This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File:                     gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier:          XDizdq3aJDdIH350XfnHe00ZvNZXb8115vydtzSaZXY=
Subject key identifier:   A7:5E:83:06:9A:12:ED:3F:15:76:46:03:74:78:42:FF:9B:0F:B2:AC
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer:       /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial:       0264
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number:          025B
Signing time:             Sun 25 Jan 2026 00:55:10 +0000
Manifest this update:     Sun 25 Jan 2026 00:55:09 +0000
Manifest next update:     Sun 01 Feb 2026 00:55:09 +0000
Files and hashes:         1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: GoHNHXi30i1W+JVYJR5wlr1Hit8rFbOvWDkVRQznUjg=)
                          2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: guoDsfCdlPfgkYSScjR/9hRsT4QBuvGrmx7XsTxsYOY=)
                          3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: PGJbQnjc1bTQtRJhtYYqM6Jzz/Z0WeIug83GlsZ1DPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
        Validity
            Not Before: Jan 25 00:55:09 2026 GMT
            Not After : Feb  1 00:55:09 2026 GMT
        Subject: CN=697569ed-8f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:42:57:84:14:12:1e:6b:43:03:4d:00:11:
                    ad:3a:53:c7:10:bf:ac:65:7e:e4:bc:53:82:d3:a6:
                    2c:b6:b9:dd:06:37:a4:bd:69:e7:51:61:74:99:6e:
                    aa:1f:98:9b:39:5d:36:c1:0f:fa:50:b2:07:92:1c:
                    c2:dc:3a:88:d9:ef:94:2f:fe:2a:bf:ed:27:23:8e:
                    cb:46:cd:65:37:0d:41:fd:34:9d:dc:38:97:b4:fd:
                    3b:e2:bd:9a:3b:27:e7:91:51:7d:a3:2a:1e:0a:39:
                    40:f1:d7:7e:9a:9a:2b:5c:eb:c5:3b:64:9d:06:ad:
                    70:d8:66:0f:ac:b5:82:52:6e:4f:3e:a1:75:ee:70:
                    6e:ed:b8:f7:76:02:ef:db:85:d4:45:60:f9:2e:98:
                    50:5b:9b:96:99:bb:bb:94:fa:23:a6:df:dc:ac:49:
                    0f:3e:1b:29:1d:fe:9d:e8:38:70:6d:1d:04:b9:b4:
                    08:93:e1:84:f1:5f:44:9b:7e:7a:30:96:aa:d7:dc:
                    89:8f:49:86:96:c2:4e:67:67:c4:af:f8:32:31:81:
                    95:1a:0e:45:93:2d:a6:86:54:85:c1:12:e0:6a:15:
                    bf:6d:ec:d9:63:3c:f9:4d:e7:ce:ed:41:05:96:e7:
                    86:f6:6a:03:9f:e3:ed:f2:5e:a6:1c:5b:41:71:13:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5E:83:06:9A:12:ED:3F:15:76:46:03:74:78:42:FF:9B:0F:B2:AC
            X509v3 Authority Key Identifier:
                keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:61:7a:5f:ef:81:b5:1d:51:99:31:07:de:76:26:ac:c0:82:
         06:20:37:16:22:9c:da:70:91:e8:d4:26:14:f9:64:ae:e9:b3:
         f7:18:16:a2:c4:41:28:5a:62:d4:ac:57:57:e4:0c:f2:a9:c5:
         58:30:03:a1:48:84:41:da:1f:76:87:7f:a9:15:0e:62:8d:ef:
         74:49:65:5b:a7:e9:d8:96:32:6f:af:b5:fe:9c:2e:d6:7c:d6:
         32:29:f2:3a:77:8a:4a:c2:e8:fe:9f:f4:ea:1c:c9:ad:66:30:
         4c:45:95:c4:10:2f:e0:c2:08:a5:b5:00:00:2c:04:06:3e:cd:
         66:54:af:91:b9:76:e2:55:bc:2e:f5:96:84:3e:76:1f:b6:5d:
         fa:3e:c5:2b:93:15:82:61:25:d3:6d:05:a2:d7:20:60:34:79:
         e1:9a:16:b8:53:2e:91:3f:0b:7c:77:79:ea:ba:9f:93:64:5a:
         cb:bd:79:21:47:31:8e:92:33:7b:18:2d:52:2e:c4:24:f3:ac:
         80:39:83:bb:65:0a:02:05:14:a4:91:30:7c:7c:34:ff:c6:3c:
         33:a0:91:d3:50:cd:3e:32:ed:dc:95:c6:75:38:a6:4f:3d:73:
         e2:dd:86:b7:40:53:47:60:32:61:71:30:5f:7b:35:8f:91:84:
         f2:ae:54:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:12 2026 by rpki-client