This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
File:                     GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json)
Hash identifier:          o1SsIzxz1gWAOOAAEma158eFmQmixzFMED0wxwl3QAQ=
Subject key identifier:   00:C1:4F:A2:22:B3:DA:1A:70:90:96:6E:6D:D2:A5:F9:94:CA:E4:FA
Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Certificate issuer:       /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Certificate serial:       0425
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
Manifest number:          0420
Signing time:             Sat 10 Jan 2026 23:33:29 +0000
Manifest this update:     Sat 10 Jan 2026 23:33:29 +0000
Manifest next update:     Sat 17 Jan 2026 23:33:29 +0000
Files and hashes:         1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: ayUv7sqqQAL/pX0R/LOVquOmstPCzMA5NcHrt4vM3bI=)
                          2: 8AB545D294A711ECA073AB56C4F9AE02.roa (hash: Vcf2mCMS48B4jAqDXmFIESOPS9I9k4iNYocNkMUmAvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
                          rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 23:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
        Validity
            Not Before: Jan 10 23:33:29 2026 GMT
            Not After : Jan 17 23:33:29 2026 GMT
        Subject: CN=6962e1c9-3292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:08:62:e5:2e:89:e0:4c:e0:24:56:3b:43:
                    be:13:a4:a5:44:90:d2:e8:a1:06:4e:f9:d0:ff:10:
                    18:2b:20:72:65:ee:99:0f:52:5d:2e:2a:cf:fd:9b:
                    68:07:05:91:69:cc:cb:fb:a8:07:4c:ab:da:cb:9c:
                    80:c4:38:aa:3f:5a:b6:5d:e8:40:e0:eb:64:a9:31:
                    40:f8:18:31:7f:e3:a9:ec:a6:03:47:09:1b:a0:01:
                    fb:fa:2d:cf:29:79:b2:25:9c:03:a7:93:e5:45:21:
                    2b:4a:25:ce:7a:8c:f2:3d:ae:36:ef:89:36:73:47:
                    1b:29:19:8a:d3:ae:cc:5d:52:a8:b4:c2:ab:05:3a:
                    50:39:49:8d:fc:1c:a5:d5:05:db:84:a5:9a:95:5c:
                    51:f7:0c:b6:1b:2d:dd:64:5d:d9:b0:52:5e:6f:ae:
                    d3:cd:5f:e2:23:d1:1a:33:12:a6:bf:dc:95:80:ac:
                    be:0a:b6:cf:6b:55:62:69:5a:31:78:0a:28:d5:36:
                    66:39:05:b7:fd:c4:7f:f4:14:5b:2f:6c:1b:6d:b6:
                    e2:81:3f:74:00:24:10:8c:3b:cf:1a:7c:4f:11:65:
                    87:e9:ec:15:c1:e6:b8:86:c8:78:b9:dd:42:5f:c8:
                    a5:2c:8e:b1:a2:64:e2:cf:e8:39:7c:07:83:4c:7e:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C1:4F:A2:22:B3:DA:1A:70:90:96:6E:6D:D2:A5:F9:94:CA:E4:FA
            X509v3 Authority Key Identifier:
                keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:74:85:2a:42:4a:55:62:17:a2:54:40:71:88:c2:98:6f:
         90:79:d5:59:7f:ed:89:af:f6:16:97:ca:2d:26:a3:a8:80:37:
         1a:4b:a7:de:3c:ac:69:a3:2b:69:a3:1a:31:1b:07:b8:e0:e0:
         69:a4:80:97:b4:94:e4:72:6e:08:c7:81:d3:4d:65:90:65:07:
         21:e8:5b:39:eb:88:e0:a5:40:4f:e8:fe:e5:0d:3b:80:43:10:
         24:00:4c:3b:e1:9d:a7:3b:3f:ba:93:3f:57:a6:52:5f:62:c4:
         00:ac:f3:d6:89:34:fd:db:24:77:2c:1b:51:a2:0f:42:6b:6c:
         64:77:2b:dd:3b:b2:08:db:b1:19:0b:ef:f9:48:ad:e2:4e:f1:
         d1:d2:13:d9:8d:7f:ce:ca:1e:58:c8:48:2b:8d:82:6c:98:e1:
         8d:9e:2b:3c:fe:24:c9:80:a3:ec:fa:1e:69:b5:1d:7d:16:bb:
         7b:18:19:b8:35:c1:19:fa:e8:2e:9b:d7:c4:cd:8c:1d:ac:30:
         ca:61:45:34:42:dd:87:64:57:80:49:a5:e8:a9:54:43:66:e3:
         08:ca:70:85:f6:52:98:21:0a:ac:d1:36:c2:d7:a1:aa:2e:44:
         90:c0:af:47:bd:92:ba:b6:66:9f:0b:c3:88:b0:02:4f:46:a9:
         2b:26:fb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:40:45 2026 by rpki-client