This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
File:                     G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json)
Hash identifier:          ydYnjmWGWT8JqVetWDEaKYAR+s2VtFnOQEOU64VGCQc=
Subject key identifier:   CE:BC:56:C0:98:73:D8:7A:FE:67:F9:FA:3D:06:E5:D6:FC:D1:F6:43
Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
Certificate issuer:       /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
Manifest number:          81
Signing time:             Sun 25 Jan 2026 05:47:24 +0000
Manifest this update:     Sun 25 Jan 2026 05:47:24 +0000
Manifest next update:     Sun 01 Feb 2026 05:47:24 +0000
Files and hashes:         1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: KwQe9lO9xudu63NtiaDdeild+wm3SGaMJ1LJLmcvkPY=)
                          2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: qVVzOp455rcs6g+f/MmhYpdl/2N+Lt1OuCuyTK7KoGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
                          rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
        Validity
            Not Before: Jan 25 05:47:24 2026 GMT
            Not After : Feb  1 05:47:24 2026 GMT
        Subject: CN=6975ae6c-e64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:90:cc:7e:2a:4c:92:7a:36:ec:b4:f1:a3:
                    99:c0:16:cf:7d:07:2d:b7:98:7c:42:6b:c9:2b:57:
                    7d:8f:f5:7e:79:02:2b:11:d4:75:bb:46:6d:b5:9f:
                    bd:3b:8a:9f:bd:4d:94:a2:2a:50:c8:54:05:a2:7b:
                    3a:7c:4a:a0:45:86:a6:95:a6:5c:76:1d:85:bd:30:
                    50:41:58:b4:25:37:0d:1d:12:14:38:35:a0:c6:b0:
                    28:f7:8e:78:e2:fd:ef:a7:9f:2d:c6:b7:db:eb:76:
                    75:87:84:e3:a6:e9:2c:5f:87:5d:29:65:16:7a:8e:
                    d4:f5:26:60:54:0c:0f:26:77:16:2e:d4:84:4d:6f:
                    ec:4c:7b:d2:ed:6b:45:df:04:c1:ae:88:61:7d:9e:
                    6c:58:0e:d1:39:7f:d4:14:18:79:90:91:04:de:f3:
                    69:a6:58:c8:34:12:f8:40:44:b3:ee:0f:10:0e:bf:
                    b7:40:00:d7:69:b3:30:b7:80:02:04:f7:47:3c:2a:
                    f0:51:3e:f4:72:f0:e9:eb:09:57:c4:d5:99:8c:55:
                    43:86:63:f5:5e:37:eb:23:3b:89:ab:41:dd:fd:9e:
                    c6:1a:89:ce:03:06:7b:d8:52:9f:33:c1:02:d5:09:
                    81:bf:1d:60:cf:a5:61:57:c1:bb:4d:29:22:c6:da:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BC:56:C0:98:73:D8:7A:FE:67:F9:FA:3D:06:E5:D6:FC:D1:F6:43
            X509v3 Authority Key Identifier:
                keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1c:f5:a0:38:3b:f2:9c:31:df:63:d0:cf:e7:85:77:ee:ef:
         06:35:af:d3:7c:7a:1a:7e:c1:f4:4a:aa:b1:09:4e:09:55:1e:
         98:d2:50:f7:8b:77:7d:90:ba:f9:5a:de:96:64:7f:fc:3a:7d:
         51:db:50:b3:01:7c:bf:ed:e3:ef:16:67:86:51:5f:ea:57:c6:
         08:18:bf:76:1e:34:e1:d0:6e:09:a0:ea:e6:c5:63:1a:a1:38:
         d9:49:91:82:d2:2a:1b:fd:da:07:5e:9e:5b:25:89:2e:f3:d4:
         b8:98:e3:30:7d:65:4b:0d:c6:f2:a2:13:42:3a:23:f6:9f:56:
         17:12:b5:d4:af:04:1c:4b:0b:19:23:9a:2a:a8:be:99:92:60:
         7d:e3:57:fb:0f:db:c5:7b:79:e8:0e:cc:6a:ee:c4:55:09:f5:
         25:25:38:5c:67:fe:be:3b:cf:42:36:a3:3e:20:c5:53:ed:d8:
         46:3e:5d:7e:27:f8:21:63:90:13:77:5c:13:c6:a6:b4:8a:71:
         ac:4f:bb:e7:3d:97:9f:fd:a8:f8:11:b7:53:bc:6f:8c:a3:d1:
         63:45:1a:e0:c6:cc:11:b2:a4:27:d0:45:d1:1f:33:d0:20:7e:
         6d:e8:cf:ba:b1:47:f7:5d:e1:e6:59:5c:04:f2:70:48:76:04:
         36:84:73:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:29:38 2026 by rpki-client