This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
File:                     gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json)
Hash identifier:          FpfY/V/XKDAOMk/kLEnt4eyqsofNktpiRpnfUXl5qEs=
Subject key identifier:   63:BA:26:0A:BE:DB:F3:D9:67:0F:90:C5:A2:7A:8E:44:F0:13:4F:09
Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
Certificate issuer:       /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Certificate serial:       079D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
Manifest number:          0797
Signing time:             Sat 24 Jan 2026 20:50:23 +0000
Manifest this update:     Sat 24 Jan 2026 20:50:23 +0000
Manifest next update:     Sat 31 Jan 2026 20:50:23 +0000
Files and hashes:         1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: mY6q+DVUUlektKJq1yORAyAxVjthq5jqKjHSIqYhNB4=)
                          2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: 1DntbSegZDHX23J1Cb/X4XMuyc1EaeZ5orMACuIC6N0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
                          rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1949 (0x79d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
        Validity
            Not Before: Jan 24 20:50:23 2026 GMT
            Not After : Jan 31 20:50:23 2026 GMT
        Subject: CN=6975308f-e645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:a4:35:84:e1:fb:d8:7e:ba:ec:3b:2c:ec:
                    b2:8a:8f:fb:3d:b3:90:13:c4:7c:17:40:bd:44:a9:
                    2c:33:95:92:d9:6d:c5:7b:64:71:05:4f:04:8b:11:
                    0c:a8:e6:e2:1d:62:cc:64:49:a6:76:c8:bb:2c:bb:
                    b6:ae:2b:ba:46:49:1e:df:97:1d:22:0c:e2:c6:33:
                    43:39:a2:8f:d7:e7:58:91:72:87:07:0a:7a:ff:ca:
                    eb:9e:4f:ac:93:48:1b:7d:a8:69:4b:5b:33:22:d6:
                    43:f3:dc:5f:a8:29:87:c6:be:5d:4d:a5:71:f8:f1:
                    3e:94:15:ad:1c:95:b9:c4:4d:e9:83:e1:21:58:b4:
                    53:b7:3c:1a:ef:40:65:67:d0:09:6e:03:b6:8b:99:
                    49:d8:b7:22:81:f1:d1:cd:d4:b3:79:45:41:49:c9:
                    58:79:37:49:3e:ab:79:90:57:bf:7c:4a:87:59:3c:
                    e2:10:4f:c6:80:f2:27:ea:49:96:c0:a3:8e:6f:2b:
                    b6:42:86:b6:37:a1:49:66:7c:f6:df:eb:b3:32:ff:
                    56:5c:8b:f7:d8:32:c0:25:b8:ef:d4:e7:b9:85:48:
                    0c:ec:c8:ac:0d:73:5f:d8:b5:cf:6e:d2:26:c6:e7:
                    67:8a:ef:99:ef:29:86:04:60:7d:81:f5:fa:b2:77:
                    1b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BA:26:0A:BE:DB:F3:D9:67:0F:90:C5:A2:7A:8E:44:F0:13:4F:09
            X509v3 Authority Key Identifier:
                keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:50:9f:97:35:21:cc:be:53:01:f6:28:e7:e5:59:93:86:1e:
         ca:55:f4:d0:f9:f1:41:64:b6:a5:07:8b:57:3c:49:58:06:e3:
         31:41:b2:61:60:51:e2:95:ba:65:96:4d:41:81:e4:8b:14:d0:
         3a:c1:c4:11:0c:a7:90:67:ef:22:9c:d0:3a:0b:ff:52:fc:f3:
         56:82:10:48:d6:b1:9d:e3:6c:a6:af:c7:76:64:84:bc:54:bb:
         79:a5:e9:f8:0a:e2:08:7f:ed:f6:bd:ab:1e:15:bc:92:cf:7c:
         2d:42:cf:e8:b8:8a:5c:57:14:c4:0a:e3:0f:d2:63:f8:8c:29:
         e5:c2:1c:df:fc:cd:b0:ca:ea:f9:96:d4:94:37:b6:10:42:ba:
         eb:b3:75:18:50:dc:88:6f:6a:35:c7:a9:3c:77:3a:64:e4:0f:
         82:a2:56:8f:60:58:63:e3:86:cb:27:d6:78:ec:9d:8d:70:82:
         22:2d:d6:32:cc:99:cc:33:0b:73:f3:89:5c:72:91:d7:b2:a0:
         c9:db:d6:ca:70:0c:7e:40:c0:5d:c9:81:91:a1:d5:d2:84:8a:
         2e:23:52:93:27:0e:39:9b:e1:50:a0:69:31:46:da:f2:64:c1:
         e8:a8:ab:2e:22:7c:ba:14:b1:e0:d9:21:d0:50:55:2d:2f:d4:
         a1:6d:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:01:48 2026 by rpki-client