This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
File:                     GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json)
Hash identifier:          0tHgDR8YBlSJrtkt6AA/dPUp45gwQwzNJBK8Tv5wslQ=
Subject key identifier:   82:7A:9F:B1:97:0C:32:D4:2E:BE:83:8D:5B:EF:71:BA:0D:CE:35:86
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Certificate issuer:       /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
Manifest number:          52
Signing time:             Mon 19 Jan 2026 06:14:50 +0000
Manifest this update:     Mon 19 Jan 2026 06:14:49 +0000
Manifest next update:     Mon 26 Jan 2026 06:14:49 +0000
Files and hashes:         1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: vR410NGjFZNud7Ini10eu8rzdm2MtAywUNNDPjbylY4=)
                          2: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: CfbrIA0HCJd5bnnoqk4fH/y8a3ECzbTG+URIorF3jYk=)
                          3: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: wZT27F3LQkOVM0f/2rSyNQsd/VoaPgZq7TdT9xnpo2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
                          rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 06:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
        Validity
            Not Before: Jan 19 06:14:49 2026 GMT
            Not After : Jan 26 06:14:49 2026 GMT
        Subject: CN=696dcbda-8c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:95:63:c7:7f:ef:95:ec:aa:99:38:84:da:
                    90:80:fa:76:de:b2:be:48:02:b0:ae:ef:e9:8e:18:
                    4f:81:51:07:92:b6:32:f1:bc:66:fb:9d:12:2e:d4:
                    74:7e:e2:0b:83:f8:f4:9c:59:a5:83:82:4b:7e:b0:
                    7d:4f:b7:48:d6:b5:1d:89:bf:e1:9e:a0:29:5f:4f:
                    4a:c0:75:71:7e:05:3d:9d:60:20:03:52:ab:0f:85:
                    6f:5a:5d:c3:38:50:c1:20:e8:8c:dc:27:b3:0d:44:
                    c6:06:d7:2e:ea:60:d6:e2:0f:7c:02:4d:18:88:2b:
                    37:c9:1b:fe:c1:e3:79:c9:1c:42:b6:96:6e:4c:6a:
                    59:3b:dd:93:51:f5:37:7d:f2:4c:29:c1:9e:21:b2:
                    3d:1c:4b:a5:11:c5:42:d9:a2:f6:d7:2f:27:a7:71:
                    27:88:b1:dc:76:1f:f7:45:e5:cf:fe:d2:0c:24:52:
                    32:f1:e5:ed:24:21:da:e5:fd:09:ee:61:3d:9f:d0:
                    da:60:3e:c0:83:fc:ed:20:3b:91:74:ff:ac:ef:cb:
                    b7:bf:b2:45:a9:8b:52:7c:20:3b:9b:86:ab:8f:02:
                    59:51:f5:41:f0:d4:30:82:d9:39:10:eb:e2:4b:35:
                    ea:cb:d7:b3:df:26:be:2d:c5:ed:6a:65:47:74:aa:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7A:9F:B1:97:0C:32:D4:2E:BE:83:8D:5B:EF:71:BA:0D:CE:35:86
            X509v3 Authority Key Identifier:
                keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:02:f2:39:c3:c5:dc:24:8b:96:4e:8a:8d:67:84:7e:f6:c5:
         88:4f:f6:db:3a:ed:a6:3b:72:e1:1f:98:df:9b:1b:fb:80:14:
         b3:31:fe:5f:98:a9:21:9d:dd:42:4b:ff:ec:c9:14:9a:28:25:
         85:96:27:e7:7e:3a:5b:fc:c4:ca:89:18:99:00:39:94:c7:07:
         b8:df:83:ef:77:c4:97:3d:28:09:45:d1:2d:08:83:c6:b8:34:
         6f:29:a2:f2:c2:41:31:ff:51:fd:a4:ce:89:73:d7:25:ee:f7:
         ae:66:13:36:fd:30:94:42:5c:89:ae:c6:95:36:1b:7f:26:ef:
         74:ba:57:6b:03:c1:3f:64:44:4b:67:6a:f5:ea:a3:a2:c9:59:
         29:fc:11:92:1b:29:ee:ab:b7:54:7a:96:65:d6:0f:75:ea:27:
         98:00:22:cd:1d:58:b2:1f:c8:2b:d9:58:b5:61:b1:0f:30:65:
         06:af:18:3f:c8:63:a3:b8:3c:5e:43:82:d3:a9:4d:04:63:c4:
         66:4d:57:16:b9:7f:43:06:2b:1f:eb:ec:c4:b1:fe:e3:c6:bf:
         93:20:e9:11:f5:d7:d0:da:87:f1:f3:98:d0:5f:a5:ea:f0:07:
         ff:28:20:d0:60:fb:e1:44:34:19:cf:31:a2:90:c4:48:43:6f:
         7d:48:c1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 07:36:18 2026 by rpki-client