This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
File:                     gBf49rHsAjxINqRXp7BYQqBxnyg.mft (raw, json)
Hash identifier:          HMx0jqXkjIyh1a3aopFUq5cLecoyjzJJbHJa9MBysTY=
Subject key identifier:   73:80:58:84:ED:F2:CA:0A:E2:94:E3:DB:1D:C9:A0:F4:78:42:A6:13
Authority key identifier: 80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28
Certificate issuer:       /CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
Certificate serial:       0BB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
Manifest number:          0BAE
Signing time:             Mon 12 Jan 2026 18:30:39 +0000
Manifest this update:     Mon 12 Jan 2026 18:30:38 +0000
Manifest next update:     Mon 19 Jan 2026 18:30:38 +0000
Files and hashes:         1: gBf49rHsAjxINqRXp7BYQqBxnyg.crl (hash: e6iA364UhmVSEF+vktD8cFo1U9p/fH3SkzH49dgybPI=)
                          2: 6DEDEF66387A11EA9450A37CC4F9AE02.roa (hash: o4u5Q2Jc2gCY8tVjsD1bgPzcbwwoDr6mqctN+7fPekU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl
                          rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 18:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2997 (0xbb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B088, serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28
        Validity
            Not Before: Jan 12 18:30:38 2026 GMT
            Not After : Jan 19 18:30:38 2026 GMT
        Subject: CN=69653dcf-44a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:75:f6:d9:b4:c8:5e:2d:5b:bb:67:c9:df:5b:
                    ed:91:73:fa:67:c8:c3:7c:a4:97:88:de:87:62:0d:
                    86:c2:ba:d1:eb:22:7c:7b:27:1b:32:3a:6a:0d:9a:
                    09:8b:24:92:98:80:4a:7e:4f:ce:33:62:19:79:e4:
                    da:bc:d0:41:5c:5c:ab:ce:d4:24:fc:c3:7a:47:ef:
                    23:3d:69:43:8e:6c:17:f1:9a:43:00:92:df:52:1a:
                    3f:15:9a:76:7f:2f:60:56:cc:bb:af:c8:4c:62:2e:
                    c5:b3:b4:dc:3f:45:82:86:fb:2e:9d:6e:ba:52:93:
                    0e:b4:3b:ad:50:6c:f8:36:90:48:bf:76:a7:26:ac:
                    75:34:d8:3e:09:b6:40:ba:52:ea:34:7a:bf:8e:a1:
                    40:ca:38:84:05:e7:ce:db:49:75:4a:e9:0e:86:92:
                    97:d1:d0:d3:a4:1a:04:9f:ac:b1:9b:7d:2f:91:eb:
                    e5:46:6e:c6:f2:05:30:6e:16:64:28:1c:2b:0f:9c:
                    11:0a:46:c8:2f:9b:be:71:05:b5:b4:6e:fd:79:59:
                    3b:2d:60:af:50:a4:6c:29:a5:43:3e:19:96:f7:d9:
                    77:0e:8d:7e:4e:e3:d6:f3:72:df:fb:f2:5d:90:20:
                    c0:72:85:e3:f5:cd:d9:82:54:e0:a9:db:1b:f5:ff:
                    e1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:80:58:84:ED:F2:CA:0A:E2:94:E3:DB:1D:C9:A0:F4:78:42:A6:13
            X509v3 Authority Key Identifier:
                keyid:80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f5:81:cc:39:54:fb:9d:41:97:bb:41:ff:53:7f:dc:a0:c4:
         5a:82:f2:ba:d7:9f:42:ec:2c:06:9b:45:9f:2a:4e:83:29:dd:
         a4:7e:f5:24:89:51:f0:52:2b:11:1c:e2:30:3b:ba:06:51:53:
         df:8d:30:50:70:5d:33:d0:ce:72:8c:28:b8:80:7e:ea:fa:99:
         f2:b7:3c:33:43:7d:95:d4:d0:1d:57:2f:49:74:bf:66:49:87:
         7d:7e:51:17:f1:52:f9:23:88:70:19:fa:a1:39:ab:ad:5f:6f:
         28:b8:14:5b:cb:2b:8b:84:00:b5:19:4b:55:59:db:41:d6:41:
         cd:9e:f1:13:ad:f2:f3:ae:6a:02:21:d5:fa:06:c1:0c:36:b2:
         2c:c9:55:aa:29:0a:40:99:a0:1a:0a:1c:e8:91:47:13:da:c1:
         fe:17:74:0c:19:6c:cb:06:af:96:96:dc:26:95:e2:dc:11:90:
         b8:d5:2e:46:5a:f5:dd:dd:9e:1c:a4:51:6b:1e:f7:48:b8:5b:
         6f:60:3e:75:4d:cb:cd:72:84:45:46:50:48:0e:7a:6e:d7:9e:
         b2:e1:84:39:f1:7d:e8:ab:82:8f:84:0e:ae:e7:ff:3f:a1:22:
         99:93:fc:89:9e:22:0e:df:f2:07:bd:c3:8a:fc:d7:b9:25:0f:
         d2:a9:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:30:06 2026 by rpki-client