This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
File:                     gyiT0KdSAaIToGRFUyA9Aac8-v8.mft (raw, json)
Hash identifier:          V0++EegcNVPFM83UKEFSfqIHzIQalb6qIpcdZjgNvWs=
Subject key identifier:   3A:95:28:03:C1:BD:0E:84:6F:31:BF:5D:C4:3A:A8:05:3E:54:84:BA
Authority key identifier: 83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
Certificate issuer:       /CN=A9176632/serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
Manifest number:          62
Signing time:             Sat 17 Jan 2026 06:05:45 +0000
Manifest this update:     Sat 17 Jan 2026 06:05:45 +0000
Manifest next update:     Sat 24 Jan 2026 06:05:45 +0000
Files and hashes:         1: gyiT0KdSAaIToGRFUyA9Aac8-v8.crl (hash: LURT+BwyVG/+UOfU32aWpsylzBOADkmaZ1RK1FlIQqw=)
                          2: 9DB90EE05E0F11F09722E15EC4F9AE02.roa (hash: YgUFuSigzbesjAaXAB7QXjCPj2vjaQ0V6QVQsQKeXvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
                          rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176632, serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
        Validity
            Not Before: Jan 17 06:05:45 2026 GMT
            Not After : Jan 24 06:05:45 2026 GMT
        Subject: CN=696b26b9-4ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:ed:c2:63:d8:49:11:75:56:6a:07:4d:43:
                    5f:0e:44:17:dc:e4:25:7e:df:70:0c:fa:de:2d:b9:
                    6c:66:2c:dd:b0:fa:54:08:69:c3:3d:4a:8e:40:00:
                    6b:4c:a5:fa:bc:d6:09:a1:34:fe:84:f4:68:1e:cb:
                    55:01:85:48:f3:3f:cf:b8:9f:58:1b:28:e4:68:9b:
                    5c:d3:95:5a:7f:49:1c:39:a1:25:0a:a6:66:08:5c:
                    f2:fd:f7:58:ae:f1:c3:44:52:e1:fc:4d:3f:8f:50:
                    6f:a4:12:aa:17:b2:a9:30:cf:ef:26:63:53:34:98:
                    9a:4a:00:05:5a:71:d3:ec:74:c8:48:fa:8d:af:14:
                    28:9d:a0:a5:25:7f:8c:0f:4c:9e:15:22:b4:eb:bb:
                    32:aa:c5:cf:37:bf:8b:98:79:dd:a5:a9:37:b6:cb:
                    81:e3:3b:92:2a:20:d2:03:c3:b1:a5:a7:ce:99:34:
                    3d:08:14:0e:4b:a5:a4:e1:1e:7b:69:14:b4:b5:71:
                    8a:fe:7e:31:7f:80:13:8e:5c:81:a9:37:1e:dd:18:
                    c8:56:64:93:d2:01:39:d2:f1:a7:f1:85:0e:7c:fe:
                    21:34:fb:12:4d:ff:bd:27:07:86:c6:98:30:b7:f0:
                    c6:ef:bd:1b:20:9a:44:e8:39:da:2c:de:e3:57:7c:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:95:28:03:C1:BD:0E:84:6F:31:BF:5D:C4:3A:A8:05:3E:54:84:BA
            X509v3 Authority Key Identifier:
