This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
File:                     yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json)
Hash identifier:          q8ihbSTwYGG3DH4eAGNOMDP9/0afb6vPGZ8bRBlLw2I=
Subject key identifier:   DA:F9:B2:DB:E1:88:D9:67:CF:C5:E9:0C:5A:98:DE:8B:59:8E:99:BF
Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
Certificate issuer:       /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Certificate serial:       04E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
Manifest number:          04DE
Signing time:             Sat 24 Jan 2026 22:59:52 +0000
Manifest this update:     Sat 24 Jan 2026 22:59:51 +0000
Manifest next update:     Sat 31 Jan 2026 22:59:51 +0000
Files and hashes:         1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: qzuS1tGvbrjgJFzNaAynCPIWyv5KgGDw3VYpfuwnClA=)
                          2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: aRUayRfr0vMR7tS5Y4z3m5ZDFVHmg6WwIEoeJRznQ08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
                          rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251 (0x4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
        Validity
            Not Before: Jan 24 22:59:51 2026 GMT
            Not After : Jan 31 22:59:51 2026 GMT
        Subject: CN=69754ee7-57e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:31:be:aa:64:dd:09:7f:f5:80:fb:c5:f2:
                    96:03:4e:e7:02:d5:69:aa:27:95:67:0b:db:10:5d:
                    3b:32:35:02:f5:58:a1:63:a3:ee:f8:d3:95:34:86:
                    65:3f:6b:63:6c:19:f8:91:29:f0:bb:af:0a:46:21:
                    20:8b:e8:07:f7:35:43:bb:d4:72:f9:2e:e8:bb:e0:
                    1b:db:26:5a:7e:8b:36:a0:02:36:a2:ca:c4:8f:85:
                    f2:6e:71:df:56:71:61:1e:9d:56:c4:b9:22:c9:76:
                    6d:19:61:e5:21:89:b5:56:48:1a:9e:b1:1a:fe:4a:
                    80:4d:89:1d:66:70:68:3a:bd:3b:a1:03:e5:26:d6:
                    ec:11:54:8a:93:57:53:3f:81:b3:c6:8b:d5:c3:4a:
                    85:bd:82:47:e4:25:83:26:c8:30:c3:2e:31:b3:b9:
                    1d:7e:36:ac:92:6c:24:59:55:e2:49:be:e8:f7:65:
                    5d:71:44:a7:c2:e0:c2:34:ac:7c:9a:b5:e3:cf:d6:
                    bc:f8:7a:d6:98:0e:37:db:f0:7f:c8:c8:63:4b:dd:
                    40:7b:07:51:b8:5c:70:ca:b8:96:76:0d:9a:42:29:
                    1c:e2:fe:52:e1:91:0e:ec:34:f0:8a:e8:bc:91:55:
                    89:c6:0a:0f:a8:2b:9b:06:d8:d4:e3:95:e6:ec:e3:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F9:B2:DB:E1:88:D9:67:CF:C5:E9:0C:5A:98:DE:8B:59:8E:99:BF
            X509v3 Authority Key Identifier:
                keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6c:b7:c1:55:8e:ce:a1:f6:2d:8d:b7:41:9d:08:dc:e9:8c:
         6c:03:07:18:63:83:93:9c:c2:a8:5f:e7:96:b2:8a:19:bb:15:
         eb:d5:58:d8:ff:b9:8d:1b:61:1b:d1:be:80:0d:99:4f:d3:f2:
         4a:f0:97:58:26:82:8a:a6:a3:2d:b6:d6:a0:dd:9a:14:e2:c9:
         91:70:3b:07:6b:70:b9:47:93:5e:3e:b8:eb:91:56:2c:b1:d7:
         0f:5f:12:f7:4e:f9:75:c9:66:00:8c:5a:f5:7b:3f:4a:b0:15:
         ad:f3:c0:47:2c:4c:ad:8a:42:cd:39:29:89:73:fc:45:f0:6a:
         0e:af:fd:9e:be:9b:26:a3:f0:fa:bc:17:6b:1e:3c:25:20:5b:
         64:5f:79:9d:d5:a5:55:3b:0d:fc:70:ee:27:12:a2:a0:78:68:
         07:93:af:93:df:0e:7b:25:2c:7d:11:91:18:f9:b0:53:ff:1b:
         3f:b8:fd:29:74:2e:d8:11:77:1f:35:ab:48:14:db:2d:a3:e8:
         c0:85:7f:46:8d:3c:b8:1b:63:6c:32:a6:29:a9:47:22:e3:4a:
         c2:49:68:eb:74:9f:fb:20:19:5b:bb:e5:35:96:b2:82:38:51:
         7d:a0:8e:21:ed:13:8a:e3:47:72:d9:5d:55:b0:67:3b:2d:e4:
         06:af:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:26:31 2026 by rpki-client