This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
File:                     yvC3hLE-FADutCJboi1vmDiCTsM.mft (raw, json)
Hash identifier:          OBIawwJrmAkP973qMPXUx7fgu0aP+mwaieTJ6emdjng=
Subject key identifier:   8E:92:4F:93:CF:6B:4F:CC:F5:B6:C2:EC:B5:43:3F:67:C9:F0:3A:FB
Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
Certificate issuer:       /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Certificate serial:       15D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
Manifest number:          15B0
Signing time:             Sat 24 Jan 2026 16:30:41 +0000
Manifest this update:     Sat 24 Jan 2026 16:30:41 +0000
Manifest next update:     Sat 31 Jan 2026 16:30:41 +0000
Files and hashes:         1: yvC3hLE-FADutCJboi1vmDiCTsM.crl (hash: Vn56lNmQ/IOlJmi96GxVXOEwEmZ0wFqo96GeXCMpYOM=)
                          2: 0A668418C9EB11F091DA0157C4F9AE02.roa (hash: G0q1kVLLjpmOAsgB/MtpGh7lmRxZO5pRH/nVGn1BUrw=)
                          3: DD147B54CDC411F0AA804C7EC4F9AE02.roa (hash: c9tQ6tGOfHF6dDbo20j3PQMCUdrxSIao94HQBUVl16Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl
                          rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5590 (0x15d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D99E, serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
        Validity
            Not Before: Jan 24 16:30:41 2026 GMT
            Not After : Jan 31 16:30:41 2026 GMT
        Subject: CN=6974f3b1-afe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:00:d8:3d:ea:aa:ba:27:43:88:1a:e8:ae:3a:
                    fe:3b:fa:30:a6:01:f9:0f:77:4d:b2:90:0a:e0:e6:
                    50:0c:84:f8:a0:63:67:b8:78:ca:e9:5b:39:c3:37:
                    db:2e:5b:58:d5:88:ce:be:a8:a7:d7:bf:a9:a9:01:
                    7a:2a:75:df:65:0d:97:ca:4b:d2:4a:08:11:d4:2c:
                    de:80:1b:ec:8f:49:9d:1c:1a:1d:c8:40:27:31:3d:
                    63:e2:65:b6:36:58:66:fc:bb:9a:71:91:9d:b3:15:
                    fa:2e:c6:54:af:f5:fd:ce:cd:2c:84:1b:02:86:f1:
                    8b:b4:91:6b:c2:6f:c6:0e:6d:7f:e2:20:77:d9:6f:
                    06:17:4c:9b:24:22:51:0a:f3:4d:1a:77:9a:3e:d9:
                    ec:79:9a:69:f8:f5:5e:87:3b:99:18:76:66:3b:fc:
                    24:40:23:ad:60:3f:85:5b:aa:99:83:89:6e:8f:90:
                    24:cf:15:7d:7b:18:10:3b:3c:67:57:67:0d:42:78:
                    43:bf:c2:e2:48:72:f0:be:27:29:f6:33:63:c3:b0:
                    a2:bf:f1:7f:82:47:e3:a9:3c:5b:e6:ca:d6:2c:37:
                    09:fe:0c:a3:1d:df:a3:ca:8f:7a:ee:21:a0:8c:a8:
                    58:9c:68:25:7a:03:40:90:86:6e:67:8a:8e:c6:ea:
                    e6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:92:4F:93:CF:6B:4F:CC:F5:B6:C2:EC:B5:43:3F:67:C9:F0:3A:FB
            X509v3 Authority Key Identifier:
                keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f8:2d:39:8b:94:76:8b:a1:6b:70:cd:84:95:1a:af:ea:44:
         8d:07:1f:05:97:5f:b7:46:aa:5e:f9:76:52:25:05:66:45:ba:
         86:fc:6e:54:e8:9f:22:46:ee:3d:61:96:70:4a:0b:d4:8e:3e:
         e8:64:47:72:b3:8b:8f:ac:e5:85:d7:ee:54:ca:5c:93:88:a6:
         d2:f7:21:8d:9d:a6:2b:c0:f8:71:f8:e9:49:0f:40:b5:5a:bd:
         76:ca:f7:84:a7:e4:b7:a2:19:d0:4a:02:ee:cf:f8:01:8c:e8:
         57:6f:5a:29:93:c8:31:b9:ce:7b:b1:9f:f5:86:e4:68:3d:62:
         9c:26:22:c1:87:59:e1:79:a5:14:b4:73:e0:c7:6f:9f:91:24:
         0f:21:e6:76:77:e4:ee:69:68:35:73:88:21:bf:a2:01:7a:13:
         5c:01:1e:b6:00:b8:26:64:a2:dc:28:db:73:e3:65:72:b3:94:
         3e:77:9d:82:a3:15:a1:8c:34:6d:0d:de:b0:d5:2a:e5:81:f0:
         61:e7:d6:1d:ae:93:a9:24:5a:89:60:51:51:6d:2e:04:a2:02:
         9f:22:fc:ed:3b:ea:fa:05:17:aa:22:57:99:08:58:9c:0d:b5:
         9d:08:26:3b:82:f4:46:13:cb:b4:f5:9c:dd:ab:b2:ee:b6:cb:
         9c:cc:83:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:15 2026 by rpki-client