This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File:                     G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier:          6pIjWzX6/tN7IK60/Vhwv9fkOALrlhurH42IAcHkXWw=
Subject key identifier:   F5:C9:30:77:DC:36:95:FB:13:D2:1E:1B:A0:60:77:05:8F:D1:26:E7
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer:       /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial:       095E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number:          095E
Signing time:             Tue 20 Jan 2026 19:34:40 +0000
Manifest this update:     Tue 20 Jan 2026 19:34:40 +0000
Manifest next update:     Tue 27 Jan 2026 19:34:40 +0000
Files and hashes:         1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: FDeqWtolLlG6RPwl0ehMzTuFe9wHGfqh91X+WLoWOkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 19:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2398 (0x95e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
        Validity
            Not Before: Jan 20 19:34:40 2026 GMT
            Not After : Jan 27 19:34:40 2026 GMT
        Subject: CN=696fd8d0-1d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e9:12:5d:dc:f1:23:d6:2c:9d:83:c4:7f:2b:
                    e0:1a:63:64:6f:fb:70:77:1a:e1:da:11:02:47:c1:
                    21:47:bf:d2:d1:10:f8:6d:03:c8:09:07:bf:f4:5c:
                    2a:53:d1:fc:a2:b3:30:6c:4e:6b:4f:23:b3:77:8e:
                    2b:5d:a5:cf:79:f5:0f:79:38:00:f5:ee:cd:ce:7e:
                    87:c1:32:6d:64:96:ff:2f:6c:cd:59:32:48:bf:a1:
                    d0:fd:18:0f:98:10:7b:62:41:dd:38:bf:8a:10:56:
                    02:e3:e8:c1:e5:d8:bf:14:3a:fc:ca:12:92:f3:64:
                    96:c4:2f:ef:23:1b:cf:1b:43:0b:af:8f:e7:45:3b:
                    c7:b6:fe:90:c1:82:51:8e:5f:69:73:9a:71:d0:25:
                    a9:60:b6:31:22:e9:f6:7d:2b:7a:d6:87:e5:91:a0:
                    a0:7b:06:3c:4c:64:db:3a:84:24:b0:69:94:a4:fe:
                    80:a3:08:25:09:d3:c3:79:a0:92:4c:a7:c7:8d:c3:
                    5f:16:19:68:76:68:6e:b6:74:ad:d4:6d:79:1f:ad:
                    de:0a:80:a0:1b:0d:a6:c2:07:30:05:e2:26:eb:34:
                    3b:ee:40:ce:c7:61:4c:99:45:f1:84:1e:10:d7:8d:
                    e8:a5:42:67:c9:2e:cd:18:31:25:f6:43:e5:23:23:
                    de:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C9:30:77:DC:36:95:FB:13:D2:1E:1B:A0:60:77:05:8F:D1:26:E7
            X509v3 Authority Key Identifier:
                keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:79:6e:d0:20:1b:ac:ca:c7:8c:c4:e7:24:25:32:5c:76:4a:
         a6:07:56:d6:a9:78:81:5a:d9:aa:69:28:e8:bb:b0:d4:d0:6d:
         3b:dc:e7:cc:e0:20:35:bc:e7:a6:29:b0:3b:08:40:86:22:8e:
         53:77:f9:33:13:e5:77:a6:f5:41:a2:09:6a:50:93:9c:09:4e:
         e6:5a:12:08:dc:30:9b:c9:2d:d4:78:b6:d4:03:ed:43:eb:47:
         61:17:f7:7a:71:67:15:e0:99:65:d0:04:02:fa:a3:ae:1b:64:
         30:72:a3:84:aa:bc:c3:24:4a:c2:b6:c7:0e:d5:1b:55:a9:d5:
         c0:e1:1d:3a:f5:89:84:e5:fa:19:fe:6a:bf:78:00:88:57:25:
         aa:8b:8c:9f:ef:87:28:3e:7f:3d:e0:a6:a4:7d:27:ba:89:d5:
         ff:d4:3f:a3:62:42:f2:43:f3:dc:92:69:55:36:19:21:eb:32:
         6d:15:ef:92:6d:d9:3a:70:cc:35:61:94:42:67:34:87:c1:43:
         af:3d:7c:58:b1:3a:a7:4d:de:92:2d:db:9f:05:be:d5:ca:65:
         cc:f2:15:73:7f:28:89:48:f2:aa:28:1a:0d:88:81:f7:76:1f:
         ae:f6:b3:78:36:69:17:f6:7d:f4:de:71:5d:7d:5c:2f:46:6d:
         84:71:c7:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNFMTYxMTAvBgNVBAUTKDFCOTAyMjY2MzIyMUQ4Q0U3QUVFQjAzRjNGNTc5OUYw
RDU3RUE2MTYwHhcNMjYwMTIwMTkzNDQwWhcNMjYwMTI3MTkzNDQwWjAYMRYwFAYD
VQQDDA02OTZmZDhkMC0xZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ukSXdzxI9YsnYPEfyvgGmNkb/twdxrh2hECR8EhR7/S0RD4bQPICQe/9Fwq
U9H8orMwbE5rTyOzd44rXaXPefUPeTgA9e7Nzn6HwTJtZJb/L2zNWTJIv6HQ/RgP
mBB7YkHdOL+KEFYC4+jB5di/FDr8yhKS82SWxC/vIxvPG0MLr4/nRTvHtv6QwYJR
jl9pc5px0CWpYLYxIun2fSt61oflkaCgewY8TGTbOoQksGmUpP6AowglCdPDeaCS
TKfHjcNfFhlodmhutnSt1G15H63eCoCgGw2mwgcwBeIm6zQ77kDOx2FMmUXxhB4Q
143opUJnyS7NGDEl9kPlIyPemQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXJMHfc
NpX7E9IeG6BgdwWP0SbnMB8GA1UdIwQYMBaAFBuQImYyIdjOeu6wPz9XmfDVfqYW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9GNDdCNkNENEFD
NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJNNTY3ckFfUDFlWjhOVi1w
aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0c1QWlaakloMk01NjdyQV9QMWVaOE5WLXBoWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0UxNi9GNDdCNkNENEFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJN
NTY3ckFfUDFlWjhOVi1waFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHeW7QIBusyseMxOckJTJcdkqmB1bWqXiBWtmqaSjou7DU0G073OfM
4CA1vOemKbA7CECGIo5Td/kzE+V3pvVBoglqUJOcCU7mWhII3DCbyS3UeLbUA+1D
60dhF/d6cWcV4Jll0AQC+qOuG2QwcqOEqrzDJErCtscO1RtVqdXA4R069YmE5foZ
/mq/eACIVyWqi4yf74coPn894KakfSe6idX/1D+jYkLyQ/PckmlVNhkh6zJtFe+S
bdk6cMw1YZRCZzSHwUOvPXxYsTqnTd6SLdufBb7VymXM8hVzfyiJSPKqKBoNiIH3
dh+u9rN4NmkX9n303nFdfVwvRm2Ecccs
-----END CERTIFICATE-----
Generated at Wed Jan 21 08:23:58 2026 by rpki-client