This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
File:                     GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json)
Hash identifier:          6GwPQ8J/oL3nMR6gCYLKNitqPYkHwMj+D4LgkchCHtA=
Subject key identifier:   9F:B7:BD:63:FB:F3:C3:4F:86:39:AB:14:4B:DB:2D:85:4F:5D:27:E4
Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C
Certificate issuer:       /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
Certificate serial:       0686
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
Manifest number:          0680
Signing time:             Fri 16 Jan 2026 21:37:11 +0000
Manifest this update:     Fri 16 Jan 2026 21:37:10 +0000
Manifest next update:     Fri 23 Jan 2026 21:37:10 +0000
Files and hashes:         1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: Et2sSmhe3Wupgm7WLAq3UkovbnngCpwLCAQqBAp+A/U=)
                          2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: f8Wgv+IoxprOJRGqIQDg8nNXDjXWODO4WSnYU8FiMVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 21:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670 (0x686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340, serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
        Validity
            Not Before: Jan 16 21:37:10 2026 GMT
            Not After : Jan 23 21:37:10 2026 GMT
        Subject: CN=696aaf86-2ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:35:f9:be:0c:ec:fe:58:b7:bb:8b:9e:28:
                    52:88:9d:d5:4b:1b:53:45:fa:c5:b0:85:e3:85:7c:
                    c5:41:56:2b:36:77:84:2e:80:ce:79:63:e1:f8:33:
                    c6:31:ac:c0:63:b6:45:d8:f1:85:44:a6:88:8d:43:
                    39:81:33:57:44:1b:a1:ca:59:97:d0:02:59:b2:30:
                    b3:03:d4:ef:74:a3:a0:3b:fb:3e:42:da:c0:c3:a6:
                    d6:8c:2f:5a:37:b5:d5:c1:25:52:97:43:27:45:4a:
                    c4:99:b3:84:ff:09:a3:2e:38:19:ba:63:1f:98:79:
                    20:f7:a3:ae:7d:3e:5a:01:81:aa:f2:2e:ba:9a:04:
                    32:57:c8:29:1b:c1:4a:b6:ff:71:2e:b5:38:a9:1d:
                    da:a2:80:87:97:b1:b7:2b:a0:5c:0e:af:71:76:79:
                    38:2e:00:1d:8d:0d:d5:42:a9:45:59:a2:d1:39:80:
                    61:ab:5a:d7:ca:ff:dd:9f:b3:1d:8d:7c:d4:91:04:
                    ce:b0:09:0b:73:1c:7e:c1:b8:7f:ca:00:94:ea:78:
                    cc:c4:c0:4e:1e:7b:bd:30:55:f2:aa:6d:bd:4b:1e:
                    d7:2b:51:3d:2c:3d:2d:f5:c3:0e:fb:95:cb:a6:54:
                    86:3d:59:6b:d4:41:c5:42:25:d4:f1:84:f4:df:c1:
                    6e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B7:BD:63:FB:F3:C3:4F:86:39:AB:14:4B:DB:2D:85:4F:5D:27:E4
            X509v3 Authority Key Identifier:
                keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:59:cb:56:ad:1a:57:0f:6e:96:27:14:c1:7c:17:c9:4e:46:
         45:66:2e:0f:65:46:d3:d7:58:3d:22:88:e9:8e:be:5f:5c:1a:
         83:3b:8d:87:70:49:a5:ac:a8:fe:73:fd:b1:6d:46:ff:04:77:
         2e:30:27:9f:c8:a9:a2:ec:22:b9:51:da:90:af:8c:28:d3:96:
         ed:d0:4d:19:a3:52:86:d5:09:83:f0:80:51:91:39:09:c6:8b:
         0d:c0:9d:27:f8:35:22:bc:ab:01:4e:e6:03:53:8a:42:b0:14:
         44:84:52:b9:24:93:1f:cc:38:f9:01:7d:29:f3:63:6f:f9:2c:
         ba:6b:21:f8:e1:92:40:41:b8:d3:7c:46:fe:b9:6a:84:12:2e:
         6e:ea:52:0f:ca:f2:95:66:aa:11:3e:a4:82:b3:4a:9c:9b:8d:
         40:26:b3:4d:37:6b:b1:22:50:b7:60:91:09:b5:96:f3:24:75:
         23:39:63:c6:4b:a4:b2:e5:f1:c2:ec:f4:b2:53:ee:9e:8e:45:
         1b:40:da:f5:18:e9:1f:64:71:9c:ae:b2:59:e5:61:0a:42:c5:
         2b:22:a8:4f:46:c7:20:b2:07:27:3f:56:68:94:d9:e9:ea:ee:
         e1:77:56:83:25:4f:6a:ee:ad:4e:03:c7:2b:8c:d6:c9:7c:cd:
         a3:ca:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 00:38:46 2026 by rpki-client