This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
File:                     Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json)
Hash identifier:          Wkg1QxzElA9MYzwBvOr5XUBlEIZY2mTS2eLtY9dDAXk=
Subject key identifier:   1A:77:B4:26:50:87:4C:54:C4:00:F6:6E:4D:74:40:20:B1:6F:C8:FF
Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
Certificate issuer:       /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
Manifest number:          04CD
Signing time:             Sat 24 Jan 2026 23:27:14 +0000
Manifest this update:     Sat 24 Jan 2026 23:27:14 +0000
Manifest next update:     Sat 31 Jan 2026 23:27:14 +0000
Files and hashes:         1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: 6oZr9e7FaZxMm5Y1eO6ypgeuQ65k8rZAAlDFavsA9Mg=)
                          2: F83346DA410211F097F43F85C4F9AE02.roa (hash: EnqZyVfj3TKzoAvrOL6tNqUILt/NgCo/Yq0hgyekdPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
                          rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
        Validity
            Not Before: Jan 24 23:27:14 2026 GMT
            Not After : Jan 31 23:27:14 2026 GMT
        Subject: CN=69755552-1ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:17:84:47:f1:e2:39:16:f8:68:29:56:a4:
                    0b:a9:cc:bd:a1:c6:03:c5:82:f6:cc:09:f4:1c:7e:
                    0d:31:00:95:c4:9c:86:1d:e6:b6:14:03:91:c1:58:
                    14:60:a9:54:bb:8d:b7:50:26:a3:9e:fa:e3:0b:37:
                    f5:22:06:ef:cf:be:97:e1:e6:fb:36:fe:a6:cc:60:
                    2d:96:a0:c5:fb:cd:ec:7d:0a:a0:df:95:47:c2:5f:
                    ba:e1:e2:89:4c:45:6a:4f:5b:98:52:5f:bf:da:5d:
                    83:e9:02:ed:06:fd:b0:81:4e:0f:c0:09:15:b0:79:
                    1a:e7:40:2d:54:ac:f4:db:a7:9c:aa:3c:1c:2a:4e:
                    10:ed:ed:52:77:17:a7:cf:55:82:60:9c:c3:9a:d7:
                    d4:0c:87:45:54:11:30:53:68:13:83:04:60:f4:5d:
                    cf:6c:f6:65:54:de:65:d8:f5:23:1d:9d:ab:d1:e7:
                    a2:18:46:bc:59:9c:12:4a:08:4d:aa:5b:66:85:7c:
                    40:a9:12:f6:a7:14:b2:ec:91:49:09:a3:47:e9:38:
                    0e:70:99:c3:b3:e8:e4:2b:a5:ab:99:21:ee:23:64:
                    34:57:44:9b:e5:0a:b4:65:f5:ee:8e:3e:5f:f3:dd:
                    cb:86:29:cc:41:b6:53:ba:b3:46:f2:17:48:d5:75:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:77:B4:26:50:87:4C:54:C4:00:F6:6E:4D:74:40:20:B1:6F:C8:FF
            X509v3 Authority Key Identifier:
                keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8a:c5:85:e2:ab:35:55:72:1b:03:33:55:b6:c0:31:5d:2e:
         45:bf:2b:0c:78:65:dc:27:09:e8:02:5d:5c:1d:53:e5:11:4d:
         43:39:0e:ae:d9:dd:c3:d5:7a:8a:45:67:de:a6:1e:11:74:db:
         b3:25:a7:ba:d3:bf:a2:ad:d1:8c:df:81:92:b3:0d:fd:af:e6:
         27:60:66:09:10:89:cc:66:01:62:c9:2a:f7:e5:85:f3:e0:f6:
         8e:a1:5a:50:bc:65:d6:f9:c5:d3:81:48:4e:27:29:65:40:0d:
         6d:93:2b:66:e3:93:0c:f3:56:2b:df:e1:75:13:b4:70:2e:03:
         53:c8:52:0d:29:f4:de:f9:c0:e0:a9:b5:c2:76:80:e0:e6:e1:
         6a:31:91:29:b3:31:6d:5d:76:1b:ae:9f:d6:5a:45:92:84:d6:
         98:a2:5e:e2:69:fa:b8:3a:7c:22:d9:6f:95:63:c7:9e:af:23:
         58:dc:d8:69:95:59:d8:ac:a1:54:d7:83:ae:38:d3:74:d8:70:
         6a:55:90:5e:e4:61:2d:ce:b5:03:8a:f9:8b:bf:37:56:0b:c0:
         6f:6d:55:18:ae:45:84:14:2f:b8:7a:9b:b6:98:3b:27:f5:98:
         d5:14:81:a4:3e:57:e3:49:93:c5:2e:40:d5:c1:a2:0e:8f:ee:
         f7:4e:e1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:19 2026 by rpki-client