This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File:                     Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier:          qUuwLqKHCtskvzYXoe69xydhdc3lxz/yJKbGQhY2lEo=
Subject key identifier:   EF:03:AA:10:51:C1:F6:CF:45:51:12:90:DD:19:D8:98:9A:6A:E9:83
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       358B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number:          3544
Signing time:             Sat 24 Jan 2026 15:11:07 +0000
Manifest this update:     Sat 24 Jan 2026 15:11:06 +0000
Manifest next update:     Sat 31 Jan 2026 15:11:06 +0000
Files and hashes:         1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: rohPXOrIIn7VLCUSiO0wu9HjTIGgY09b91d4yn1fg2A=)
                          2: E6182CCEF5EB11F099667DBA4F6F56BC.roa (hash: /0D2LkB+ox8QggPlvJCpOG4DYd7eVAO16thY4GL/ogs=)
                          3: 0F3E8640D99D11F08333CF1766D3641D.roa (hash: pS2BtCG96+96mJXvMihVypxW8GWS5Zzf8IoBuSz2UP8=)
                          4: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: XwBBgkLccrCOQa/KYpZw9ulkTxWOJIkjA80pfYyhDlg=)
                          5: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: km2MH0Iw6GW5QwrXI89g4lBCI72LIAO4pZvcSNjM0vw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13707 (0x358b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: Jan 24 15:11:06 2026 GMT
            Not After : Jan 31 15:11:06 2026 GMT
        Subject: CN=6974e10a-6f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:c1:fd:0f:f3:99:81:93:79:c1:35:8b:e8:
                    e2:74:b8:30:18:23:61:cf:b3:c6:5d:72:2f:fa:8f:
                    cd:10:41:02:09:a5:02:8b:ca:7f:f5:6a:8d:ba:cd:
                    a7:eb:77:19:6e:1b:01:08:60:e4:11:64:a3:7e:1f:
                    58:82:af:7f:cd:35:8f:76:67:b5:61:89:7b:b8:ba:
                    98:50:b5:a3:2e:22:8f:6b:b1:26:a4:9e:7f:9c:f3:
                    b9:0e:58:fb:11:98:1c:6d:25:23:6b:49:a7:dc:ff:
                    e4:52:24:44:90:15:8b:1c:6d:17:1d:80:7f:19:f5:
                    2f:e2:9d:b9:ab:d7:1d:e7:f8:f7:65:22:4f:4b:0d:
                    ec:b4:40:c1:a2:e4:2a:10:de:09:3e:54:16:2f:e9:
                    98:07:66:14:85:7c:db:ec:86:dd:24:e9:cb:1d:e8:
                    b7:91:49:22:52:59:83:5a:19:c8:7e:85:8d:90:05:
                    20:29:d4:47:9a:3c:0a:ad:fd:8b:6e:18:ae:cf:37:
                    88:41:4a:38:31:b3:8d:b0:b9:1b:5f:5c:ba:65:9d:
                    01:6f:20:7a:3f:4b:74:d6:1a:50:f8:cf:df:11:7d:
                    df:33:59:8d:a6:33:22:b2:43:32:05:c4:59:20:68:
                    be:58:63:f5:26:cb:de:df:01:7b:73:08:40:d3:7a:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:03:AA:10:51:C1:F6:CF:45:51:12:90:DD:19:D8:98:9A:6A:E9:83
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:17:9a:ea:92:85:5a:90:f8:88:5b:da:47:e8:ad:9a:6c:3a:
         4a:06:20:0f:39:68:b4:37:7a:5e:d9:b5:48:98:d7:4a:6a:8b:
         f7:34:75:87:bb:5f:00:fe:0a:31:e3:8c:81:f4:f5:78:0e:12:
         53:1d:9e:b0:44:bf:b4:11:1e:2f:5d:f2:73:59:80:f0:10:39:
         27:05:a6:4c:38:3d:de:69:ae:3a:0d:3d:7d:52:e4:81:ab:c1:
         f2:c6:7d:d5:22:b7:db:c4:e2:a6:22:77:8b:7d:22:38:6d:bf:
         b2:e1:51:9c:9a:04:ee:42:ca:c6:88:32:10:65:8e:fc:83:6f:
         68:f8:4f:69:4b:b5:54:57:d5:02:f2:ee:78:87:4b:e6:36:db:
         52:5a:53:8c:41:d3:1d:e6:a6:63:0b:1d:6b:39:43:c7:3a:64:
         b2:3e:75:f1:27:f3:9a:26:3c:eb:28:e7:22:79:81:30:fa:b3:
         94:be:da:04:8f:83:8a:9b:05:bb:70:06:47:0b:f6:30:1d:5b:
         06:cc:df:f2:01:bd:d3:2d:6e:43:97:99:a3:bd:3e:a8:57:85:
         a2:48:71:f8:0f:23:b3:9a:fe:98:10:f8:54:62:69:cf:15:33:
         75:d0:38:4c:93:8a:27:8a:2b:15:eb:fd:1a:d3:52:8d:88:c0:
         c5:0c:e8:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4
RTA4Rjg1NkUwHhcNMjYwMTI0MTUxMTA2WhcNMjYwMTMxMTUxMTA2WjAYMRYwFAYD
VQQDDA02OTc0ZTEwYS02ZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudfB/Q/zmYGTecE1i+jidLgwGCNhz7PGXXIv+o/NEEECCaUCi8p/9WqNus2n
63cZbhsBCGDkEWSjfh9Ygq9/zTWPdme1YYl7uLqYULWjLiKPa7EmpJ5/nPO5Dlj7
EZgcbSUja0mn3P/kUiREkBWLHG0XHYB/GfUv4p25q9cd5/j3ZSJPSw3stEDBouQq
EN4JPlQWL+mYB2YUhXzb7IbdJOnLHei3kUkiUlmDWhnIfoWNkAUgKdRHmjwKrf2L
bhiuzzeIQUo4MbONsLkbX1y6ZZ0BbyB6P0t01hpQ+M/fEX3fM1mNpjMiskMyBcRZ
IGi+WGP1Jsve3wF7cwhA03qHQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8DqhBR
wfbPRVESkN0Z2JiaaumDMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE
QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkY3Ni85NDRFMzg5MjFEQUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJx
VVJCLW5FREM4UVdPQ1BoVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYF5rqkoVakPiIW9pH6K2abDpKBiAPOWi0N3pe2bVImNdKaov3NHWH
u18A/gox44yB9PV4DhJTHZ6wRL+0ER4vXfJzWYDwEDknBaZMOD3eaa46DT19UuSB
q8Hyxn3VIrfbxOKmIneLfSI4bb+y4VGcmgTuQsrGiDIQZY78g29o+E9pS7VUV9UC
8u54h0vmNttSWlOMQdMd5qZjCx1rOUPHOmSyPnXxJ/OaJjzrKOcieYEw+rOUvtoE
j4OKmwW7cAZHC/YwHVsGzN/yAb3TLW5Dl5mjvT6oV4WiSHH4DyOzmv6YEPhUYmnP
FTN10DhMk4oniisV6/0a01KNiMDFDOhY
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:14 2026 by rpki-client