This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
File:                     gp2nBxh7qgC6hmJHVioV_n23Vyo.mft (raw, json)
Hash identifier:          fmN9lVXDzYMq4UY74EfTmSeUrZaY7ZagDgXgJLLLHhU=
Subject key identifier:   EC:D1:F7:42:D4:FF:7F:83:6C:E6:6D:DA:58:33:28:1E:F5:95:D7:9B
Authority key identifier: 82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A
Certificate issuer:       /CN=A9183CF9/serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A
Certificate serial:       0833
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
Manifest number:          082F
Signing time:             Sat 10 Jan 2026 20:12:58 +0000
Manifest this update:     Sat 10 Jan 2026 20:12:57 +0000
Manifest next update:     Sat 17 Jan 2026 20:12:57 +0000
Files and hashes:         1: gp2nBxh7qgC6hmJHVioV_n23Vyo.crl (hash: HLzEv/TpYxVTG34rWyhFD0S9IPPO0LB1MJinlrTIHBE=)
                          2: AE77A386F80211EAAA7CE76CC4F9AE02.roa (hash: WPstyTH/RqPNgoRiwZcnrVNZ6rFbCif3q2kc7ftnDKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl
                          rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 20:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2099 (0x833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183CF9, serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A
        Validity
            Not Before: Jan 10 20:12:57 2026 GMT
            Not After : Jan 17 20:12:57 2026 GMT
        Subject: CN=6962b2ca-b375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:92:2d:7f:b6:1b:e8:5e:c0:bc:ee:0f:a0:
                    aa:07:1b:41:ff:4a:75:e7:e7:1f:6a:d8:51:cd:f8:
                    45:95:c4:3f:29:64:f1:3e:3d:18:51:06:d9:91:80:
                    30:72:8e:cf:5f:55:c5:28:97:b0:23:1b:be:f6:66:
                    8b:27:71:4b:ea:43:ee:ec:b4:a9:06:19:4f:7f:d5:
                    5b:9f:4b:69:03:19:21:68:a7:d1:ca:83:6e:7d:55:
                    8d:fc:83:04:83:cf:40:bc:16:47:7a:2a:ad:2e:5d:
                    29:6d:0a:51:09:0b:2a:a9:cf:67:8b:31:2a:61:4f:
                    2b:1d:46:cb:75:0f:8c:7d:9f:10:a7:3b:62:9d:76:
                    61:19:ec:c6:90:f3:62:6a:94:70:91:0e:13:8b:97:
                    41:8b:25:b3:cb:41:3f:e2:0f:ce:15:89:ff:13:a6:
                    2c:21:1b:e0:73:a9:3b:bb:ce:e9:0f:a9:0d:16:6c:
                    d7:aa:4b:e9:36:d7:a8:6a:5f:c2:ad:38:e7:e1:a5:
                    c9:0f:dc:03:91:12:b7:97:94:10:7c:8a:a8:a5:71:
                    04:45:4c:32:cf:3f:96:62:63:de:f2:63:5e:0c:b2:
                    84:dc:9d:4b:53:c7:77:3a:97:76:34:7f:a4:f5:01:
                    ac:ae:16:e9:34:8d:77:46:11:07:a2:87:b3:db:1d:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D1:F7:42:D4:FF:7F:83:6C:E6:6D:DA:58:33:28:1E:F5:95:D7:9B
            X509v3 Authority Key Identifier:
                keyid:82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:77:fe:f6:9d:e8:43:a8:9f:d9:f1:58:7d:a2:f9:1f:d6:16:
         93:b1:0d:9d:fb:1f:63:46:7a:ce:8a:7b:b5:b7:e6:fe:94:63:
         6f:f9:b8:3b:1f:0f:5b:2e:f5:07:cb:bb:a0:f0:bf:a0:2c:35:
         23:8e:5e:82:a1:61:5d:80:4a:56:a1:e1:e4:fc:30:4a:c2:70:
         15:85:5f:02:36:56:d0:9b:b9:cd:a8:9a:c5:d9:d3:e1:d2:c7:
         ea:1d:10:b7:7c:7f:77:67:ca:3b:c6:33:93:12:52:7f:03:94:
         4b:64:4f:81:c4:8b:b1:8d:12:00:7f:2c:fa:9f:3e:41:81:d8:
         42:78:6e:fb:a7:13:16:8b:35:2a:ca:c0:bc:ea:5d:2a:f2:56:
         01:6b:80:56:3c:82:88:1e:89:af:8f:8d:3b:0f:c9:a4:2c:54:
         97:92:21:36:cb:7f:c9:7c:65:41:26:0e:7e:c5:8e:cc:80:f0:
         f5:99:50:26:21:c9:e4:df:3d:d6:30:a2:02:d8:f6:a9:44:8a:
         fd:ba:b6:50:b0:e4:13:dd:45:df:27:23:65:9a:66:a7:78:bb:
         72:d4:86:33:29:43:76:a5:5e:d9:cb:06:92:03:64:7c:1a:46:
         b1:f0:7b:d8:1f:b9:2c:30:c3:29:55:00:1d:52:d3:11:14:da:
         32:f8:1a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:32:53 2026 by rpki-client