This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
File:                     gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft (raw, json)
Hash identifier:          /c2mOPFPn5qOeLrtKX5OFDWvkAj+llzs3jL4ggFq1ZE=
Subject key identifier:   2B:E3:1D:BD:9A:A0:F6:E7:47:4F:27:37:14:1D:E7:02:8C:5F:83:95
Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46
Certificate issuer:       /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
Manifest number:          A0
Signing time:             Sun 11 Jan 2026 05:30:46 +0000
Manifest this update:     Sun 11 Jan 2026 05:30:45 +0000
Manifest next update:     Sun 18 Jan 2026 05:30:45 +0000
Files and hashes:         1: gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl (hash: Ft9MmZcNjunre2o7UQUSspakMg91xv8fZ8tz3Iadq4w=)
                          2: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (hash: 8cVWvhVTaDx9YrIBArb9pQY5a8aQELboLZU4FfWd7+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl
                          rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 05:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
        Validity
            Not Before: Jan 11 05:30:45 2026 GMT
            Not After : Jan 18 05:30:45 2026 GMT
        Subject: CN=69633585-963e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:ac:fe:a8:a8:dd:cc:9b:17:70:37:30:e1:
                    e0:7f:73:64:ca:1b:d1:9b:8b:67:f3:a8:0f:3d:66:
                    9d:71:bd:44:95:0d:83:d3:1c:27:0e:fe:5c:5f:55:
                    5c:e1:05:33:84:62:94:9d:ea:7b:c2:7f:c1:f9:7d:
                    63:36:bb:f2:bd:71:7a:59:37:3e:20:1f:8a:73:ac:
                    6f:3e:60:12:83:fb:77:fc:ce:b2:c7:f3:e9:c0:6b:
                    07:0d:3a:c7:ed:d7:00:e9:d4:8b:25:bf:77:42:48:
                    c6:22:63:f4:82:bb:0a:8c:b1:ae:76:28:15:0e:f7:
                    67:63:f7:78:0b:fc:20:a8:9e:87:3b:cf:81:af:e3:
                    0c:3e:ea:71:a7:84:de:1f:04:50:8a:c6:2d:1a:ac:
                    a9:4f:b8:f0:9b:8c:85:1c:20:12:78:1e:3e:6e:5a:
                    40:7f:f1:88:5f:22:17:10:4a:c2:2e:6f:3b:03:27:
                    3b:a9:0b:bc:40:28:02:dc:77:f6:05:b9:68:5e:45:
                    4b:71:2a:40:96:ae:6f:0f:4c:af:2f:95:f4:c0:96:
                    dd:71:9f:e9:cd:f9:22:59:1f:b5:07:09:47:a8:aa:
                    9d:e8:67:1c:fb:6e:a2:31:ce:ec:95:95:f3:cd:38:
                    a1:d0:4b:11:a5:0d:68:bd:05:8d:17:72:7a:c1:3d:
                    09:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E3:1D:BD:9A:A0:F6:E7:47:4F:27:37:14:1D:E7:02:8C:5F:83:95
            X509v3 Authority Key Identifier:
                keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d1:2d:53:7e:94:e1:00:ad:e2:0b:68:23:73:7b:46:e8:af:
         13:3c:e5:af:5c:ce:b6:e8:dd:d4:3d:74:80:94:84:6f:19:0a:
         79:20:71:29:c7:a6:a5:b4:0c:e8:2d:11:0e:59:05:1f:da:6b:
         06:da:0b:41:fd:85:2e:b9:79:74:6f:7b:64:13:f0:47:60:78:
         26:94:cb:b0:ec:de:36:6f:fa:4d:f7:64:22:f9:63:d3:7b:db:
         7a:c4:14:0c:fc:ed:d2:1e:d9:71:d9:4e:34:e2:3b:b2:43:40:
         26:90:b3:96:a4:67:08:04:02:52:5e:aa:77:c6:d5:23:a0:3f:
         14:6b:ec:ae:bd:bf:d7:dc:49:58:e4:98:45:49:da:91:3c:4d:
         62:e4:3c:db:2b:7c:16:1c:1a:10:70:93:06:3c:51:18:77:57:
         be:8c:a1:0f:b9:62:da:b0:d5:05:4d:98:b2:e5:bb:2d:f4:0c:
         06:1f:f0:c7:a4:82:62:50:ca:70:f5:78:c1:03:77:0d:be:95:
         55:c4:ca:ed:b2:61:5c:84:7c:c7:be:3d:22:b0:22:9f:ed:26:
         03:42:46:e2:a9:c7:50:8a:1a:7e:2c:8e:7c:e9:95:92:e4:c9:
         05:1f:a2:0c:0d:ca:7f:7d:15:a9:d0:67:5c:84:56:bb:4b:c2:
         56:17:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:30:08 2026 by rpki-client