This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
File:                     YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json)
Hash identifier:          A9UWrjWygddYry8RqoA+gYU8ZJl32FJNUj2C6bG+zis=
Subject key identifier:   E9:D5:6D:CB:AD:A5:09:B0:17:82:CE:96:8B:37:12:E4:6F:86:21:15
Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44
Certificate issuer:       /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
Certificate serial:       0A36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
Manifest number:          0A30
Signing time:             Sat 24 Jan 2026 19:11:59 +0000
Manifest this update:     Sat 24 Jan 2026 19:11:59 +0000
Manifest next update:     Sat 31 Jan 2026 19:11:59 +0000
Files and hashes:         1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: j+ppYhP0JisG0sXF2wXhlLuum3tO4j+J40kiYPruViw=)
                          2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: Jr5A5EFDHOtjVbEZUPlRHjoDRI+w8P0c18JoA/Eyebg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl
                          rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2614 (0xa36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
        Validity
            Not Before: Jan 24 19:11:59 2026 GMT
            Not After : Jan 31 19:11:59 2026 GMT
        Subject: CN=6975197f-5c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0f:9e:3b:9d:94:f2:3b:6d:bc:d2:69:40:71:
                    51:2f:5a:bd:bb:e4:dc:a7:99:34:a7:6c:53:80:77:
                    9c:5e:7d:a8:98:18:07:06:ec:47:16:56:1a:a9:e9:
                    13:40:4c:ca:21:f7:b4:fa:de:a6:44:2a:08:f9:4e:
                    02:64:b4:fe:65:f3:08:a1:79:be:d3:7c:10:ed:60:
                    4a:2f:99:1d:f5:5f:5d:41:5e:6c:37:ef:0d:3e:f6:
                    54:bd:c2:20:6f:d2:a6:db:63:51:53:4b:f5:41:68:
                    e4:8f:48:75:85:0f:c0:da:cf:ce:43:62:2d:c4:7f:
                    12:f1:a1:bd:c4:01:7a:43:b7:53:e3:69:c0:ce:1f:
                    41:dc:f0:25:22:4f:19:2d:af:95:c3:e9:e0:35:cd:
                    9e:3e:7c:b6:98:db:6c:47:15:43:41:7d:8b:61:db:
                    25:4f:1b:ee:dc:01:f4:41:a0:4e:40:64:1f:da:9e:
                    dc:22:f2:76:76:b9:90:95:49:c0:01:a0:0a:31:ea:
                    98:33:07:5d:88:cc:28:a0:fc:80:5f:42:b1:93:17:
                    be:e6:d3:4f:d4:4d:22:25:b1:b6:b6:31:31:df:d3:
                    f7:9d:84:ba:b1:78:45:19:ac:e3:2c:12:85:ef:89:
                    3c:57:d8:c2:26:fa:11:bd:dd:c7:a3:7a:79:c9:73:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D5:6D:CB:AD:A5:09:B0:17:82:CE:96:8B:37:12:E4:6F:86:21:15
            X509v3 Authority Key Identifier:
                keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:21:dd:63:21:76:30:44:0e:fd:f0:46:73:79:b0:2d:03:47:
         af:41:d7:f8:33:f4:57:ea:a9:08:41:b6:fa:b8:14:b7:62:f5:
         57:83:b2:62:f4:1c:3e:5e:a0:13:63:cd:ed:a4:5b:f2:27:a6:
         83:ba:28:34:6e:ee:61:4e:7d:60:c3:44:ca:d1:68:f8:00:0e:
         66:4c:1d:8a:d6:d6:a6:0b:6c:af:3f:a6:51:98:76:78:a4:e0:
         6e:fe:a0:0f:0a:ab:aa:7f:0a:92:05:dd:d6:fc:81:c4:24:a5:
         5d:a7:94:02:54:00:6e:d4:5a:e4:63:4f:f6:b8:d2:5f:d8:c3:
         40:b8:c0:1c:7d:6a:d9:0d:65:b0:d2:cd:ce:e9:17:3a:66:74:
         be:62:a7:21:51:9d:e0:cf:5c:2a:f2:7c:92:fa:e3:69:5f:c1:
         e7:a4:5d:68:42:08:9b:89:72:26:aa:a7:3a:9f:5c:c9:cc:f2:
         65:63:76:53:0d:85:6d:41:0d:5a:27:f9:06:1e:29:86:e4:3a:
         34:66:b3:4f:26:36:01:71:1c:f3:4f:65:ac:ee:cb:7c:2b:2a:
         f7:4a:92:ce:5f:dd:df:06:aa:f4:9d:92:f1:24:6c:fc:6a:bd:
         7b:56:32:da:05:3a:06:47:7d:42:1e:68:f3:47:04:21:a9:b0:
         43:16:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:30:38 2026 by rpki-client