This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
File:                     yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft (raw, json)
Hash identifier:          z1r6VvZnOvX7PPC/sJHzKIBz5Jh/iI0GNHr/vsmiJl4=
Subject key identifier:   3B:3A:7A:6F:80:79:41:14:F8:59:0F:1C:1F:F3:CC:37:35:57:55:5E
Authority key identifier: C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A
Certificate issuer:       /CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
Manifest number:          0165
Signing time:             Sun 25 Jan 2026 03:19:28 +0000
Manifest this update:     Sun 25 Jan 2026 03:19:28 +0000
Manifest next update:     Sun 01 Feb 2026 03:19:28 +0000
Files and hashes:         1: yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl (hash: 9DIg/a/osLndtXFwFNT9ESQK4DSljyI9wZ83JpKJ8GU=)
                          2: F16DD2B0E0FB11EE8552F941C4F9AE02.roa (hash: kMQ7gbSHaFXFpsfqJqpqWdRVLvMmMimNITBNMHfZtwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl
                          rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B1BE, serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A
        Validity
            Not Before: Jan 25 03:19:28 2026 GMT
            Not After : Feb  1 03:19:28 2026 GMT
        Subject: CN=69758bc0-91f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:5d:21:75:02:6c:49:bb:75:34:a3:ff:d7:
                    1f:d5:54:cf:49:66:6c:6b:d0:73:1a:03:fa:05:f0:
                    f7:a9:89:e7:37:d5:a7:51:4b:fb:38:7c:cf:25:58:
                    91:c3:4a:25:7c:ff:b0:d7:36:c0:7c:8e:73:2a:c6:
                    91:1f:28:15:91:a3:4c:2a:0d:96:d1:bf:f8:6e:25:
                    bd:31:31:f8:f0:02:bd:1c:32:22:48:91:d4:5c:80:
                    67:7c:04:a5:68:a9:e3:5b:e0:bf:7b:88:98:f1:1b:
                    59:07:f8:a6:92:42:14:1b:d8:8d:08:d4:46:e2:f3:
                    0a:7f:e1:97:bb:30:47:ff:05:1d:f4:b8:5b:8a:9e:
                    97:a2:c5:c4:94:ce:af:23:a0:c6:28:27:59:b8:bc:
                    db:9c:1e:ab:f4:eb:bb:d9:2f:48:e0:58:51:4f:35:
                    4b:9c:87:3a:04:c1:c1:40:d3:7a:49:ab:04:7d:02:
                    f8:30:35:05:27:1b:3d:17:71:21:2e:90:26:34:09:
                    62:f5:f3:cf:5b:c5:01:d0:e3:a9:a8:b8:71:d4:34:
                    1e:07:fa:08:f8:15:85:23:0b:24:37:5a:4a:26:22:
                    4b:9d:ae:6a:b0:78:05:9e:cd:69:ad:3b:f7:15:4c:
                    18:25:5c:13:75:4c:d8:1e:64:1e:59:bc:11:e4:8e:
                    5e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3A:7A:6F:80:79:41:14:F8:59:0F:1C:1F:F3:CC:37:35:57:55:5E
            X509v3 Authority Key Identifier:
                keyid:C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:71:ab:f3:b8:68:a0:d0:6e:ce:ad:33:85:6c:b8:86:3b:6e:
         b7:28:85:88:63:48:52:cf:e1:5a:58:8b:3b:80:c6:c0:54:9b:
         42:53:b9:17:b0:81:84:52:6c:82:7a:96:5c:3c:b8:f6:bb:7b:
         37:62:ec:22:91:39:a8:fd:1d:6f:7c:b7:01:c4:02:86:73:e8:
         9a:fa:06:f5:e0:60:d6:f7:e9:71:b6:33:cc:d9:d5:5e:57:21:
         0c:a3:99:03:71:fd:21:1a:e5:ef:a7:37:40:3e:1a:da:a4:23:
         e4:ee:27:fc:a0:5d:86:69:60:0e:49:d0:1c:3d:af:f1:ae:4f:
         0a:19:47:06:32:1d:a4:78:19:60:56:86:75:8c:2c:31:5c:85:
         65:71:0c:62:4a:2e:2f:58:14:b9:ed:9a:f5:85:62:98:2c:d9:
         8a:8d:54:dc:8b:f2:67:4a:8c:ba:61:1e:19:92:5a:61:cf:25:
         4d:7b:52:6f:0a:3c:b4:a1:7a:ba:66:be:75:e7:14:0b:6a:ff:
         97:eb:88:2d:20:55:94:54:f3:bf:60:c1:c0:e1:10:42:33:a2:
         f1:4f:81:35:7c:22:3d:b9:35:a8:e5:53:77:14:3e:0a:52:b4:
         34:c5:fd:4a:29:8a:93:34:7c:c6:52:12:1f:36:74:3b:27:90:
         15:09:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:00:59 2026 by rpki-client