This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
File:                     YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json)
Hash identifier:          C7Ltat7nT/4fIStFehmqI1Ng0EftUdFZeMKHTTnAJxM=
Subject key identifier:   51:71:AE:80:8B:03:3A:2C:C6:09:37:26:A3:1B:EA:17:49:B9:49:E8
Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41
Certificate issuer:       /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41
Certificate serial:       0640
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
Manifest number:          0630
Signing time:             Sat 24 Jan 2026 22:05:26 +0000
Manifest this update:     Sat 24 Jan 2026 22:05:26 +0000
Manifest next update:     Sat 31 Jan 2026 22:05:26 +0000
Files and hashes:         1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: eR6LcslP9GleKr9b2HM7KzSdbOk9YREYCOCBwEon5Xc=)
                          2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: A2gWKQCuXokFN7KlbAuAuGxPuN4tg+45srC8ygtmfOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl
                          rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41
        Validity
            Not Before: Jan 24 22:05:26 2026 GMT
            Not After : Jan 31 22:05:26 2026 GMT
        Subject: CN=69754226-422a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:43:aa:59:0f:9e:f2:a5:34:0c:b1:c9:a0:
                    4e:0e:d1:2c:48:41:cc:40:96:20:6f:f8:af:cc:e2:
                    75:4f:e6:7a:14:ea:2f:00:29:cb:0a:10:22:96:9e:
                    38:81:98:b1:0c:48:6f:f7:59:d5:a3:36:6d:c4:f8:
                    74:81:bb:54:37:d2:c7:65:96:fe:51:d7:a8:83:a2:
                    4b:d1:41:57:0f:29:bb:72:b0:fe:f7:28:14:90:77:
                    0c:71:3f:3c:66:39:11:17:ab:c0:bf:b7:fa:60:f1:
                    e1:40:db:52:ed:ec:a9:ad:35:c8:7d:5a:d5:15:94:
                    9f:07:ba:ff:81:db:da:5e:ec:8d:4e:90:c6:8e:3e:
                    53:95:b2:84:3a:c9:fe:a7:9d:c7:fa:5c:37:81:16:
                    12:5c:40:b4:a9:1b:88:5f:42:48:6e:06:6f:30:8f:
                    75:bb:32:43:05:43:25:91:02:da:3b:68:f0:e5:a8:
                    80:c6:a5:6c:12:fe:26:8a:dc:a4:bd:cc:4e:98:4a:
                    cf:e0:ab:30:d3:67:04:08:36:34:75:a6:55:17:88:
                    c4:65:83:ff:8c:92:1f:ed:91:cf:6e:a1:ad:77:12:
                    99:90:75:37:cd:e7:45:6a:60:2c:b5:f0:53:fb:8b:
                    ce:86:69:e9:b4:e7:1a:44:8d:fd:2c:3d:2e:64:77:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:71:AE:80:8B:03:3A:2C:C6:09:37:26:A3:1B:EA:17:49:B9:49:E8
            X509v3 Authority Key Identifier:
                keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:21:5b:4f:4b:ad:8e:f9:37:53:4b:b0:64:b3:48:e1:fd:2b:
         43:f7:1a:a0:a9:b1:51:96:40:29:b4:78:00:7b:01:fe:25:6a:
         1d:8f:5c:00:ac:2b:90:e8:94:a2:fb:d0:14:e9:62:70:5b:31:
         b9:f3:ab:37:da:c8:07:2e:e4:f9:e1:42:f2:b5:79:0f:e9:3d:
         48:76:b7:51:7c:15:35:09:bd:fd:c8:e4:24:e1:da:f7:54:ca:
         fe:3c:1c:af:0c:2f:82:e2:fb:f3:d9:63:c2:db:2c:5e:3d:2f:
         48:40:e3:5b:1a:d1:3d:69:b6:45:fb:15:79:d3:ce:cb:69:cb:
         f6:33:b3:79:b3:d7:d4:96:d2:ef:2f:ee:a4:9e:c7:ea:5a:e6:
         15:72:54:75:99:98:92:88:cc:96:57:57:08:6b:32:e8:f6:15:
         d4:7a:05:65:f9:5b:24:14:95:bc:f7:ea:89:e8:ad:e4:8b:72:
         91:eb:3e:76:e7:0a:0f:48:f2:e2:fc:1c:45:8a:80:c0:24:0a:
         3a:d9:55:8e:3c:ad:85:ec:86:f6:3a:0f:22:ec:eb:04:f2:c2:
         24:84:cc:f3:a5:a4:d9:5f:1e:ed:27:42:ab:26:16:71:b6:33:
         02:5a:18:f9:f1:76:21:ac:3b:51:49:0e:17:13:e0:40:41:ef:
         62:08:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:47 2026 by rpki-client