This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
File:                     ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json)
Hash identifier:          we/bSV7Lo6cAGxBHo9RuZrjy91v2l/K6gtp5DTKgJfo=
Subject key identifier:   5F:BE:44:40:0D:29:50:80:8B:11:D3:C4:3A:4B:DB:25:FF:92:6A:1B
Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Certificate issuer:       /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Certificate serial:       0CCC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
Manifest number:          0CC2
Signing time:             Sat 24 Jan 2026 17:52:55 +0000
Manifest this update:     Sat 24 Jan 2026 17:52:55 +0000
Manifest next update:     Sat 31 Jan 2026 17:52:55 +0000
Files and hashes:         1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: zN41n/VL6He1ldDMoONI9EKiCJ2eTSryFTz0ImYH71k=)
                          2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: QXDdzYa6iyzovy5Z9ik5QXaJEcfXc3NGsSzn/V3Ryt4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
                          rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3276 (0xccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
        Validity
            Not Before: Jan 24 17:52:55 2026 GMT
            Not After : Jan 31 17:52:55 2026 GMT
        Subject: CN=697506f7-bb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:52:e8:f0:24:7e:e1:87:de:fd:86:2c:dc:
                    b7:6f:de:96:51:20:02:c6:bf:8f:c2:b3:fd:d7:50:
                    72:71:4c:8a:d8:d2:60:f3:f5:07:5e:e5:ab:73:b3:
                    f0:7f:ff:36:ed:e0:b9:cf:25:8d:54:ed:f3:d9:d4:
                    bb:b7:e0:82:bf:98:bf:e9:f1:e4:d7:01:91:d3:36:
                    0d:b8:4a:1b:47:80:48:45:2d:80:93:ed:68:7f:92:
                    d7:09:b6:c1:7a:df:17:47:9e:d8:dd:30:04:9f:7c:
                    75:42:49:da:16:08:24:c1:60:c9:84:6f:5e:ff:df:
                    2d:e6:a2:93:a5:ac:97:a2:36:6f:50:cf:bd:70:9b:
                    4f:43:a7:8c:4b:db:1c:c3:5c:45:2a:ff:ab:c0:2e:
                    17:e7:68:02:e8:0f:f5:c6:61:14:2a:01:a9:a4:e8:
                    c6:f2:80:af:80:9c:c1:78:07:c7:88:fb:b0:f9:eb:
                    38:6c:2a:30:78:b7:67:a2:da:3b:8c:3e:fc:df:08:
                    3a:09:9e:df:fe:13:25:af:5f:66:aa:37:7d:d8:98:
                    d9:79:bc:41:2c:dc:c3:49:9f:8a:f6:0e:8b:c0:26:
                    44:84:29:8c:89:4d:d7:a1:1d:84:33:c6:13:0a:5b:
                    b7:7f:3c:3b:79:ce:5d:49:63:0e:63:a0:2c:52:44:
                    75:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BE:44:40:0D:29:50:80:8B:11:D3:C4:3A:4B:DB:25:FF:92:6A:1B
            X509v3 Authority Key Identifier:
                keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c1:83:34:4d:7b:c3:94:c7:cb:b6:47:65:ef:07:6f:06:a5:
         7e:99:f7:a9:3c:2b:84:7e:2f:20:b7:13:b9:90:e6:fc:23:95:
         1b:52:36:33:12:d7:3a:57:aa:4f:0f:e6:22:49:dc:20:aa:de:
         2c:a1:bd:ec:39:4e:58:49:6d:66:d8:de:2d:00:e3:7d:a2:0f:
         16:ad:c8:7f:9d:6a:1e:55:73:ea:29:72:81:37:46:ee:a1:8a:
         45:4f:24:13:2c:ad:f0:60:a5:22:eb:cb:a2:ef:36:e9:21:9b:
         f7:5f:a4:cd:68:41:bd:0e:47:d4:27:23:32:0d:b7:b5:29:6d:
         4f:9e:6f:33:65:a8:0b:ea:cd:2e:e2:17:1e:86:fc:a4:54:9d:
         8d:c1:85:27:53:db:83:f7:a8:6b:13:05:39:cf:4c:d1:e1:3e:
         72:71:20:79:66:7b:a4:52:cc:62:76:7e:9f:03:75:5f:79:ae:
         af:cc:ee:28:21:55:44:db:f2:93:ec:e1:ad:a7:5b:ec:d4:16:
         80:0a:ca:12:7c:5c:f4:b9:46:2e:f8:5b:df:8e:bb:f3:85:2e:
         68:75:5a:1e:30:24:71:70:5d:c8:c0:67:1f:f7:eb:35:ed:4b:
         07:88:b1:25:f3:d2:5d:95:77:03:3e:c2:68:04:9f:e9:cc:d2:
         f9:81:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:05 2026 by rpki-client