This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
File:                     gJihpKZXp3CvvWalja3gGT9aHog.mft (raw, json)
Hash identifier:          eoNhJ9SWJGyLOMgegqhzGUgoVnrye2BPj7OWANJwNXw=
Subject key identifier:   7B:65:3D:0B:68:7E:A9:A0:2A:DF:40:1A:FE:05:32:B9:28:D1:ED:6B
Authority key identifier: 80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88
Certificate issuer:       /CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
Certificate serial:       05D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
Manifest number:          05CC
Signing time:             Sat 10 Jan 2026 22:17:58 +0000
Manifest this update:     Sat 10 Jan 2026 22:17:58 +0000
Manifest next update:     Sat 17 Jan 2026 22:17:58 +0000
Files and hashes:         1: gJihpKZXp3CvvWalja3gGT9aHog.crl (hash: Fp7iCknP/ldZbjd/pcdlUmFe3CH8FjQDSJipPDeaXm8=)
                          2: 81C83A9ADD9711ECB450D332C4F9AE02.roa (hash: evwQjea0SxB2bnXdb3qi3otan+J/1WyJKAiscqqxUSg=)
                          3: 9718BA74EA9E11EB8575F62AC4F9AE02.roa (hash: TE3s0G2x6gReIvykLHQ1D6r2CYQk8g9jtQHZlN8D244=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl
                          rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 22:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A6D2, serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
        Validity
            Not Before: Jan 10 22:17:58 2026 GMT
            Not After : Jan 17 22:17:58 2026 GMT
        Subject: CN=6962d016-d885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:81:3c:73:20:01:59:7b:ed:62:41:76:16:
                    cf:b0:8f:55:f4:bb:22:ee:f0:aa:0b:f3:90:22:6e:
                    c6:8a:e9:0f:e8:c0:7c:bd:4e:89:d3:bd:b7:c6:ca:
                    fc:5e:1b:d5:79:d5:b0:b6:00:8d:c7:f4:06:f3:69:
                    83:a9:34:e8:3f:6c:fe:3b:25:ba:d5:ab:a8:57:fc:
                    7d:8f:99:73:6f:0c:22:ab:ab:da:03:cc:4a:d0:51:
                    8b:3d:27:e6:fa:66:1d:8c:69:29:6e:cc:ae:cc:ff:
                    61:b8:7c:23:50:52:bb:83:ab:e7:fb:47:81:3b:01:
                    d3:6a:2c:52:fc:40:8d:12:55:98:f6:54:d6:d9:c8:
                    f0:f1:a4:13:90:1e:be:5c:29:54:c7:91:f7:7c:bb:
                    5b:05:f9:fa:fe:2d:81:cd:a4:9d:2e:b0:27:d1:3c:
                    4e:62:4f:75:fa:19:09:f0:1e:1d:cd:2b:4c:5b:1d:
                    f9:2b:f1:de:dc:08:86:e5:29:4c:2c:7f:8e:71:8a:
                    9d:d1:29:be:ef:6b:57:68:58:e4:b4:28:3b:b0:c6:
                    8e:e2:d2:5c:2b:b9:4e:21:80:67:47:88:0e:98:c1:
                    47:89:3c:55:59:83:b0:7d:79:f2:bc:85:5f:72:31:
                    43:10:63:34:dd:71:30:78:a3:b9:f4:16:7e:29:c3:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:65:3D:0B:68:7E:A9:A0:2A:DF:40:1A:FE:05:32:B9:28:D1:ED:6B
            X509v3 Authority Key Identifier:
                keyid:80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:ed:82:8a:14:f7:d2:96:30:da:ff:0f:23:8d:af:b5:7c:
         1b:1c:1d:db:e6:3b:34:b3:47:d1:45:c5:d3:93:7a:1c:81:d7:
         48:4a:c1:7b:d8:cc:58:85:0d:5d:ad:f6:d9:4e:26:fa:49:41:
         b4:84:42:81:0a:f9:86:07:78:7a:95:d6:3d:e7:ef:5a:f1:25:
         47:e5:a5:01:1b:01:56:3e:c2:c4:68:23:23:62:cc:e8:e8:b4:
         9a:a8:a1:74:33:63:55:79:f4:8e:00:7e:f5:a0:20:fe:2b:a6:
         6d:68:e0:0b:52:41:48:8e:e9:cc:ea:61:d5:1a:fd:ae:a4:6b:
         56:5d:11:26:86:35:3b:1e:af:02:ad:8a:8a:bd:3e:98:b0:b0:
         09:09:5c:1c:c1:ce:d0:be:9f:11:70:75:68:38:07:3a:25:ca:
         30:3a:c2:63:f7:29:5d:70:3f:c5:52:f5:04:e8:3f:f5:a8:95:
         8b:1f:5f:8a:63:29:d9:43:0d:8d:b8:4b:e2:69:b7:c6:ce:e6:
         85:e6:07:85:cb:c0:86:f7:44:cc:03:5c:d3:62:c5:6c:ee:c3:
         e4:32:89:6d:d7:3c:f4:2f:73:80:da:e8:02:ac:6a:e5:7f:bf:
         17:3e:83:0c:31:36:58:6f:d0:02:a8:f0:a9:62:f3:d6:db:b8:
         ce:8d:5d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 11:32:07 2026 by rpki-client