This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
File:                     yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft (raw, json)
Hash identifier:          M6Oy8iimhmgCMStqdeMqKESPxHzoL8AU+AbEg4AC7RA=
Subject key identifier:   FB:03:DD:2F:86:44:BE:46:5B:D7:1F:24:C3:D3:24:4F:E7:1B:2E:26
Authority key identifier: C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E
Certificate issuer:       /CN=A915547C/serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E
Certificate serial:       0304
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
Manifest number:          02FC
Signing time:             Sun 25 Jan 2026 00:25:14 +0000
Manifest this update:     Sun 25 Jan 2026 00:25:13 +0000
Manifest next update:     Sun 01 Feb 2026 00:25:13 +0000
Files and hashes:         1: yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl (hash: VxJq99iYoGdQqkj2cpSCjRLUbYoA9m+CV4ISzD+Dh8g=)
                          2: 80C08414A45B11EDA610F30BC4F9AE02.roa (hash: YECGFmsS3YqMK8QF+uRexbLFkUyQX0XL0w3iDLNMxig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl
                          rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772 (0x304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915547C, serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E
        Validity
            Not Before: Jan 25 00:25:13 2026 GMT
            Not After : Feb  1 00:25:13 2026 GMT
        Subject: CN=697562ea-006f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f4:53:8a:c5:3a:d4:7a:18:19:31:62:fe:5f:
                    a5:ad:a3:c4:65:e1:5e:4c:86:83:2b:9d:7a:24:64:
                    b4:1c:02:c2:fe:b8:14:c6:39:65:fd:14:16:11:2c:
                    64:29:ce:63:97:c1:27:d9:c5:d9:7f:04:4c:8c:33:
                    a2:75:0a:53:dd:d9:48:8d:fa:d0:72:46:6d:ee:43:
                    32:11:9e:cc:b8:60:5d:4d:3f:36:5c:84:d1:dc:b6:
                    e1:44:de:05:66:34:1b:c8:d0:a7:00:a1:e5:d2:34:
                    4e:2a:2b:bc:c0:57:56:d1:0c:db:72:63:af:10:64:
                    b1:48:d7:b0:8a:50:b5:37:3c:68:a1:20:70:0c:5f:
                    9b:86:d7:03:e1:d8:c2:b0:3b:e3:09:78:f8:b2:d7:
                    c5:8a:03:fd:a5:40:f9:a3:0d:3c:e7:1d:06:53:3f:
                    89:6f:4a:43:0c:b6:e2:a3:0f:70:59:ea:b3:27:d1:
                    15:f6:f6:dc:92:5b:5c:c0:85:ac:22:62:53:c1:83:
                    9b:d6:0b:a6:e1:06:ac:ed:53:ce:c9:c5:2d:7e:cc:
                    33:c4:e4:56:db:e2:67:20:d4:70:2c:c5:08:1b:5a:
                    7c:de:ed:f6:b3:b0:8b:7a:ff:26:25:ce:82:50:b1:
                    39:fe:5e:b5:50:22:49:b2:b4:a3:9c:ac:47:c6:05:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:03:DD:2F:86:44:BE:46:5B:D7:1F:24:C3:D3:24:4F:E7:1B:2E:26
            X509v3 Authority Key Identifier:
                keyid:C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e0:b4:17:09:8e:66:14:fb:a9:c4:ac:9f:17:2b:d6:e4:1c:
         b4:38:71:7b:87:23:0a:4a:68:ea:85:0a:ba:14:93:38:48:66:
         d8:8a:33:17:68:c7:39:57:b2:8e:4a:d8:65:45:ad:cc:39:c5:
         17:7d:8d:19:c1:88:5c:bb:21:2e:4f:d3:b4:0a:7f:1d:c1:90:
         6b:eb:a6:8f:8a:3b:7d:b7:28:7f:d9:f9:b3:e4:d1:c4:d1:77:
         9d:06:57:16:5f:d1:1a:29:df:bf:27:1c:ee:37:51:ee:2d:ac:
         3b:ee:da:11:21:df:61:bb:a5:b1:63:b3:bc:88:73:cf:ac:09:
         6e:94:eb:55:7c:61:fe:63:04:4c:da:9c:98:0d:c9:4f:67:97:
         73:73:9e:4d:b0:12:fc:71:65:8a:bb:e0:9f:96:ee:af:ad:8e:
         c9:66:78:41:d5:db:a7:d8:ee:e4:b0:8c:eb:75:b8:84:67:a8:
         55:07:1d:f4:7c:b6:b9:a0:81:bd:39:b3:21:ea:66:79:e3:d4:
         76:44:72:cc:9a:cc:64:ba:af:ad:a6:fb:ce:82:6f:f9:7e:21:
         85:41:07:98:f1:30:31:71:db:19:85:b0:e1:7f:6e:22:1a:39:
         07:d7:c8:19:bb:43:a1:9c:1e:68:c6:ed:c4:52:1f:1e:bd:bd:
         b2:de:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:39 2026 by rpki-client