This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
File:                     YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json)
Hash identifier:          GLwMhA9U8dYyzspw/rsafGAcRTLSQKX+bFy+V+y0iCU=
Subject key identifier:   69:7D:E6:C0:07:F6:73:E2:6A:11:33:6A:1B:17:49:9D:B9:20:7C:DB
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Certificate issuer:       /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial:       053B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
Manifest number:          0526
Signing time:             Sat 24 Jan 2026 22:49:49 +0000
Manifest this update:     Sat 24 Jan 2026 22:49:49 +0000
Manifest next update:     Sat 31 Jan 2026 22:49:49 +0000
Files and hashes:         1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: yte4Mm8JRHsvX7rm0JQ5x0Vn6lmENFzx2LeBDnVBpLI=)
                          2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: FE6e27RdwbgfOIo+ikPTPJ/pdQA+p/z7qpPIRAny0BQ=)
                          3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: Pm0s4Nw0vjEdOt8OEH+67yrk/B68Gy2u6QwOvd+DpWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
                          rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1339 (0x53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
        Validity
            Not Before: Jan 24 22:49:49 2026 GMT
            Not After : Jan 31 22:49:49 2026 GMT
        Subject: CN=69754c8d-a6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:21:74:a7:1f:52:c4:80:7e:2e:a7:71:9b:
                    c7:3a:2c:ef:f5:73:e9:82:57:b9:11:2a:eb:f4:8f:
                    b9:63:77:1b:79:a9:9d:da:59:1f:0a:61:fa:90:28:
                    19:7e:ae:d5:20:14:5a:10:23:8d:79:d0:53:44:35:
                    6c:6c:57:7e:c6:a1:a3:44:d4:53:be:cc:9f:f6:02:
                    cd:5c:8a:37:5e:d0:0e:17:8a:ff:59:65:60:7c:a5:
                    60:fc:b1:9f:9a:af:66:ce:0d:93:1a:c5:a3:5e:5e:
                    e1:4b:d9:f2:8b:56:62:51:1f:18:41:ae:ee:57:06:
                    dd:b4:21:8e:a3:d8:38:76:bf:a6:d4:ff:8a:e4:b7:
                    f6:b5:aa:9b:fe:45:58:2b:03:98:87:a1:1e:33:bf:
                    29:6d:87:82:4d:ab:5c:7f:ad:5b:f5:95:ee:ee:1d:
                    8c:fe:22:2c:b4:c4:3f:6a:fd:35:8b:da:fd:a7:b1:
                    85:11:ad:e2:f0:be:06:a7:d0:2c:6a:98:e1:b3:47:
                    e4:0f:54:85:51:91:54:f9:04:21:bf:04:8c:87:c6:
                    08:97:af:07:c4:6a:5d:66:4f:d9:d9:07:aa:58:c9:
                    69:ee:0a:56:c0:93:d9:d2:44:da:fc:05:b0:d5:15:
                    02:7b:4d:ec:20:41:15:f4:24:76:c3:c4:53:38:76:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7D:E6:C0:07:F6:73:E2:6A:11:33:6A:1B:17:49:9D:B9:20:7C:DB
            X509v3 Authority Key Identifier:
                keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:d6:de:91:92:ba:ce:3c:dd:2b:6a:6e:c0:74:00:5c:b5:
         1b:cf:bc:92:a6:8c:40:33:54:b2:20:9b:e5:56:d4:2a:80:fd:
         38:6c:4f:d4:70:be:de:9c:27:e3:5f:0a:5a:36:0f:3a:28:af:
         e1:1e:60:2f:cc:8f:12:49:1b:57:c3:68:78:2f:2f:dd:d1:75:
         f0:18:5e:97:82:f2:71:73:35:b5:8f:29:47:af:a3:90:5f:1b:
         a3:37:89:70:a8:d1:61:39:86:38:84:65:e2:c4:0d:8d:6e:08:
         bf:4a:ac:d1:a9:09:44:cf:70:4e:2b:02:ac:45:fc:53:c3:8e:
         99:b7:7c:67:dd:a9:5e:9a:8b:13:86:10:67:b5:49:26:63:77:
         2f:13:eb:89:ee:55:7e:59:2b:00:9f:8f:d2:72:ca:6a:4e:db:
         ae:ff:04:9c:ce:49:99:49:2d:04:9c:28:79:9b:c3:32:99:74:
         50:b5:13:bf:d7:6e:2e:9a:59:5e:55:2f:fd:98:d8:12:f6:38:
         c4:5f:c4:f9:31:a2:36:1d:68:87:d7:e3:40:88:30:a9:db:e7:
         b6:b5:9e:fa:64:71:cc:a9:56:80:20:56:3a:f3:3d:9b:8b:ab:
         3b:84:7c:11:32:72:a6:ea:4f:52:b3:fe:d3:c7:be:2b:98:fd:
         a8:67:e6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:54 2026 by rpki-client