                keyid:83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ea:50:18:3d:f7:97:23:1d:4a:ae:4f:8f:ed:2b:c7:9d:72:
         31:c1:78:b5:e4:25:61:9c:db:9f:fd:16:42:04:35:da:ec:49:
         f3:92:51:d4:78:53:3e:3d:6d:5a:2d:12:46:dd:45:31:5f:5f:
         08:7c:a5:d7:5d:68:cd:10:ca:f8:eb:08:0d:84:d5:99:f6:78:
         45:23:fa:7b:d3:38:96:ed:19:9f:6e:cb:81:8c:bb:99:98:13:
         20:78:4b:67:95:ae:54:34:37:36:df:7a:1e:3f:6b:53:a9:12:
         ba:b8:5a:67:4d:6e:63:2c:31:bb:1b:05:7b:2b:8c:03:15:c3:
         27:34:c0:83:70:d5:ac:8b:b3:89:1e:55:fc:ac:32:6a:70:ba:
         e9:73:3f:f3:e0:68:a4:6e:a1:15:5e:8e:c3:5d:a5:75:c6:12:
         b3:73:ed:ff:a6:f6:8e:c0:c5:94:f5:92:ed:5a:ed:d0:20:6d:
         ca:c8:ab:24:24:b0:ca:3d:78:68:cb:3f:57:90:c3:cc:13:1b:
         e7:2d:23:db:f7:56:61:86:4d:5e:0e:15:11:bb:e5:6e:b6:aa:
         2c:34:06:48:77:45:eb:c1:b6:cd:66:69:cf:e1:a9:2e:67:3f:
         80:58:c1:9e:ad:46:22:12:ec:21:01:ea:fa:29:96:4b:b1:c8:
         eb:69:ac:2b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NjYzMjExMC8GA1UEBRMoODMyODkzRDBBNzUyMDFBMjEzQTA2NDQ1NTMyMDNEMDFB
NzNDRkFGRjAeFw0yNjAxMTcwNjA1NDVaFw0yNjAxMjQwNjA1NDVaMBgxFjAUBgNV
BAMMDTY5NmIyNmI5LTRjYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3Fu3CY9hJEXVWagdNQ18ORBfc5CV+33AM+t4tuWxmLN2w+lQIacM9So5AAGtM
pfq81gmhNP6E9Ggey1UBhUjzP8+4n1gbKORom1zTlVp/SRw5oSUKpmYIXPL991iu
8cNEUuH8TT+PUG+kEqoXsqkwz+8mY1M0mJpKAAVacdPsdMhI+o2vFCidoKUlf4wP
TJ4VIrTruzKqxc83v4uYed2lqTe2y4HjO5IqINIDw7Glp86ZND0IFA5LpaThHntp
FLS1cYr+fjF/gBOOXIGpNx7dGMhWZJPSATnS8afxhQ58/iE0+xJN/70nB4bGmDC3
8MbvvRsgmkToOdos3uNXfJYTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOpUoA8G9
DoRvMb9dxDqoBT5UhLowHwYDVR0jBBgwFoAUgyiT0KdSAaIToGRFUyA9Aac8+v8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2NjMyL0EyNTQzOUZFNUUw
RDExRjA5NDc2MkYxM0M0RjlBRTAyL2d5aVQwS2RTQWFJVG9HUkZVeUE5QWFjOC12
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZ3lpVDBLZFNBYUlUb0dSRlV5QTlBYWM4LXY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2
NjMyL0EyNTQzOUZFNUUwRDExRjA5NDc2MkYxM0M0RjlBRTAyL2d5aVQwS2RTQWFJ
VG9HUkZVeUE5QWFjOC12OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHfqUBg995cjHUquT4/tK8edcjHBeLXkJWGc25/9FkIENdrsSfOSUdR4
Uz49bVotEkbdRTFfXwh8pdddaM0QyvjrCA2E1Zn2eEUj+nvTOJbtGZ9uy4GMu5mY
EyB4S2eVrlQ0Nzbfeh4/a1OpErq4WmdNbmMsMbsbBXsrjAMVwyc0wINw1ayLs4ke
VfysMmpwuulzP/PgaKRuoRVejsNdpXXGErNz7f+m9o7AxZT1ku1a7dAgbcrIqyQk
sMo9eGjLP1eQw8wTG+ctI9v3VmGGTV4OFRG75W62qiw0Bkh3RevBts1mac/hqS5n
P4BYwZ6tRiIS7CEB6voplkuxyOtprCs=
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:38 2026 by rpki-client