This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
File:                     GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json)
Hash identifier:          HnzToORtVnhH9QOE7gexrM951CvpyC1o11Pd+1Rqxys=
Subject key identifier:   FA:D7:22:45:EB:A6:61:6E:A4:82:A0:58:F1:EA:AD:CC:56:D3:DB:80
Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
Certificate issuer:       /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Certificate serial:       09F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
Manifest number:          09E9
Signing time:             Mon 02 Feb 2026 19:33:59 +0000
Manifest this update:     Mon 02 Feb 2026 19:33:58 +0000
Manifest next update:     Mon 09 Feb 2026 19:33:58 +0000
Files and hashes:         1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: EgUGbjN5bGJaBMJk1ZCN/6KRo0bBbmxDP++GNlfWoy4=)
                          2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: F610C7Ym+IbTxaB7/QFjiGQSnmA/MEfTbDdc0n6x2y4=)
                          3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: AS8hUi479g1JOMhqd/DGudZL1BV4/ri0MrfNsHx+xyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
                          rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Feb 2026 19:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2553 (0x9f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
        Validity
            Not Before: Feb  2 19:33:58 2026 GMT
            Not After : Feb  9 19:33:58 2026 GMT
        Subject: CN=6980fc27-5496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:d3:2d:6e:64:80:47:7e:1b:95:50:ac:20:
                    93:a0:41:f6:a1:f0:e7:7f:37:e4:ef:55:02:ab:e3:
                    ba:7a:50:a2:c9:05:e0:b4:78:40:9c:e6:44:e9:81:
                    ed:40:4f:70:af:d6:7c:b3:62:69:43:ba:35:6e:c9:
                    1f:c5:2e:ad:b4:91:8f:a8:33:77:c2:78:b7:30:4c:
                    28:26:a8:ea:22:ca:ff:8c:be:c4:e5:19:2f:eb:a0:
                    ea:a9:1a:ad:a1:04:93:8c:41:4e:78:67:07:09:db:
                    4b:55:19:ae:26:d2:47:ba:57:81:92:98:2d:5c:f7:
                    18:0f:51:33:51:c7:5a:68:23:a4:20:c3:2d:93:5f:
                    03:a3:09:4a:39:b4:9f:be:d2:1d:dd:fb:69:1a:8f:
                    c2:59:4a:1d:fc:63:46:b3:52:5d:86:14:96:8b:a8:
                    b8:aa:4b:82:fa:7c:48:e7:63:4d:46:5e:a8:e7:8a:
                    30:84:a9:c9:d8:82:09:eb:ad:56:f0:c2:46:16:57:
                    b4:d8:57:f2:4e:0c:0b:02:c6:08:17:f0:f5:31:c7:
                    fd:00:01:c4:43:33:b1:14:44:18:45:d4:fe:c9:cc:
                    f6:04:6e:db:bf:c2:b9:18:7f:01:b3:f9:a5:07:ad:
                    cf:2d:6f:b9:e4:63:76:ca:d6:5b:98:67:43:24:0a:
                    ac:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D7:22:45:EB:A6:61:6E:A4:82:A0:58:F1:EA:AD:CC:56:D3:DB:80
            X509v3 Authority Key Identifier:
                keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:11:16:2a:1a:5a:de:82:08:3c:8b:9f:11:f2:17:e3:6e:e5:
         4c:19:b5:6e:26:d8:17:11:a5:5b:d7:b9:c3:7b:b5:e6:2c:21:
         6e:2d:57:38:03:c1:e4:6d:dc:c0:34:86:d4:cc:3c:48:b7:32:
         6c:13:6b:df:c4:67:e1:d1:3b:59:8e:f0:43:b8:aa:2f:60:fc:
         f3:e1:e0:d6:1a:eb:95:43:89:50:8e:23:a8:5e:8d:d6:7e:2f:
         0f:57:2b:76:03:56:23:cf:f9:96:54:92:97:8b:ea:ec:af:a2:
         8c:56:11:80:3a:32:1e:61:1b:d6:8a:2f:f6:5f:b8:12:31:90:
         44:37:04:c9:74:72:af:a7:cb:6a:15:f4:a0:61:f1:41:aa:88:
         be:52:f6:9d:e6:36:06:b0:22:6d:4a:5b:a0:45:ff:96:0d:39:
         53:b5:65:b2:0b:0c:07:b5:b0:5b:91:3a:f1:d9:92:86:90:b0:
         19:cf:4a:48:8a:a5:fc:ae:90:f4:3a:7d:05:1b:a4:62:91:e8:
         d1:6b:bf:f6:64:ce:a7:65:46:10:c1:f4:75:4d:e8:5b:8e:6f:
         d2:54:fd:82:88:26:36:33:4b:8a:d8:a2:55:62:bb:03:85:0c:
         56:63:35:7c:16:2b:bc:06:db:32:45:a9:94:cb:ce:06:98:a6:
         ee:8e:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:32:46 2026 by rpki-client