This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
File:                     yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json)
Hash identifier:          /04CGFQY/OuT6wNWtipmAHWdiw9qnqhPy2mGhk7DyNs=
Subject key identifier:   35:C6:6D:D6:C0:5D:19:69:A7:90:45:55:4B:DE:A1:DC:15:D7:F4:D8
Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB
Certificate issuer:       /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
Manifest number:          BF
Signing time:             Sun 25 Jan 2026 05:10:12 +0000
Manifest this update:     Sun 25 Jan 2026 05:10:12 +0000
Manifest next update:     Sun 01 Feb 2026 05:10:12 +0000
Files and hashes:         1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: iJJMOj3vlKbwyRTfUytW3QT/c9l3QB3wS9FN2ox+Ql8=)
                          2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: vXg2V9oSq+UecV6UR/hi4Z0CckYReJT3wpjl4H/MqsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl
                          rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB
        Validity
            Not Before: Jan 25 05:10:12 2026 GMT
            Not After : Feb  1 05:10:12 2026 GMT
        Subject: CN=6975a5b4-164e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:a6:26:bb:73:5b:3d:db:17:4c:74:5e:8d:
                    2e:46:56:0f:20:4b:d3:f0:21:2a:dd:be:4c:6f:60:
                    13:fe:16:03:2c:16:32:00:96:57:cc:52:93:24:8e:
                    a5:a4:46:4a:b8:2d:1e:1d:52:7b:c5:17:f4:6d:e0:
                    a3:74:03:14:79:e2:f2:de:7e:28:d2:75:62:66:57:
                    89:6d:f9:a9:56:2d:25:5b:7c:fd:23:54:7e:fd:c8:
                    3d:f6:07:24:ae:eb:f8:36:67:3c:80:ff:e0:b6:63:
                    58:ac:04:3f:97:81:73:7e:6f:8d:7e:8a:da:dc:1a:
                    7c:bf:62:f8:3a:6c:a7:de:af:ba:bd:ce:d0:72:32:
                    82:a7:8c:95:e6:02:89:41:f1:f0:f6:67:bb:01:4a:
                    80:2b:d0:3d:2e:51:3d:69:53:a8:92:e8:d3:9c:99:
                    a8:33:e8:30:b3:cd:69:15:f4:36:42:9f:0e:97:5b:
                    0e:b3:98:c5:88:42:95:95:7f:f0:e7:39:3e:a2:ec:
                    61:4e:7c:af:b8:53:e0:9f:ed:d7:bb:0e:e2:0a:76:
                    d9:ff:46:74:08:84:2f:6a:3c:f4:bc:5b:c4:aa:4b:
                    55:43:62:96:75:e6:46:04:66:71:a2:bd:69:61:5b:
                    db:33:90:fa:95:f6:d8:17:d4:3a:ad:a6:2d:bc:f4:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C6:6D:D6:C0:5D:19:69:A7:90:45:55:4B:DE:A1:DC:15:D7:F4:D8
            X509v3 Authority Key Identifier:
                keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d4:c8:ac:15:d6:cd:63:0d:45:d0:de:20:9d:4d:3e:b6:28:
         75:be:9f:af:55:31:08:2a:3f:09:d4:5d:64:fb:23:40:c9:45:
         32:fb:ee:88:cf:bf:c2:2d:35:db:2b:a3:45:e7:5a:d5:c5:44:
         81:e4:55:06:61:bf:fa:5b:1a:5e:61:84:d6:27:3d:dd:a2:44:
         04:79:24:1e:cb:82:7c:52:16:49:14:e5:f9:3b:19:3c:5e:3d:
         e6:bb:64:b0:a6:1c:3f:ca:88:13:65:bc:ba:c9:2d:4a:52:71:
         e5:c0:6d:25:af:6d:00:40:08:bf:31:fa:69:c1:7d:50:5f:a2:
         3c:1f:5f:c0:dc:d2:77:93:de:cb:9d:5c:b6:ab:54:0b:b7:1c:
         94:56:b6:f2:ed:d8:5d:57:b8:f3:a6:7e:14:e3:d4:68:d5:61:
         b2:f8:b0:22:9b:48:32:1f:91:0a:11:08:a3:1e:c1:42:53:f4:
         e3:fb:e8:c1:a7:de:c9:49:aa:81:81:a1:7d:c3:12:8e:e6:a8:
         e1:82:9f:b3:b9:c6:79:52:af:7d:4b:f3:87:07:14:7b:09:db:
         eb:d3:29:62:77:3d:ba:4e:8e:dd:55:3b:cd:f8:7a:d0:c3:59:
         5d:b2:59:a5:4b:0e:c2:c6:f2:9d:06:e2:4a:fd:ea:fe:db:d7:
         d7:3d:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:40:58 2026 by rpki-client