This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
File:                     G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json)
Hash identifier:          CuY6lj/17AhCTevGNAEzzAKxzN3xN3EMYtRoX6513Jw=
Subject key identifier:   4C:BD:DB:62:8B:E1:FD:36:6A:C0:20:BA:63:63:D3:50:75:2A:FF:6B
Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
Certificate issuer:       /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
Manifest number:          1D
Signing time:             Sat 17 Jan 2026 06:50:27 +0000
Manifest this update:     Sat 17 Jan 2026 06:50:27 +0000
Manifest next update:     Sat 24 Jan 2026 06:50:27 +0000
Files and hashes:         1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: 721TvECr8aF/8gyBRUBESuyS4dT8z7DjD3wmgQZXLHg=)
                          2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: HxgOvE8EAPC40IUOqEwdYq0KSHkJcIRXkuZt02zGc1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
                          rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
        Validity
            Not Before: Jan 17 06:50:27 2026 GMT
            Not After : Jan 24 06:50:27 2026 GMT
        Subject: CN=696b3133-1c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d5:75:8d:35:bd:15:a6:5d:03:e7:2a:79:69:
                    6f:d3:5c:0b:cc:63:fd:b7:3a:0f:b9:1f:59:c2:f8:
                    59:40:b3:6b:55:57:12:02:87:95:6f:42:f2:bf:1d:
                    fb:1b:c7:8d:56:31:19:e7:22:52:5b:0b:87:50:17:
                    cb:13:f6:2e:02:41:7b:57:88:15:21:be:70:d5:e4:
                    b3:8b:15:dd:b2:33:62:ce:00:50:a0:1a:19:9b:15:
                    3a:37:0d:42:8e:55:cc:42:79:26:2f:f6:9c:f0:59:
                    fe:1f:cd:a2:18:17:67:45:ff:35:c4:3e:1f:32:f3:
                    ab:9f:86:f5:28:c8:dc:47:e0:87:87:0c:63:0d:b9:
                    7d:96:ad:44:de:82:8f:f1:e7:3d:ef:6b:35:41:3e:
                    f6:11:d4:37:e8:56:36:5e:51:4d:73:e3:db:45:ea:
                    55:10:2f:2c:1b:b2:32:9b:a9:4c:48:7e:49:24:bc:
                    09:67:d6:da:95:cf:be:d1:ad:37:ae:1b:77:95:7c:
                    24:56:c3:cb:bf:c3:c2:d1:a4:fe:c7:55:3d:d0:af:
                    a7:15:24:79:0a:28:03:1a:ec:89:ce:50:49:90:18:
                    fd:33:44:24:20:aa:38:d4:18:5d:2d:11:46:93:cf:
                    ab:d7:19:8a:7e:d8:b4:88:86:e8:00:07:92:b2:17:
                    19:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BD:DB:62:8B:E1:FD:36:6A:C0:20:BA:63:63:D3:50:75:2A:FF:6B
            X509v3 Authority Key Identifier:
                keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:67:04:11:57:90:fb:fa:ac:03:b6:91:67:21:85:56:f2:
         85:19:e9:9f:bb:31:4b:da:a4:ca:6c:f1:13:79:b0:49:86:a8:
         27:86:71:12:27:6b:55:25:bb:66:47:e7:bc:37:1c:1a:08:6b:
         7e:27:db:9b:4e:2c:ee:db:05:40:a9:09:2c:12:fe:2a:10:a7:
         7e:21:91:d9:ac:81:12:29:55:16:82:78:0b:52:f8:11:e1:6e:
         94:da:da:4f:a1:e6:6c:39:dd:87:d7:4f:cf:a9:45:98:eb:7c:
         2a:a1:14:8f:02:eb:0f:a4:45:b7:b1:81:aa:47:34:63:d3:38:
         3f:19:fe:7c:49:a0:71:ef:8b:0c:ee:6d:8c:bf:94:8d:7e:b3:
         04:e1:e6:a1:27:37:d0:de:14:26:ee:a7:eb:c3:76:fd:f1:f9:
         ff:e2:6c:6a:3d:c4:3c:bc:44:85:9b:a4:24:db:7a:f3:33:80:
         49:ed:ff:42:42:22:82:71:c5:fc:09:38:72:ae:fe:39:84:8f:
         bc:72:ea:9c:30:7e:65:92:f1:ec:4c:0f:77:04:d6:a3:49:f2:
         98:40:21:86:f5:b5:a9:77:d5:45:e2:77:45:85:9d:72:74:12:
         21:14:09:ac:39:5d:ca:cd:a8:ad:3c:e9:12:1a:50:57:62:02:
         20:cc:71:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 02:57:59 2026 by rpki-client