This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
File:                     g6pYiXoVH0rLc4TwtV8R7Z164X8.mft (raw, json)
Hash identifier:          Ic9fYlkbr99RvEk385aI/Nngx8aeja6JZxA6mNgKIx4=
Subject key identifier:   77:4E:55:2C:85:6D:BB:30:45:B5:97:9B:62:67:E6:D9:25:82:27:B9
Authority key identifier: 83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F
Certificate issuer:       /CN=A915B3AE/serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
Manifest number:          0166
Signing time:             Fri 09 Jan 2026 03:21:15 +0000
Manifest this update:     Fri 09 Jan 2026 03:21:15 +0000
Manifest next update:     Fri 16 Jan 2026 03:21:15 +0000
Files and hashes:         1: g6pYiXoVH0rLc4TwtV8R7Z164X8.crl (hash: WLGPTKM9dwaf+R8Luijl+DQ+nLGJcjjOLCU0L2gZpHE=)
                          2: 1AD9E28ECA9411EE9062590AC4F9AE02.roa (hash: ReL28hF+/x2h0RKcTZEQ3GcIbkXQcDw6s6esZ8caJwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl
                          rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 03:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B3AE, serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
        Validity
            Not Before: Jan  9 03:21:15 2026 GMT
            Not After : Jan 16 03:21:15 2026 GMT
        Subject: CN=6960742b-847c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:2f:84:40:5e:e1:6a:9e:bd:58:31:8e:2b:
                    57:73:8d:a2:b6:06:b1:7c:e9:54:62:ae:b2:25:50:
                    c6:4f:a6:70:4c:6c:29:d3:7d:59:ea:5f:20:41:50:
                    3b:60:6a:f3:67:b2:d1:f1:5a:ec:b9:93:8b:9b:dc:
                    c4:2c:50:a6:e8:1e:9d:56:f5:f6:16:2c:65:f8:99:
                    3b:2d:f3:5f:e9:a1:0f:b0:7c:03:3d:28:c8:d3:28:
                    08:a5:86:0e:2d:ba:ba:ca:7a:fa:a5:e3:d8:1a:43:
                    aa:ab:12:ca:73:e0:fb:7b:fe:99:6d:93:b8:2a:68:
                    d0:07:04:68:75:24:29:cc:a3:a4:e6:d5:56:41:11:
                    31:dd:b4:38:53:d3:c6:78:b6:54:dc:58:45:1a:36:
                    27:50:20:e7:2a:bf:9f:e2:3e:39:00:1b:ce:6a:05:
                    7a:37:4d:3f:f1:08:f4:9d:90:ae:3c:3e:93:04:6d:
                    25:bb:e2:a0:a0:0e:8d:76:b8:32:d5:d0:4a:b9:cd:
                    66:12:1d:af:62:cd:4a:ce:34:48:2c:f8:5b:dd:9f:
                    74:bc:34:15:c1:90:ed:5d:f3:d8:69:40:17:b3:00:
                    21:ba:1a:39:df:86:1e:ff:0c:4e:dd:7f:27:ac:79:
                    77:97:92:31:b6:e0:e9:d6:11:87:7d:d3:68:a8:77:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4E:55:2C:85:6D:BB:30:45:B5:97:9B:62:67:E6:D9:25:82:27:B9
            X509v3 Authority Key Identifier:
                keyid:83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:eb:67:6b:b2:77:8e:56:8a:09:39:ee:c9:4c:4e:1b:a7:99:
         3f:8a:af:c1:bf:00:32:ae:07:e1:cd:15:57:ed:5c:99:c7:86:
         fb:d0:51:43:b6:11:de:4b:06:66:ee:c4:69:4e:58:00:e0:ba:
         ea:a7:33:b9:57:31:87:83:61:56:50:82:b1:8a:6e:d4:3f:d0:
         5b:98:c3:17:48:f9:c2:65:b8:9a:a7:91:af:e4:a2:11:7a:52:
         7e:5d:5d:ac:c4:07:45:39:eb:39:c0:0e:85:5d:e7:5d:ad:60:
         14:79:a7:6d:16:c7:96:28:df:d2:80:7c:f9:12:3f:52:f6:0c:
         1c:0b:bd:5a:ae:0b:7c:d8:7a:98:b9:8b:6a:ac:a4:fb:42:12:
         fb:bd:d4:cf:10:7f:ec:86:dd:ae:96:04:16:ae:ff:fd:b2:9b:
         b1:cc:1e:1d:0a:23:18:dc:1c:34:2f:f1:c7:14:a8:43:47:1a:
         c8:c2:c4:60:4d:74:b7:d7:29:8b:66:f1:bf:ce:8d:8c:0d:a5:
         5b:32:07:91:ab:7c:a0:b4:cd:3f:33:49:4c:17:7b:26:c4:f5:
         b3:47:80:24:8a:62:ec:eb:3b:3c:68:c5:7a:63:8b:02:0a:5a:
         a2:b6:8c:a1:d7:49:33:6d:aa:1f:a3:32:09:30:a1:45:cf:b4:
         09:53:54:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:23:54 2026 by rpki-client