This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
File:                     Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json)
Hash identifier:          COacQECR+kip22KUdYR9aXnFC4G4FDqp8YENhnl9qco=
Subject key identifier:   F1:DE:02:06:7A:18:9A:4E:94:81:A1:9F:19:F7:FB:65:13:E2:CA:01
Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
Certificate issuer:       /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Certificate serial:       062E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
Manifest number:          0627
Signing time:             Sat 24 Jan 2026 22:04:27 +0000
Manifest this update:     Sat 24 Jan 2026 22:04:27 +0000
Manifest next update:     Sat 31 Jan 2026 22:04:27 +0000
Files and hashes:         1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: W39IBAKmu29UGBSv2Loh7cQ25gqdsUTKIowYS8LfKJs=)
                          2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: W1fkw/mYSuTpBkq23h73Gt2ZtwtQaM95I1fyF0uTlto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
                          rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582 (0x62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
        Validity
            Not Before: Jan 24 22:04:27 2026 GMT
            Not After : Jan 31 22:04:27 2026 GMT
        Subject: CN=697541eb-1108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:6f:ed:aa:79:19:32:85:95:9e:44:89:67:
                    5a:ee:8a:b7:ba:10:ab:d2:d5:ec:f8:1a:7b:6d:a9:
                    31:71:7e:28:ed:5f:cb:a7:74:11:40:f1:ea:cf:b4:
                    d5:3e:4b:e7:8a:00:25:6e:34:e3:bc:4b:8f:73:77:
                    93:d8:40:0a:f2:67:b3:1e:13:c3:59:85:a9:63:da:
                    d6:a7:3b:5a:72:dc:50:5a:9c:ed:7b:a3:75:75:7c:
                    2c:b3:25:e2:cc:79:77:7e:88:f2:88:18:e2:eb:e7:
                    13:77:e7:a2:c7:85:ac:7b:48:14:0d:d3:01:30:3f:
                    e7:8d:ff:aa:a2:58:04:09:91:15:63:74:15:29:5b:
                    8b:ff:73:c8:10:b0:15:48:48:6a:01:a7:a7:96:68:
                    41:ee:65:21:50:da:ad:8e:47:37:11:59:63:9c:01:
                    a6:a9:ec:7a:39:ad:84:7b:19:90:bf:01:70:dd:c3:
                    f2:7b:28:3c:5e:f0:22:8f:16:4b:6f:49:25:0e:16:
                    c1:75:f3:5b:1e:55:00:d4:34:89:c4:f2:a3:6c:49:
                    f8:dd:9b:ef:fa:d8:d5:cc:23:b0:65:0c:3a:75:c4:
                    ff:c1:4b:25:8e:86:aa:87:3d:2e:e4:3c:ad:98:be:
                    e7:60:2c:1e:30:e4:d7:41:8f:00:20:8a:35:ed:1f:
                    b4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DE:02:06:7A:18:9A:4E:94:81:A1:9F:19:F7:FB:65:13:E2:CA:01
            X509v3 Authority Key Identifier:
                keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:aa:c3:26:30:85:bc:40:2d:d8:95:fd:6a:9a:33:ca:e7:
         11:14:8d:46:29:d7:c9:9a:56:25:23:7c:2a:ae:db:3d:91:56:
         d5:30:04:dc:92:de:d1:e1:4a:bc:c7:67:71:7c:e7:86:53:8f:
         5e:6b:31:0e:df:2f:5c:4b:ef:fd:0f:7e:05:51:80:e0:2c:dc:
         05:ba:a9:e0:a1:66:4c:46:42:67:93:14:ae:55:fb:40:a8:e8:
         36:f6:e7:8d:f9:27:0d:fe:b8:96:67:34:25:a7:bb:72:e7:dc:
         1a:86:db:a9:23:f5:7b:80:14:e3:19:a0:6f:e1:bd:5d:71:28:
         80:6b:47:7d:3b:ae:56:94:ce:e0:bc:bc:a7:c0:02:8b:39:94:
         bc:ef:dd:21:4a:0c:05:0d:56:2a:e2:e0:bf:17:db:29:99:ef:
         30:d7:6a:b9:0c:09:96:f7:62:b7:0b:da:9e:b1:0c:b9:91:08:
         9e:16:7d:48:07:90:29:88:72:7b:6d:1f:f6:8f:1b:2e:85:22:
         8c:ab:86:e1:85:0f:5e:f6:c3:60:63:73:5e:61:6c:15:a4:2a:
         bd:6e:21:78:6b:11:9e:be:3a:a6:8b:a1:18:ac:79:61:62:97:
         84:64:85:61:d8:4d:99:d2:47:d4:60:29:22:66:78:3b:4f:6c:
         f8:12:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:00 2026 by rpki-client