This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
File:                     yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json)
Hash identifier:          8auDzhOQ3px3UDSRY3Xg7FBcm6ylZiN5eh1u4JZ1wrk=
Subject key identifier:   DD:84:DC:06:B3:86:54:AD:05:32:67:EA:EC:A2:30:85:AD:6B:08:E9
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Certificate issuer:       /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial:       025C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
Manifest number:          0258
Signing time:             Sun 25 Jan 2026 00:55:03 +0000
Manifest this update:     Sun 25 Jan 2026 00:55:02 +0000
Manifest next update:     Sun 01 Feb 2026 00:55:02 +0000
Files and hashes:         1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: GMr8E/L7bqeIcy/KA8gvtE/aT6UbqLZWv2GTXI2apXs=)
                          2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: 0dlbreUmhOPpVhne6aJZBNls5GiTDrN1TntwCVFUe0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
                          rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
        Validity
            Not Before: Jan 25 00:55:02 2026 GMT
            Not After : Feb  1 00:55:02 2026 GMT
        Subject: CN=697569e7-53d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:fe:4b:bc:bf:19:96:1e:5e:0d:b0:d8:84:
                    0c:93:24:ab:00:23:8b:2f:82:1f:d4:68:b2:5b:b1:
                    6c:16:a7:52:f8:3a:b9:9b:a4:fc:e0:45:3a:73:17:
                    8b:c4:4d:4e:be:61:cd:8b:ab:eb:47:a5:22:0d:79:
                    72:7a:a5:64:a2:81:25:c7:26:96:dd:3c:fa:b8:06:
                    0b:b7:87:02:b5:a0:93:62:48:02:96:56:47:6a:a3:
                    1e:51:54:16:dc:0b:51:b1:28:86:25:ff:d1:9b:9b:
                    78:49:6f:f5:04:1a:21:75:fc:37:78:de:69:33:35:
                    e5:f7:91:36:19:c6:3d:ff:6c:55:b8:77:37:cb:c7:
                    d5:05:66:79:82:03:17:0e:c2:c9:2c:29:88:f3:a8:
                    a1:65:8b:d2:62:ee:d4:81:5e:38:48:6b:6e:58:3a:
                    36:76:56:ab:0b:08:b7:3a:24:42:84:4c:db:fd:18:
                    43:7a:16:a3:cb:48:50:5a:74:9e:65:21:cb:92:03:
                    3b:a4:af:73:ce:35:48:d1:f1:75:1b:3b:b4:ab:bb:
                    46:15:47:70:86:d6:2d:33:1d:a9:b9:4f:73:d6:17:
                    59:9d:dc:cf:36:64:43:f7:9d:23:9d:ac:5a:51:87:
                    01:c1:d1:c6:b6:46:57:cb:f5:84:94:1f:6b:7f:a4:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:84:DC:06:B3:86:54:AD:05:32:67:EA:EC:A2:30:85:AD:6B:08:E9
            X509v3 Authority Key Identifier:
                keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b6:e4:28:c0:8b:8e:5f:0a:46:f8:43:da:03:fa:64:8c:fb:
         86:57:08:94:c2:d1:81:1d:22:9b:29:64:3d:31:8c:5a:2a:7e:
         3a:5d:9e:b5:76:89:aa:79:8a:ff:26:91:72:e4:ab:4c:13:69:
         77:1a:ff:aa:a5:07:cb:76:74:77:69:a9:d5:91:ff:a0:5c:4e:
         ad:50:67:fa:1c:9b:9d:0e:13:51:69:86:38:98:8e:0a:6b:50:
         6e:e4:7a:01:ff:2e:93:a8:58:92:fd:db:ea:fb:7c:26:ff:3d:
         13:29:02:22:c6:3a:fd:10:c1:90:17:ef:fa:5a:c0:be:9d:f2:
         bf:55:94:ad:9f:79:14:92:0a:55:a7:06:15:66:42:1e:c0:29:
         e7:9a:94:c7:3d:23:2f:4e:14:6c:31:8c:77:16:db:dd:17:fb:
         13:a1:91:6f:a4:8e:34:d4:79:8d:6b:d8:3e:fe:63:71:84:d6:
         59:7b:f9:74:25:38:1a:b9:b9:cd:18:b7:76:2d:14:bf:19:57:
         d9:2d:10:a3:cb:b0:0c:c4:8e:cc:1e:a0:e3:b8:03:59:6a:cf:
         71:61:56:11:26:67:9a:13:89:aa:26:c8:a2:e4:ea:01:2d:01:
         5c:8c:87:3d:02:b4:fa:79:b0:ce:4c:81:50:91:49:b2:78:ef:
         d8:71:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:59 2026 by rpki-client