:78:96:bc:1d:3c:60:
         3d:08:e7:ff:f4:3f:af:75:7d:e7:d8:df:e1:b3:29:cd:5c:97:
         88:38:69:ee:80:79:a3:4b:0a:54:28:96:74:fe:51:58:95:a6:
         0d:e3:bc:70:47:1e:7a:16:be:7f:08:ae:db:d8:0d:3d:cd:b4:
         e8:17:90:9e:2b:d6:6d:77:d6:40:c4:45:20:bb:75:6e:2e:4c:
         54:25:3b:49:0a:4e:84:d9:d7:f4:e5:65:3f:e1:f1:6e:a1:90:
         b8:62:c6:68:8b:75:61:1e:de:88:b0:0b:b0:d5:7a:5e:4e:b6:
         ad:d3:90:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:49:44 2026 by rpki-client