This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
File:                     ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json)
Hash identifier:          xP6FcVYkTXyo9ytNNXFk8SBUBSctN/duB+ig2x/MqfE=
Subject key identifier:   8A:C2:43:17:24:CF:A5:7C:FC:4F:D9:0E:C3:6F:89:8D:BE:B6:BC:82
Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Certificate issuer:       /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Certificate serial:       01AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
Manifest number:          01A7
Signing time:             Sun 11 Jan 2026 02:34:14 +0000
Manifest this update:     Sun 11 Jan 2026 02:34:14 +0000
Manifest next update:     Sun 18 Jan 2026 02:34:14 +0000
Files and hashes:         1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: VyQpO6LVtmEtTQ9fit0X1RCIsdTA+GSYdLsQlF3G3uI=)
                          2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: btNm9lgvWpgU2p+BlBu9ugdzhnB1MwJxPbCJvAvXYk4=)
                          3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: 0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
                          rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 02:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
        Validity
            Not Before: Jan 11 02:34:14 2026 GMT
            Not After : Jan 18 02:34:14 2026 GMT
        Subject: CN=69630c26-2510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e0:cc:ab:da:c6:18:0d:34:bd:91:8f:f5:0e:
                    64:b2:cd:9a:78:37:b6:6b:26:6b:07:2e:98:39:0e:
                    cf:04:58:5d:50:72:ec:ee:f5:a0:91:95:ec:09:e7:
                    7d:fc:3e:96:ce:30:4d:ff:74:3c:b9:7a:4a:36:68:
                    3f:25:95:a9:e2:65:89:16:da:cc:99:f6:d2:b8:b8:
                    cb:74:1f:b5:fa:70:84:06:b0:2e:e8:cc:78:15:28:
                    53:00:de:f4:c2:5d:26:43:49:c9:c1:fd:4e:d5:ed:
                    66:b6:61:f0:4c:2f:15:b6:e0:48:23:81:ec:90:3a:
                    00:e8:45:30:55:56:1d:b4:7b:53:af:5f:a8:43:f8:
                    c3:db:e9:eb:b8:99:25:1c:71:ec:1a:3a:1b:fb:fe:
                    40:35:2d:cb:04:c8:21:10:61:5d:85:f0:df:39:ff:
                    c5:2b:a5:f8:bd:d2:ce:8e:84:f2:13:00:50:b7:bc:
                    16:c3:29:0d:9c:ad:bf:f8:75:b8:e8:4d:3a:6f:bf:
                    1a:01:97:82:7b:4a:a8:b2:48:b7:e4:f6:64:e3:58:
                    9d:a2:d6:f3:a5:6c:b9:60:f1:bb:32:3e:84:c8:87:
                    d6:a4:08:31:3c:e1:c9:dc:eb:19:25:f9:bc:37:cb:
                    90:c1:94:08:92:ee:39:11:b4:23:c7:0e:7e:d7:04:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C2:43:17:24:CF:A5:7C:FC:4F:D9:0E:C3:6F:89:8D:BE:B6:BC:82
            X509v3 Authority Key Identifier:
                keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ea:69:3b:82:f0:e8:d8:9a:fa:29:79:1f:0a:dd:cc:79:8e:
         a5:8c:ba:66:05:3c:0b:5c:06:14:e9:55:23:99:79:a2:f5:16:
         88:5a:6c:c0:4e:aa:bc:93:4b:07:f0:57:a8:43:91:bb:bc:13:
         87:c9:f4:79:b2:6e:eb:cd:81:ab:5e:c1:57:db:d8:3c:7c:6f:
         80:a4:b3:76:1f:89:47:13:5c:f0:e6:b3:dd:dd:b3:c3:a8:08:
         3a:bf:b3:15:fa:c7:a9:c3:23:01:c9:f3:f5:ab:d3:26:98:54:
         4d:6c:09:85:cd:85:b2:41:46:16:75:ab:2f:ba:fa:d4:db:06:
         b9:c7:4c:9a:ed:ee:6d:3f:fb:49:af:6f:46:ed:ef:c2:c7:2b:
         56:9c:cf:27:65:0d:48:50:e8:a1:81:9d:2f:8a:1b:31:cb:bb:
         6c:99:08:35:c1:bb:d1:02:65:63:ab:05:f6:5f:4b:fd:bd:13:
         77:4c:7a:98:76:21:8a:b1:4b:af:58:89:cb:a5:d6:8d:f4:00:
         a6:35:17:2a:e0:28:f2:b4:9c:04:bf:9c:ba:df:d0:8e:92:eb:
         9d:49:0a:e1:0d:70:52:51:e7:47:47:d6:7e:ee:97:ec:e5:fa:
         17:b0:d3:4a:90:91:52:89:67:79:ca:4a:da:b4:aa:03:a8:3b:
         cb:2d:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:53:38 2026 by rpki-client