This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
File:                     ggCxpefBdgW1czx0_sHvEnOz6iU.mft (raw, json)
Hash identifier:          uY/klpLrkHmfGRhFWakoxZevaIs3TllazxbjxkSu+5w=
Subject key identifier:   C4:CC:FB:58:90:DD:1D:F3:CC:CE:37:AA:DF:4E:70:CB:A5:18:6E:FF
Authority key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25
Certificate issuer:       /CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25
Certificate serial:       34F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
Manifest number:          34F3
Signing time:             Mon 12 Jan 2026 15:11:16 +0000
Manifest this update:     Mon 12 Jan 2026 15:11:16 +0000
Manifest next update:     Mon 19 Jan 2026 15:11:16 +0000
Files and hashes:         1: ggCxpefBdgW1czx0_sHvEnOz6iU.crl (hash: C+oTivFL0FirlZJ1z7MSAiLEfxUvPiLyRwqeYlGZ21g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl
                          rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 15:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13555 (0x34f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AD0C, serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25
        Validity
            Not Before: Jan 12 15:11:16 2026 GMT
            Not After : Jan 19 15:11:16 2026 GMT
        Subject: CN=69650f14-e3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c1:94:4d:9c:36:70:92:6c:3b:3b:a3:34:7f:
                    e3:2e:db:d6:e3:a8:e4:fb:1b:77:c3:0a:d3:f1:49:
                    d1:e0:a1:d8:11:ac:ab:19:c0:b8:8e:d2:6b:ea:ef:
                    56:32:a3:08:c1:2b:b9:8a:69:2c:7e:79:47:bf:05:
                    ef:ad:16:03:05:a2:17:23:c1:38:9c:42:06:39:38:
                    35:f5:d0:fd:74:dc:48:e3:f8:69:fd:a9:f2:8f:27:
                    ce:00:54:66:8b:b0:86:df:0c:9f:37:e8:2e:2e:11:
                    48:f9:15:5c:a2:51:42:45:ef:f4:ca:b2:d1:79:85:
                    05:5c:fe:fe:8c:4c:1c:73:4f:fa:63:18:ef:85:7a:
                    e6:1b:fa:4e:02:cd:05:fe:54:e4:cb:f7:75:89:78:
                    8a:3c:23:e4:ac:03:ba:c5:6d:5a:ee:8a:a1:bd:78:
                    d9:e9:b6:54:5e:a9:ee:4b:2d:3b:5a:5e:a3:0d:91:
                    fa:51:33:6f:ee:fb:31:0a:14:6b:1f:32:f9:e8:3f:
                    3d:73:d0:e3:3d:b7:2e:09:43:e3:60:dd:67:ce:51:
                    c8:80:34:56:53:84:fd:e2:33:04:23:1b:c2:4a:3d:
                    40:9b:fd:d0:f5:b7:7c:83:6e:c5:1d:a3:80:68:bf:
                    a5:e7:b2:43:cc:a2:44:54:2a:c3:31:54:a3:99:4e:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CC:FB:58:90:DD:1D:F3:CC:CE:37:AA:DF:4E:70:CB:A5:18:6E:FF
            X509v3 Authority Key Identifier:
                keyid:82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ae:c4:c4:b4:10:7b:e0:77:8e:ef:83:4e:8e:b6:5b:54:1d:
         71:db:a0:bf:f4:53:12:e2:bc:fc:3a:db:14:f9:9f:4d:c9:18:
         72:30:c4:22:93:49:fc:a5:96:e8:23:f8:6a:73:75:56:e0:4d:
         c8:60:fc:f2:90:d2:6c:90:e7:34:c8:1c:75:e3:43:bb:c1:11:
         3b:a3:b0:d6:83:86:49:6a:81:03:5f:3d:9c:62:8a:72:ee:0b:
         81:74:12:19:91:57:96:8f:9f:18:a8:40:fa:41:9f:6e:40:93:
         c0:84:74:6a:af:58:d9:fc:13:99:83:b7:f0:85:e3:01:76:24:
         98:59:61:82:20:41:9d:df:6f:4e:cc:ed:fb:20:0f:5b:ea:bc:
         8e:45:47:c9:bb:ed:09:c5:f3:6c:49:9d:ee:b0:f0:9d:a1:4b:
         9c:20:32:10:43:ac:8a:83:df:41:6e:89:6f:bd:ba:53:f4:20:
         58:28:18:f0:20:fe:97:9e:f9:ec:49:37:1a:a2:a9:16:30:ae:
         b5:29:d3:bc:81:09:6e:64:e7:eb:5b:1b:da:5a:d0:b5:b8:56:
         8c:17:b3:38:20:c2:64:9f:92:d3:ea:32:17:00:65:76:a5:e9:
         42:e9:1b:5f:65:36:a3:01:8d:cc:78:21:70:7a:86:09:18:27:
         ea:f2:1b:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFEMEMxMTAvBgNVBAUTKDgyMDBCMUE1RTdDMTc2MDVCNTczM0M3NEZFQzFFRjEy
NzNCM0VBMjUwHhcNMjYwMTEyMTUxMTE2WhcNMjYwMTE5MTUxMTE2WjAYMRYwFAYD
VQQDDA02OTY1MGYxNC1lM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4cGUTZw2cJJsOzujNH/jLtvW46jk+xt3wwrT8UnR4KHYEayrGcC4jtJr6u9W
MqMIwSu5imksfnlHvwXvrRYDBaIXI8E4nEIGOTg19dD9dNxI4/hp/anyjyfOAFRm
i7CG3wyfN+guLhFI+RVcolFCRe/0yrLReYUFXP7+jEwcc0/6YxjvhXrmG/pOAs0F
/lTky/d1iXiKPCPkrAO6xW1a7oqhvXjZ6bZUXqnuSy07Wl6jDZH6UTNv7vsxChRr
HzL56D89c9DjPbcuCUPjYN1nzlHIgDRWU4T94jMEIxvCSj1Am/3Q9bd8g27FHaOA
aL+l57JDzKJEVCrDMVSjmU6p2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTM+1iQ
3R3zzM43qt9OcMulGG7/MB8GA1UdIwQYMBaAFIIAsaXnwXYFtXM8dP7B7xJzs+ol
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQwQy8xQjBCMzU4RTFE
QUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRnVzFjengwX3NIdkVuT3o2
aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dnQ3hwZWZCZGdXMWN6eDBfc0h2RW5PejZpVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUQwQy8xQjBCMzU4RTFEQUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRn
VzFjengwX3NIdkVuT3o2aVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCVrsTEtBB74HeO74NOjrZbVB1x26C/9FMS4rz8OtsU+Z9NyRhyMMQi
k0n8pZboI/hqc3VW4E3IYPzykNJskOc0yBx140O7wRE7o7DWg4ZJaoEDXz2cYopy
7guBdBIZkVeWj58YqED6QZ9uQJPAhHRqr1jZ/BOZg7fwheMBdiSYWWGCIEGd329O
zO37IA9b6ryORUfJu+0JxfNsSZ3usPCdoUucIDIQQ6yKg99BbolvvbpT9CBYKBjw
IP6XnvnsSTcaoqkWMK61KdO8gQluZOfrWxvaWtC1uFaMF7M4IMJkn5LT6jIXAGV2
pelC6RtfZTajAY3MeCFweoYJGCfq8htv
-----END CERTIFICATE-----
Generated at Tue Jan 13 05:17:55 2026 by rpki-client