This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
File:                     GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json)
Hash identifier:          2ajch6jGMMeNqzjHQxrI2d3B3KZL6vyqFBrHbJB1jyQ=
Subject key identifier:   71:14:23:4E:AD:EB:F5:10:0E:08:75:95:3A:16:86:0A:04:9D:4B:E2
Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63
Certificate issuer:       /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
Manifest number:          48
Signing time:             Sun 25 Jan 2026 06:26:45 +0000
Manifest this update:     Sun 25 Jan 2026 06:26:44 +0000
Manifest next update:     Sun 01 Feb 2026 06:26:44 +0000
Files and hashes:         1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: pTz/0Ypb9n9pdJMjNAO7wkMYeuagXzDlcJvty0hYbCY=)
                          2: EDD3FAACDB0A11F0AAAD2E0882D3641D.roa (hash: /zzuQUAisWSVLCk8jbtxCL/1y6+7bIUdnfrffFB0QQk=)
                          3: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: UVL+I7szf8iCH65cpJ/CsanK4KUSQyBBrbJQjQlZT8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl
                          rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63
        Validity
            Not Before: Jan 25 06:26:44 2026 GMT
            Not After : Feb  1 06:26:44 2026 GMT
        Subject: CN=6975b7a5-70b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:a8:d4:89:4f:20:fb:83:24:15:86:50:51:
                    ad:57:a4:b7:87:bf:b4:bd:3b:8e:b1:aa:92:cd:97:
                    be:e9:8c:13:5b:5e:13:ae:b7:00:23:a2:f9:4c:6e:
                    b5:26:0a:87:1b:e0:b1:33:c1:1e:64:d1:eb:de:85:
                    b5:38:c8:38:fd:dd:34:61:94:93:c6:ee:60:74:e4:
                    09:e6:db:29:df:8e:1c:cf:01:37:4a:d4:4d:63:15:
                    86:f6:fe:e3:39:bc:ca:63:17:2d:fb:d0:c4:7f:dd:
                    4c:05:6c:26:f9:69:93:64:25:f5:75:09:b8:19:d3:
                    2d:c8:0a:15:fc:20:15:aa:28:b0:c5:ce:f3:99:6a:
                    e6:e7:18:d0:3a:29:f5:cc:1b:5e:42:e3:3c:69:c0:
                    e1:af:5a:dd:1f:90:f2:ad:07:bf:9c:6f:36:c4:87:
                    9f:b4:9f:5f:4e:d2:35:ee:ac:60:f8:4e:18:73:bc:
                    99:ef:a8:1e:d9:a1:51:44:7b:0c:1f:8d:02:8a:3f:
                    ab:b7:41:8a:6f:2a:07:36:dc:73:17:4b:9b:10:a2:
                    f3:6e:34:7d:62:3d:06:b5:d7:83:ce:41:d4:51:13:
                    1e:de:d7:c5:08:68:0b:32:28:34:03:d7:c4:c1:38:
                    a9:b6:5a:4c:f1:5a:b7:c8:b3:0f:42:21:0d:ef:1d:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:14:23:4E:AD:EB:F5:10:0E:08:75:95:3A:16:86:0A:04:9D:4B:E2
            X509v3 Authority Key Identifier:
                keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:a3:3c:30:ad:bf:6e:00:b9:8c:cd:73:b5:89:21:ce:8f:94:
         8f:6e:35:a2:26:d4:76:c5:0b:90:a3:a0:bf:67:a9:0f:62:cd:
         c9:f6:2b:8b:aa:8b:3c:c6:62:95:b9:3a:bc:fe:e6:3d:73:b0:
         20:4d:35:fa:1e:53:dd:ad:cf:d1:0e:8e:bf:3d:65:de:b0:da:
         24:f8:c2:95:68:2b:15:2c:e2:e3:45:e9:b6:5e:1f:a7:5e:5e:
         b4:95:51:71:ca:4c:cd:da:56:0b:20:62:26:c8:77:a2:fb:30:
         bc:7a:98:a1:5b:67:a7:ce:53:05:e0:91:df:2e:a8:c1:99:66:
         96:d4:6d:5f:be:c2:8b:1e:c6:6c:ca:9e:c4:0f:99:03:0e:82:
         83:d8:6e:96:b1:29:90:dc:3a:73:45:17:ec:72:ec:6d:e5:80:
         95:de:e4:0f:e9:92:7c:a7:5f:e9:8c:18:e8:9a:26:eb:3f:0c:
         6b:8c:dc:1c:65:d3:a8:62:e5:f3:fa:0e:0d:95:50:7a:e2:c8:
         0a:ee:a3:18:60:fa:e8:24:33:7e:18:41:c6:00:43:5c:87:96:
         45:77:20:83:dd:06:0c:79:69:3f:e0:97:c1:d7:f4:b0:82:10:
         66:9f:b5:23:f3:4b:93:8d:63:18:dc:45:19:d4:e4:26:fa:65:
         08:04:d8:4f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE
RjE5NTExMC8GA1UEBRMoMThFOTI5N0ExRjFBMThDQjg3OUE3RTEyNEI1MTA3QzQ0
MDU3M0M2MzAeFw0yNjAxMjUwNjI2NDRaFw0yNjAyMDEwNjI2NDRaMBgxFjAUBgNV
BAMMDTY5NzViN2E1LTcwYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDeoKjUiU8g+4MkFYZQUa1XpLeHv7S9O46xqpLNl77pjBNbXhOutwAjovlMbrUm
Cocb4LEzwR5k0evehbU4yDj93TRhlJPG7mB05Anm2ynfjhzPATdK1E1jFYb2/uM5
vMpjFy370MR/3UwFbCb5aZNkJfV1CbgZ0y3IChX8IBWqKLDFzvOZaubnGNA6KfXM
G15C4zxpwOGvWt0fkPKtB7+cbzbEh5+0n19O0jXurGD4ThhzvJnvqB7ZoVFEewwf
jQKKP6u3QYpvKgc23HMXS5sQovNuNH1iPQa114POQdRREx7e18UIaAsyKDQD18TB
OKm2WkzxWrfIsw9CIQ3vHYjtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcRQjTq3r
9RAOCHWVOhaGCgSdS+IwHwYDVR0jBBgwFoAUGOkpeh8aGMuHmn4SS1EHxEBXPGMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1LzZCNjY2OTBBOTM4
QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBH
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR09rcGVoOGFHTXVIbW40U1MxRUh4RUJYUEdNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG
MTk1LzZCNjY2OTBBOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhhR011
SG1uNFNTMUVIeEVCWFBHTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAM6jPDCtv24AuYzNc7WJIc6PlI9uNaIm1HbFC5CjoL9nqQ9izcn2K4uq
izzGYpW5Orz+5j1zsCBNNfoeU92tz9EOjr89Zd6w2iT4wpVoKxUs4uNF6bZeH6de
XrSVUXHKTM3aVgsgYibId6L7MLx6mKFbZ6fOUwXgkd8uqMGZZpbUbV++wosexmzK
nsQPmQMOgoPYbpaxKZDcOnNFF+xy7G3lgJXe5A/pknynX+mMGOiaJus/DGuM3Bxl
06hi5fP6Dg2VUHriyAruoxhg+ugkM34YQcYAQ1yHlkV3IIPdBgx5aT/gl8HX9LCC
EGaftSPzS5ONYxjcRRnU5Cb6ZQgE2E8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:21:09 2026 by rpki-client