This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
File:                     gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json)
Hash identifier:          wT4ll7Dwm7m7exDmUlhINJrAw4X5qQaJc4/hsYISph4=
Subject key identifier:   5D:B0:59:84:3B:24:EC:14:CD:69:27:1B:15:2D:5D:1E:6F:4F:92:CE
Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46
Certificate issuer:       /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
Manifest number:          9B
Signing time:             Thu 01 Jan 2026 05:55:46 +0000
Manifest this update:     Thu 01 Jan 2026 05:55:46 +0000
Manifest next update:     Thu 08 Jan 2026 05:55:46 +0000
Files and hashes:         1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: wfePt+Tat7r73euWw54ksPjRbD9RfR9CdUqZm9Ygpv0=)
                          2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: 8cVWvhVTaDx9YrIBArb9pQY5a8aQELboLZU4FfWd7+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl
                          rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 05:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
        Validity
            Not Before: Jan  1 05:55:46 2026 GMT
            Not After : Jan  8 05:55:46 2026 GMT
        Subject: CN=69560c62-e61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:66:a8:ec:70:7e:c5:19:ed:f6:2a:40:fa:
                    38:53:50:92:2d:62:58:86:20:5d:f8:53:c9:ce:a6:
                    24:56:ae:e0:52:4d:76:13:22:f3:b9:19:e0:43:f3:
                    a8:5b:21:3e:b8:0c:f2:e0:12:da:e5:6c:37:20:2a:
                    37:df:8a:f2:cd:a4:2c:02:24:41:31:30:76:20:94:
                    4d:37:7a:77:88:99:79:a7:60:1b:e4:89:0a:a8:db:
                    77:20:09:7b:14:73:2a:3d:ac:36:6c:28:cb:05:1c:
                    83:84:f9:b6:a4:af:8e:b7:ea:0e:84:3f:14:ac:73:
                    f0:fa:cc:4b:15:c8:d5:36:f3:4a:d3:74:c1:13:2d:
                    ef:1e:02:75:86:4a:41:d3:11:1c:b7:21:9e:07:25:
                    43:c7:1b:07:3f:38:f2:a9:8c:84:c2:b4:f7:37:0f:
                    29:38:d5:5f:f7:b6:3e:76:fd:a0:06:46:1d:1b:7b:
                    a5:09:6d:0c:e5:3d:59:24:30:44:52:3d:09:c4:cb:
                    45:76:d5:64:f1:27:10:ca:1c:e7:83:97:e0:3d:20:
                    8e:c5:53:6d:8d:53:3e:34:7b:f2:80:85:24:ee:ba:
                    e5:c2:a9:14:83:13:c1:d5:21:5a:7a:89:00:75:25:
                    68:56:74:b2:6d:50:76:25:74:7e:85:49:ac:4e:36:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B0:59:84:3B:24:EC:14:CD:69:27:1B:15:2D:5D:1E:6F:4F:92:CE
            X509v3 Authority Key Identifier:
                keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:31:e3:e3:fd:16:3f:9e:22:d8:09:df:37:6b:85:ff:bf:23:
         ed:f0:00:8c:75:00:cd:ed:8f:4e:a0:42:fa:a7:ce:cc:c5:a2:
         bb:90:37:8b:a1:5a:de:6b:13:a8:4b:a2:63:a7:ea:76:d6:de:
         58:b6:5c:96:51:98:46:19:3e:8a:cc:40:f0:c8:4f:b8:c7:35:
         4c:9f:48:6c:44:8f:3e:f4:48:3f:5c:84:96:8b:7b:fd:5d:b0:
         74:44:6a:c7:0b:57:21:9e:65:b5:53:c5:d7:d9:ce:13:ab:f1:
         49:3d:9f:d9:5f:4b:a0:bc:e0:e6:0d:6c:37:25:56:ed:34:4a:
         46:70:8e:6f:01:f7:33:f9:87:d0:20:db:29:00:50:3c:6b:7a:
         53:39:30:f7:c9:77:d2:38:ab:23:1d:5a:d3:9d:b4:49:db:be:
         2b:c5:12:d7:4e:7f:e9:c6:f7:73:d3:f0:30:8a:6f:34:29:b9:
         07:26:22:90:22:34:59:2f:64:ac:94:ef:80:d4:fd:eb:fa:52:
         5f:62:b8:ab:e3:a9:72:da:18:37:cd:6a:a5:a7:6f:3b:03:35:
         26:2a:2b:df:ea:ae:d0:45:7f:75:cf:bd:f0:75:d8:ab:45:6a:
         5b:76:e6:a5:ad:1b:16:9f:8c:6b:33:bd:b9:d1:f7:71:8b:cc:
         4c:82:c8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 14:25:56 2026 by rpki-client