This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File:                     GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier:          Pj+EPOdonjM9Ta7PzOE3YdshqMMC3UZj/Fh2cl9WyhE=
Subject key identifier:   C8:BF:20:9B:76:E0:6D:DB:A8:48:A2:1E:7F:4A:F8:0D:86:CF:1B:B9
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer:       /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial:       0724
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number:          0716
Signing time:             Tue 20 Jan 2026 19:53:18 +0000
Manifest this update:     Tue 20 Jan 2026 19:53:18 +0000
Manifest next update:     Tue 27 Jan 2026 19:53:18 +0000
Files and hashes:         1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: 4ZBdcDOSFfY+N8DNEdqgFHu2ju8Kk/XVQCVsVN6qWlQ=)
                          2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: 8hBGvOyNwxB7qMibVDGpuRU5HevQ+Tcv9ZjJM79y8+w=)
                          3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: s8i5IxWnvTImsz9H5D4MuEQAm14mPHlkRay9ZZj+Qsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 19:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1828 (0x724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
        Validity
            Not Before: Jan 20 19:53:18 2026 GMT
            Not After : Jan 27 19:53:18 2026 GMT
        Subject: CN=696fdd2e-85cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:c3:01:5b:06:c4:b0:26:40:29:13:0b:44:
                    b4:94:dd:42:5e:9b:99:bd:c6:b7:83:11:0e:df:12:
                    df:60:3d:b0:27:d2:42:5e:96:f6:cb:46:38:29:67:
                    1f:20:c1:6c:ba:16:13:6c:a6:ae:ca:95:e5:27:0b:
                    59:e4:b5:3f:92:43:40:9e:d7:49:9d:2f:66:3b:8a:
                    c2:c9:42:82:4c:dc:5d:99:11:5a:a7:67:65:ee:c3:
                    f1:12:11:fd:ab:e6:e5:40:71:c5:a1:6e:bb:17:28:
                    e7:41:4d:e7:b6:64:57:c8:c6:ee:27:95:50:28:37:
                    3f:70:e3:cf:8f:0f:54:d5:c0:bf:39:36:7e:02:c5:
                    4d:59:c3:3c:20:6b:c5:d2:d1:ba:45:00:0c:49:be:
                    e4:82:d6:0b:e9:e8:76:8f:2b:3b:14:6e:fc:c7:41:
                    71:dd:ca:32:e1:da:51:c6:cc:02:76:f3:b6:f0:d8:
                    1b:b3:7f:7d:42:76:0d:f7:9e:1a:21:5c:65:51:ee:
                    06:09:81:43:19:30:6a:03:12:fc:e6:8c:8f:8b:09:
                    8c:2f:a3:07:8f:59:b1:cf:f4:ea:50:5d:19:96:31:
                    11:41:75:b8:31:93:f6:12:ff:3a:8e:9d:37:43:ae:
                    38:2e:7d:7a:ba:83:02:c5:03:91:da:91:1a:3e:14:
                    bf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BF:20:9B:76:E0:6D:DB:A8:48:A2:1E:7F:4A:F8:0D:86:CF:1B:B9
            X509v3 Authority Key Identifier:
                keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0d:24:fb:ad:21:95:84:04:5f:86:6a:12:81:8a:ec:54:df:
         65:20:65:78:83:48:2a:f4:67:c3:b4:1f:8c:4b:88:e0:a0:80:
         90:3b:79:1d:b0:82:13:24:9c:2a:78:10:8c:3f:d0:f5:09:1b:
         51:5e:2a:62:6f:80:9c:4d:b4:3a:b7:07:40:06:7e:55:56:66:
         71:4b:44:84:0a:9c:95:40:63:bc:30:34:0e:7b:26:d4:da:6a:
         7e:f6:75:03:46:26:b5:00:1b:b3:c0:b0:57:33:37:af:8e:2d:
         48:9a:54:32:fb:3c:54:72:03:07:f0:8b:36:78:f5:b3:56:af:
         a7:f9:14:5d:10:9c:eb:05:f3:a3:2a:33:56:f8:16:8b:f3:e6:
         0b:86:83:b9:2f:72:0f:5e:70:38:1e:2b:dd:67:97:e5:bb:3e:
         c6:c6:85:95:9c:51:88:51:ec:ec:ba:cd:77:ef:02:3a:8e:90:
         4d:ff:99:e5:1d:c0:9f:76:c9:9a:ca:16:46:36:f7:38:02:77:
         38:c5:91:e8:02:2f:f7:2b:a7:b4:9a:a2:67:1f:45:45:83:05:
         c9:31:c0:8f:f9:22:8f:d4:65:1c:99:6e:f4:b8:92:65:66:12:
         7c:51:48:d1:e2:9d:86:91:a7:e9:ad:34:91:7c:43:a7:ff:9d:
         3b:54:8e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:23:01 2026 by rpki-client