This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
File:                     gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json)
Hash identifier:          QwIdbnUYOAyaSLhdCtbUc4dM/24ld0WBy2LQ0UQ2KhA=
Subject key identifier:   D7:D8:CB:82:AC:95:D9:AF:F3:95:67:8A:0F:AF:27:35:D4:4E:E2:2E
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Certificate issuer:       /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial:       12C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
Manifest number:          12AD
Signing time:             Sat 10 Jan 2026 16:48:35 +0000
Manifest this update:     Sat 10 Jan 2026 16:48:35 +0000
Manifest next update:     Sat 17 Jan 2026 16:48:35 +0000
Files and hashes:         1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: V46IsqtFPLWW80/mc0cPog1ueAWEA+h7e4HazudEeuo=)
                          2: FCE4373ECAA011F0BE834809C4F9AE02.roa (hash: jvyNNRiqRA8v7WOUYd5fwMdRGCc1tnjDj8I4XdR2vBk=)
                          3: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: Sq85s45uXrl7JCtJVQFpetKJe1yt9d4AgSzwgFH0KeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
                          rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 16:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4802 (0x12c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
        Validity
            Not Before: Jan 10 16:48:35 2026 GMT
            Not After : Jan 17 16:48:35 2026 GMT
        Subject: CN=696282e3-d942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:99:97:b9:a4:1f:ff:a3:02:fa:2d:50:d5:e6:
                    93:6b:1c:1f:4e:1a:6d:b1:3d:f4:82:08:75:b6:e0:
                    26:3f:0a:ba:a9:65:f5:0c:cc:72:6b:bd:82:fd:ec:
                    63:d0:51:a2:25:5b:a1:a1:50:af:1a:96:9b:87:4d:
                    2b:fe:8f:2a:5e:33:f3:04:4a:19:ea:a9:2d:27:f9:
                    ba:57:14:ef:d3:1d:c9:76:8e:86:22:c4:b1:2a:51:
                    58:d3:03:a0:26:70:8e:c8:92:c9:11:47:29:97:23:
                    61:01:ca:f5:33:fa:88:2e:26:42:6d:c9:1c:8d:db:
                    a2:58:a1:8d:bc:75:20:fc:3d:f9:d5:48:55:9d:21:
                    ef:99:78:a4:21:a0:56:25:57:aa:b0:2a:71:75:61:
                    74:2d:35:78:e1:3d:43:5d:bb:64:1e:ef:82:8b:16:
                    50:00:4d:cb:f4:7e:d8:2d:0f:77:72:f0:99:e9:0a:
                    b7:f9:e6:09:f4:7d:53:3a:37:7e:73:2a:43:27:b5:
                    3c:03:fa:46:a2:fc:bf:f6:1b:32:60:e3:1b:f2:2c:
                    9a:a5:44:dc:57:92:15:09:95:9a:98:d9:08:de:9c:
                    46:1b:13:3d:33:b8:7d:93:64:45:31:45:f3:42:d1:
                    70:18:f6:b1:91:88:45:1c:e9:31:15:2d:6b:8f:38:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D8:CB:82:AC:95:D9:AF:F3:95:67:8A:0F:AF:27:35:D4:4E:E2:2E
            X509v3 Authority Key Identifier:
                keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b2:ea:c7:21:c1:68:cd:85:5b:95:40:ed:17:f8:c0:0d:4b:
         52:06:47:da:6f:cb:b4:31:53:bb:cb:3d:b5:e6:6b:ca:93:ce:
         e9:47:f8:94:51:18:16:85:0f:5d:52:22:96:3f:11:4c:4c:76:
         32:e5:4e:42:82:bf:53:55:44:ef:74:2e:e1:4a:3c:b9:54:ec:
         1e:a5:f2:7c:e7:f0:b2:aa:e3:95:dd:22:72:ee:d3:ca:b0:c6:
         c4:33:32:c4:4b:10:fb:16:09:de:67:87:7a:c0:c5:53:d6:c2:
         7b:70:35:f6:f8:82:df:1e:c7:ed:74:1e:a0:26:9e:a9:8b:56:
         b6:3d:f4:de:a3:08:5a:c3:10:b8:b1:03:98:33:a5:cc:a6:53:
         20:20:90:af:de:e5:74:4d:9c:27:8b:fb:b0:b1:3c:d2:06:fb:
         b4:04:76:e8:8c:b5:48:ba:46:94:3e:02:ae:ca:22:9c:ed:f5:
         ab:44:05:97:ed:67:bf:28:ef:9e:8e:79:f3:f6:63:7d:1d:7e:
         75:d2:18:d8:a0:2b:79:3e:75:59:4a:e6:cd:2b:1f:bf:b6:17:
         f0:aa:78:24:fc:7f:93:7e:87:8c:f2:a7:f2:e5:c2:e6:de:66:
         40:bf:a1:03:31:16:d7:01:55:ce:db:ed:28:47:52:47:b4:c7:
         1e:b8:db:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:04:13 2026 by rpki-client