This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
File:                     G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft (raw, json)
Hash identifier:          d7OxHXpC94SECzNlaBQC/DvmHKscCsgi5thjKnilfVk=
Subject key identifier:   83:54:58:88:4F:7F:31:15:D2:48:57:68:C1:1C:0B:40:90:74:1D:E6
Authority key identifier: 1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4
Certificate issuer:       /CN=A918770D/serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4
Certificate serial:       1C8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
Manifest number:          1C7F
Signing time:             Thu 08 Jan 2026 15:59:55 +0000
Manifest this update:     Thu 08 Jan 2026 15:59:55 +0000
Manifest next update:     Thu 15 Jan 2026 15:59:55 +0000
Files and hashes:         1: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl (hash: gDXlpp5kd2rp8BrMNDZ0CUD2LpJi/7P0pXx1kbl9DrU=)
                          2: 6C5A7912ED2311E680140D19C4F9AE02.roa (hash: w+6iR/F583nwtLejN1ZMM4mivM5f0eBnZv1CsfpH8hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Jan 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7309 (0x1c8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918770D, serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4
        Validity
            Not Before: Jan  8 15:59:55 2026 GMT
            Not After : Jan 15 15:59:55 2026 GMT
        Subject: CN=695fd47b-151a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:a3:f6:30:dc:1c:b8:1b:49:7e:81:cc:3b:
                    1d:d6:aa:b4:f9:7b:dc:51:4f:84:b8:5a:b0:11:16:
                    60:75:a3:90:ac:c2:67:69:9a:8c:0b:56:04:0c:ce:
                    8e:53:67:42:37:db:d8:5c:23:f2:6f:40:94:9b:2c:
                    d7:2f:72:f6:03:69:a8:cc:f1:52:4b:a4:1c:42:f9:
                    09:2b:2e:15:98:4f:19:eb:0e:7a:3f:20:d7:c0:fc:
                    1f:b9:01:bd:84:80:b3:19:41:91:e0:e2:17:c9:b5:
                    8b:85:ce:78:80:04:db:75:1e:bf:37:a3:e2:ef:db:
                    e8:ab:e0:71:f4:2a:cd:66:40:27:0d:1d:dc:e0:d4:
                    6b:f7:71:1e:4e:fc:14:b9:fa:30:19:d0:a3:6d:c8:
                    36:14:88:91:f6:54:c4:45:b7:a0:4d:e9:cc:2e:01:
                    b6:f7:06:ae:f7:cc:fa:46:6e:36:83:c7:24:85:cf:
                    cf:4c:90:1b:64:80:76:48:1f:6c:86:1e:e5:e1:87:
                    61:1f:fd:6f:96:7b:39:62:5d:29:35:cb:63:55:10:
                    b7:d1:31:e0:28:e6:26:30:f9:7e:c1:1e:63:d0:db:
                    fc:9a:77:b5:6f:23:09:93:6f:b0:cf:1e:eb:0d:96:
                    ee:6e:a9:1b:85:1f:2a:cd:6b:09:dd:98:4b:25:e1:
                    61:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:54:58:88:4F:7F:31:15:D2:48:57:68:C1:1C:0B:40:90:74:1D:E6
            X509v3 Authority Key Identifier:
                keyid:1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:31:28:08:6b:18:ca:16:35:a2:74:ac:9c:6a:53:ac:65:56:
         25:fd:e8:9c:e9:8c:a2:dc:cb:b9:a7:74:3a:00:48:da:b6:21:
         a7:96:a6:e8:61:9c:6b:74:42:69:d2:d8:4f:27:5f:a7:22:60:
         5e:d0:18:5f:97:2b:e6:c0:44:0d:72:b0:80:8a:d7:55:c6:66:
         cc:0c:f8:63:d3:63:8b:f2:e8:d8:aa:37:03:c8:29:de:2b:5d:
         42:60:cb:b6:0a:fe:85:1c:4e:46:57:aa:5c:43:c1:de:df:29:
         48:1e:7d:cc:87:09:c3:1f:fb:f0:24:6c:95:44:54:12:12:cf:
         7a:3b:2d:81:bc:10:3a:aa:01:0b:4d:19:b6:c5:cb:c7:f6:9e:
         39:cb:8d:16:fe:37:3e:7a:11:6f:e5:ce:1e:1a:27:ab:eb:12:
         6c:c3:95:48:84:10:3b:84:ea:78:97:55:0a:68:91:af:dd:f5:
         0a:6c:55:a6:b4:f1:6b:cd:b3:a3:50:b8:f1:da:f7:2e:31:cc:
         6d:90:da:a5:3b:a0:ce:df:08:29:a8:22:61:86:1e:00:67:3a:
         69:eb:ef:3b:8a:40:66:98:97:e9:34:28:1d:ed:34:27:c0:5b:
         48:48:26:49:e3:aa:05:d5:47:38:fe:a6:f4:ff:5b:98:15:57:
         a3:bc:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:10:19 2026 by rpki-client