This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft
File:                     gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json)
Hash identifier:          WsRKwTZOwccJTdcYnEEr+ZbiNPQ6UhIkiHbJmUV3WTw=
Subject key identifier:   DD:32:9B:C9:5B:67:0B:13:D0:83:FD:54:98:32:A2:2C:D8:F3:02:19
Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24
Certificate issuer:       /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124
Certificate serial:       07D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft
Manifest number:          07D0
Signing time:             Wed 04 Feb 2026 20:43:47 +0000
Manifest this update:     Wed 04 Feb 2026 20:43:46 +0000
Manifest next update:     Wed 11 Feb 2026 20:43:46 +0000
Files and hashes:         1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: Hm+mGIyUj4GJQOrg6Y5/IrJMyiduHinOdfjrvgXeNvU=)
                          2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: S7PCclJgGscLtYe2Pj+Y6a3iFp4ZeeTuzvJeZrm+yCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl
                          rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Feb 2026 20:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124
        Validity
            Not Before: Feb  4 20:43:46 2026 GMT
            Not After : Feb 11 20:43:46 2026 GMT
        Subject: CN=6983af83-10dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:4c:fe:a6:63:79:d5:55:88:92:75:65:51:
                    eb:6e:14:19:b0:be:4c:68:65:95:44:d3:26:ef:ec:
                    d9:1e:ac:dd:4b:cb:db:97:ca:d1:18:1f:8e:e4:c3:
                    e7:97:7a:c2:c4:ae:45:4c:82:4d:ba:f6:5a:64:db:
                    80:57:56:e3:d9:98:9c:ee:48:79:17:48:b9:35:3b:
                    fd:e8:cc:ab:36:63:95:7d:b7:22:5b:47:f0:ba:94:
                    c9:12:4f:93:69:e5:95:3f:6f:de:cf:84:f2:72:a1:
                    5a:69:8d:d7:3b:1d:c4:01:f2:c5:c4:34:42:31:5b:
                    61:31:dd:38:1e:bd:79:e6:12:64:34:2e:98:b7:23:
                    55:cd:f5:8d:22:15:d7:51:f1:4c:a1:22:3c:6b:8c:
                    ac:b7:f7:d8:0b:ce:32:fc:37:38:be:59:f8:c8:54:
                    73:cb:2f:98:9a:0e:35:93:99:16:90:4d:9a:d0:0e:
                    d7:87:3c:2e:6b:c6:2e:e1:e2:90:d7:d2:34:14:e6:
                    2f:e6:cb:de:ab:69:4f:d2:39:1d:9a:8b:04:51:ed:
                    98:16:38:6c:ab:8a:68:fa:32:b8:51:6c:e7:8f:7e:
                    75:02:00:34:4a:7b:d7:b2:25:02:4b:d4:d0:0e:b3:
                    96:77:37:a9:4b:c3:8a:3b:99:da:a3:23:80:86:14:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:32:9B:C9:5B:67:0B:13:D0:83:FD:54:98:32:A2:2C:D8:F3:02:19
            X509v3 Authority Key Identifier:
                keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c9:20:57:e3:bd:f1:79:b8:70:6f:79:1a:7e:fe:f5:d0:32:
         0f:8e:43:3b:17:0f:b1:76:af:d3:2a:42:6d:02:03:db:df:da:
         b6:34:5c:93:0d:af:e7:02:0c:44:b4:9c:b4:da:fd:42:2d:01:
         ec:54:18:03:e0:7f:18:f9:8f:3e:50:89:10:e3:a4:43:21:8c:
         66:9e:c5:fb:a7:92:d1:67:a2:97:39:31:01:98:bd:a3:31:d9:
         bc:88:0b:c2:22:95:98:e2:a9:70:fd:71:b4:d1:c3:c5:2b:03:
         52:23:f0:fd:79:c0:a1:08:d6:3e:29:1d:0a:d0:f2:ca:5b:de:
         41:7a:bf:ee:86:30:8c:04:ca:3d:32:c0:b4:13:ac:76:10:75:
         a9:06:0c:8e:9e:35:27:60:67:f6:6c:f5:54:86:33:98:1e:bf:
         0c:52:a7:57:bb:6e:8e:ba:b8:85:e7:22:85:5a:17:96:95:94:
         1b:74:9d:9f:ce:22:8e:4c:bb:21:23:ce:b8:6b:ba:6f:a4:8b:
         29:ca:35:a9:13:d2:ef:92:88:52:c2:fc:70:af:a3:99:ba:3d:
         b6:9c:d5:51:34:a0:3a:c4:57:1c:24:c3:77:a2:5b:68:2a:e3:
         08:95:b9:33:de:a7:19:ba:cb:c2:0f:09:bb:b0:45:37:38:a9:
         bf:7a:f2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 06:42:27 2026 by rpki-client