This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
File:                     GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json)
Hash identifier:          CkKdvZV5Oz5ulsVY0NKFl4nwIdH6yH6+KGEGsqhgMW0=
Subject key identifier:   6B:C2:D7:29:C6:AD:21:E0:7D:B7:9C:9D:84:35:49:31:B9:32:29:7F
Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
Certificate issuer:       /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Certificate serial:       04BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
Manifest number:          04B5
Signing time:             Sat 10 Jan 2026 23:08:26 +0000
Manifest this update:     Sat 10 Jan 2026 23:08:26 +0000
Manifest next update:     Sat 17 Jan 2026 23:08:26 +0000
Files and hashes:         1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: VPRCGVXR1w618YFa+gYiXvQwdgVnDuicJsPoDRjsMsg=)
                          2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: xFL3ypsjaivEwLZovLg7QH0r6iiczksBr1MYMN2w3rQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
                          rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 23:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
        Validity
            Not Before: Jan 10 23:08:26 2026 GMT
            Not After : Jan 17 23:08:26 2026 GMT
        Subject: CN=6962dbea-86db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:0d:b3:ad:41:85:57:3c:d6:87:43:cc:c5:
                    cf:15:3a:c2:56:bc:1e:f0:3f:7b:16:47:eb:7a:bb:
                    3d:8e:e4:d2:d3:ca:c6:fb:c1:d3:e1:f6:d5:67:97:
                    c9:c9:07:0f:75:b2:58:5b:68:0c:2b:dc:45:c4:af:
                    d8:8d:15:40:de:1e:17:b7:5d:f0:46:6f:bb:05:f2:
                    8e:5a:d3:84:4f:28:29:9d:6b:8a:4b:bb:68:ee:ec:
                    c0:18:3b:0a:11:88:f9:df:c9:11:21:34:ca:72:b5:
                    8b:04:19:52:96:51:37:d1:6b:8f:18:24:ae:51:59:
                    18:42:16:ed:fa:34:71:d4:7d:c4:71:e8:14:19:80:
                    c3:a6:7f:61:c1:25:1c:29:b0:66:c4:bc:5d:fc:fd:
                    4e:f1:d7:21:75:a9:41:83:e5:d0:f9:10:57:3f:ec:
                    7b:fd:40:bb:d1:85:46:09:fa:8f:70:ee:fa:0b:e3:
                    98:aa:aa:43:78:7f:cb:48:54:f6:c0:0f:d7:2e:06:
                    bc:99:de:02:e6:5a:58:ed:d0:c6:bc:19:7b:89:07:
                    e2:3d:a7:7c:cd:36:df:8e:99:86:ff:4d:ac:e5:09:
                    f3:8e:b9:a5:76:a4:a2:b2:03:b7:57:10:0c:40:4b:
                    03:91:92:03:34:d9:2c:58:1f:8a:35:8a:7a:b0:77:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C2:D7:29:C6:AD:21:E0:7D:B7:9C:9D:84:35:49:31:B9:32:29:7F
            X509v3 Authority Key Identifier:
                keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:97:26:2c:6c:d8:eb:59:fb:d3:f3:e1:20:d6:07:4f:f4:48:
         65:b2:e9:dd:49:9c:4d:4e:e5:ab:91:d7:c8:ad:6b:9c:2d:e0:
         3e:38:08:68:e1:44:2a:06:35:5a:aa:02:43:8a:6f:34:28:ff:
         ae:de:50:d7:51:fb:db:b5:84:6d:12:eb:6b:89:41:23:a0:4d:
         23:0e:56:24:ac:85:bf:bd:72:bc:cd:3e:98:54:a6:6d:78:82:
         98:99:73:ad:96:80:58:06:ac:87:bb:6c:18:0c:8b:06:5b:9e:
         f9:33:af:c0:30:0e:53:b4:1c:46:83:41:ef:fd:76:f3:ab:c1:
         29:e2:a1:b1:6e:a5:45:ba:b5:91:e8:2f:77:71:ae:76:f4:1f:
         85:06:f2:b5:33:f8:84:b3:10:ba:a8:5d:11:e6:5a:cc:a0:c9:
         2a:0e:57:89:d0:d7:8f:37:20:69:61:ac:72:47:f3:5a:08:a0:
         0f:8c:24:49:cf:fa:74:7f:af:77:6e:9b:56:6a:4e:0d:e5:6a:
         92:b4:ac:98:41:1a:89:25:a6:5b:ad:7c:e8:27:3a:69:1b:4d:
         7d:72:1e:39:f3:21:cf:6a:b7:67:bb:bd:25:cd:be:67:8c:fe:
         4c:40:90:1f:f3:ea:43:aa:bd:fa:0e:83:df:23:e4:67:3a:41:
         2f:2d:74:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA5REUxMTAvBgNVBAUTKDE4Mzk4OEZDMERFRTlEQkI4MTExNUU4MkJGREM5NTQx
MjU2MTQxM0MwHhcNMjYwMTEwMjMwODI2WhcNMjYwMTE3MjMwODI2WjAYMRYwFAYD
VQQDDA02OTYyZGJlYS04NmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUANs61BhVc81odDzMXPFTrCVrwe8D97Fkfrers9juTS08rG+8HT4fbVZ5fJ
yQcPdbJYW2gMK9xFxK/YjRVA3h4Xt13wRm+7BfKOWtOETygpnWuKS7to7uzAGDsK
EYj538kRITTKcrWLBBlSllE30WuPGCSuUVkYQhbt+jRx1H3EcegUGYDDpn9hwSUc
KbBmxLxd/P1O8dchdalBg+XQ+RBXP+x7/UC70YVGCfqPcO76C+OYqqpDeH/LSFT2
wA/XLga8md4C5lpY7dDGvBl7iQfiPad8zTbfjpmG/02s5QnzjrmldqSisgO3VxAM
QEsDkZIDNNksWB+KNYp6sHeJmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvC1ynG
rSHgfbecnYQ1STG5Mil/MB8GA1UdIwQYMBaAFBg5iPwN7p27gRFegr/clUElYUE8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlERS84QjMyMDc1QzU5
N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5idUJFVjZDdjl5VlFTVmhR
VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dEbUlfQTN1bmJ1QkVWNkN2OXlWUVNWaFFUdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDlERS84QjMyMDc1QzU5N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5i
dUJFVjZDdjl5VlFTVmhRVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAKlyYsbNjrWfvT8+Eg1gdP9EhlsundSZxNTuWrkdfIrWucLeA+OAho
4UQqBjVaqgJDim80KP+u3lDXUfvbtYRtEutriUEjoE0jDlYkrIW/vXK8zT6YVKZt
eIKYmXOtloBYBqyHu2wYDIsGW575M6/AMA5TtBxGg0Hv/Xbzq8Ep4qGxbqVFurWR
6C93ca529B+FBvK1M/iEsxC6qF0R5lrMoMkqDleJ0NePNyBpYaxyR/NaCKAPjCRJ
z/p0f693bptWak4N5WqStKyYQRqJJaZbrXzoJzppG019ch458yHPardnu70lzb5n
jP5MQJAf8+pDqr36DoPfI+RnOkEvLXS8
-----END CERTIFICATE-----
Generated at Sun Jan 11 14:42:00 2026 by rpki-client