This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File:                     G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier:          uexO64WExt6Onf3JQjXZAF5xdX1VGBqlZdL2c44WuMs=
Subject key identifier:   EB:7B:93:B0:23:D7:7F:84:CE:72:28:FE:A2:25:E6:E7:73:B2:26:36
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer:       /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial:       095A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number:          095A
Signing time:             Mon 12 Jan 2026 19:33:01 +0000
Manifest this update:     Mon 12 Jan 2026 19:33:00 +0000
Manifest next update:     Mon 19 Jan 2026 19:33:00 +0000
Files and hashes:         1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: l7fkAX0vSktn/TCUTZghlCVXH9S+8DDrkBMgljcJjy8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 14:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2394 (0x95a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
        Validity
            Not Before: Jan 12 19:33:00 2026 GMT
            Not After : Jan 19 19:33:00 2026 GMT
        Subject: CN=69654c6d-1f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:8c:fe:95:5b:a2:dd:aa:9b:1d:61:76:35:
                    8f:a9:6a:d9:56:7d:b5:fb:ba:d5:23:4b:8d:c3:68:
                    94:01:35:2f:77:24:7e:2d:60:5c:9a:f9:3e:4f:0e:
                    c0:7b:87:d8:df:3e:ad:cd:ef:23:55:3d:bb:69:a0:
                    54:74:93:8e:07:31:ae:23:c8:e6:d5:55:b1:09:2c:
                    fd:6c:ce:86:da:8b:9a:6e:1e:4d:12:1e:3f:51:91:
                    33:99:4c:2c:02:d3:24:57:21:db:e4:c3:6a:c4:9e:
                    b3:57:63:70:67:18:98:3f:cc:ff:d9:e5:4f:e6:43:
                    c1:42:30:0e:5f:39:19:8b:93:c3:6a:bc:2b:52:96:
                    bd:56:9c:56:c3:ed:c8:46:76:9c:b0:00:a7:62:08:
                    0b:e5:29:68:5a:58:0e:a7:39:b5:72:44:42:45:f7:
                    dd:b4:0a:27:90:a8:4b:a5:a8:7c:a0:06:56:9c:33:
                    f1:7a:1f:5c:b8:da:e5:cc:b3:27:1d:aa:03:b1:14:
                    18:b0:f4:2c:6c:ef:c3:6d:35:b7:40:5c:a2:7d:24:
                    db:8d:84:87:2f:50:2f:72:d2:6c:e0:f9:cc:df:72:
                    8d:8c:fc:15:f3:8d:3c:a7:4d:2b:ae:61:72:1e:33:
                    ee:30:df:cf:63:79:89:8d:03:2e:a7:fe:33:90:88:
                    92:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7B:93:B0:23:D7:7F:84:CE:72:28:FE:A2:25:E6:E7:73:B2:26:36
            X509v3 Authority Key Identifier:
                keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:13:8f:9d:89:09:6f:f3:f8:cf:51:99:c3:fb:56:9c:42:0f:
         68:9b:bd:4a:3f:58:f4:d1:f3:33:6b:ae:74:5f:89:00:e1:8b:
         12:73:9a:41:ff:d4:0b:73:95:86:df:11:16:41:6a:d5:db:f5:
         e8:6d:2f:93:16:99:14:62:00:8e:45:40:cb:3c:b7:90:19:f3:
         fe:cc:65:ba:16:32:e9:92:33:6c:54:d0:c8:4f:ae:2f:83:17:
         5d:18:85:de:d6:a0:2f:dd:41:5f:57:ca:5a:08:5b:cf:06:70:
         71:6e:df:a8:7b:c0:8d:46:5d:f7:f9:cf:f5:fb:b0:a2:78:67:
         57:ca:e0:7f:11:5b:e3:bb:a9:1c:c3:f7:72:1b:4f:47:a7:07:
         9a:19:66:79:c7:4f:5e:b2:6f:ca:b5:88:d7:fc:13:6e:cd:71:
         8d:d0:e4:c6:fe:26:cf:c9:74:3b:5f:bd:2c:85:73:c1:e7:27:
         9f:81:c6:2e:df:9f:cc:21:f2:b9:65:ea:58:29:02:59:49:78:
         e7:ce:73:8d:2b:0b:83:87:4b:a3:35:1e:0f:fb:67:31:27:3a:
         79:48:2d:52:95:55:ca:4b:d2:02:15:d4:51:b3:5c:b2:40:23:
         26:b0:11:b1:c5:f2:80:c6:75:c4:5b:8c:c1:3d:0b:c4:74:eb:
         41:7a:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:13:19 2026 by rpki-client