This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
File:                     GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json)
Hash identifier:          sywis7D+jJ7b2w1nPjsh3lb2+Rb3fCPSsohUE+0fWJY=
Subject key identifier:   E9:C4:FB:DF:2E:4E:B3:47:79:81:3E:72:02:70:CF:5A:28:55:6F:C8
Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60
Certificate issuer:       /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60
Certificate serial:       0571
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
Manifest number:          0568
Signing time:             Sat 24 Jan 2026 22:35:57 +0000
Manifest this update:     Sat 24 Jan 2026 22:35:56 +0000
Manifest next update:     Sat 31 Jan 2026 22:35:56 +0000
Files and hashes:         1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: RIrLo/aiT2KgLODuQAQ/gPqMYQuLEU1EIRK/8LzUN5s=)
                          2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: 7HMY0VAKzttuQ0fRp6AzkKm6fjk8O3uYxQqvsqTSq24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl
                          rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60
        Validity
            Not Before: Jan 24 22:35:56 2026 GMT
            Not After : Jan 31 22:35:56 2026 GMT
        Subject: CN=6975494c-c407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:2c:56:df:6b:ce:b3:27:8f:b1:7a:53:48:
                    70:a6:50:69:6a:30:8b:19:1f:7c:94:5c:70:92:09:
                    d4:05:6e:8b:2b:7b:f3:4c:1d:fa:3f:16:78:14:ef:
                    5b:27:51:77:0f:eb:d1:98:82:ec:8c:a7:71:01:8e:
                    84:65:13:77:56:14:16:64:d2:3e:07:07:d9:06:18:
                    2a:03:44:fb:fe:60:db:74:64:e5:8b:62:d6:38:09:
                    02:ed:21:64:b8:fc:37:fe:64:54:68:b7:22:60:47:
                    94:13:6f:22:53:76:d5:7f:25:d1:0b:59:f4:24:0a:
                    18:ba:8b:3a:f5:cc:e6:6b:10:cf:a5:3c:ab:59:71:
                    4b:a7:82:d7:e9:9b:d3:10:ed:c8:f6:43:82:85:06:
                    72:c6:61:41:cf:5a:82:b7:d5:c2:f5:04:74:64:98:
                    37:98:7d:b2:81:85:79:4a:26:3d:c5:eb:40:42:50:
                    00:68:37:aa:36:b7:47:1c:cf:9c:6a:d4:f0:c0:4c:
                    2f:f3:7a:77:2d:be:e6:0d:98:81:d8:a2:b0:d8:5f:
                    06:3b:a8:95:a8:31:ca:1a:d7:83:8c:1c:be:c4:67:
                    60:1e:f1:4e:f5:42:07:f1:18:c0:28:ce:bf:11:d1:
                    fc:ab:a1:75:6a:ce:e1:31:48:99:c2:e2:8e:e9:18:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C4:FB:DF:2E:4E:B3:47:79:81:3E:72:02:70:CF:5A:28:55:6F:C8
            X509v3 Authority Key Identifier:
                keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a7:b2:1c:18:02:b6:f3:9f:12:bc:e9:29:e6:b6:09:bd:13:
         dd:c4:d9:fc:08:18:27:76:b6:33:66:2b:84:41:1f:ad:8e:a8:
         84:97:30:f1:bf:fd:41:ab:c2:e6:f6:03:9e:af:69:35:57:05:
         72:d2:e9:9d:b0:3f:c9:c6:8e:86:a5:86:b3:cb:bb:8e:87:4c:
         b8:00:c7:94:5c:41:93:88:1b:dd:39:c9:89:67:83:ed:f6:1b:
         98:1f:28:3c:42:b2:47:a7:cb:71:d3:d9:0e:c8:dd:ea:ee:63:
         53:55:0f:a2:92:52:cc:4a:c7:7f:8b:71:a4:6b:84:c8:f4:d4:
         d0:58:f5:6c:95:bd:58:23:4f:21:a6:e4:5f:fb:43:56:ef:c9:
         ac:67:18:5c:fa:9f:db:3b:6e:32:e7:8c:c0:8b:c3:b3:3e:ab:
         42:fc:c3:4b:f0:c0:99:38:5c:bc:b2:30:7a:09:13:e3:48:f3:
         ec:ee:b2:9f:4a:8e:7c:de:a7:6f:2b:c9:97:4f:48:4a:73:4e:
         c6:79:e2:0e:c0:4a:82:8d:39:9f:83:8f:bc:97:25:6a:23:5a:
         24:e3:73:3b:92:3d:fd:08:30:d2:ef:6a:8c:59:e0:92:35:c7:
         a0:5a:34:59:13:04:94:36:8b:70:c3:65:91:a0:4d:76:71:b6:
         92:8d:e9:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF
QTkxOTNCNjAwHhcNMjYwMTI0MjIzNTU2WhcNMjYwMTMxMjIzNTU2WjAYMRYwFAYD
VQQDDA02OTc1NDk0Yy1jNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnfEsVt9rzrMnj7F6U0hwplBpajCLGR98lFxwkgnUBW6LK3vzTB36PxZ4FO9b
J1F3D+vRmILsjKdxAY6EZRN3VhQWZNI+BwfZBhgqA0T7/mDbdGTli2LWOAkC7SFk
uPw3/mRUaLciYEeUE28iU3bVfyXRC1n0JAoYuos69czmaxDPpTyrWXFLp4LX6ZvT
EO3I9kOChQZyxmFBz1qCt9XC9QR0ZJg3mH2ygYV5SiY9xetAQlAAaDeqNrdHHM+c
atTwwEwv83p3Lb7mDZiB2KKw2F8GO6iVqDHKGteDjBy+xGdgHvFO9UIH8RjAKM6/
EdH8q6F1as7hMUiZwuKO6RgGCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnE+98u
TrNHeYE+cgJwz1ooVW/IMB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3
NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE
N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCip7IcGAK2858SvOkp5rYJvRPdxNn8CBgndrYzZiuEQR+tjqiElzDx
v/1Bq8Lm9gOer2k1VwVy0umdsD/Jxo6GpYazy7uOh0y4AMeUXEGTiBvdOcmJZ4Pt
9huYHyg8QrJHp8tx09kOyN3q7mNTVQ+iklLMSsd/i3Gka4TI9NTQWPVslb1YI08h
puRf+0NW78msZxhc+p/bO24y54zAi8OzPqtC/MNL8MCZOFy8sjB6CRPjSPPs7rKf
So583qdvK8mXT0hKc07GeeIOwEqCjTmfg4+8lyVqI1ok43M7kj39CDDS72qMWeCS
NcegWjRZEwSUNotww2WRoE12cbaSjelt
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:45:37 2026 by rpki-client