This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
File:                     yT-PYPBn4kwb_PI7LPQivVhkvss.mft (raw, json)
Hash identifier:          I7D9z9yq3Z5iCKrxeueoAIqZhd5kxxqBYXmLDDzqVjw=
Subject key identifier:   4F:49:86:62:9F:5B:3C:EF:17:F0:78:D5:6C:07:5C:87:06:79:C9:D1
Authority key identifier: C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB
Certificate issuer:       /CN=A915E4A4/serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
Manifest number:          52
Signing time:             Fri 23 Jan 2026 06:16:16 +0000
Manifest this update:     Fri 23 Jan 2026 06:16:16 +0000
Manifest next update:     Fri 30 Jan 2026 06:16:16 +0000
Files and hashes:         1: yT-PYPBn4kwb_PI7LPQivVhkvss.crl (hash: Lp4xLUzBNji+Duh0GLQXUbWYXtTx+Lg4StN7XXapKho=)
                          2: 7452F54C7D7D11F09C982A7CC4F9AE02.roa (hash: orW22gR1weyQBFJq2xht8k2Oky/95mfVvWkFfSQOdy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl
                          rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E4A4, serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
        Validity
            Not Before: Jan 23 06:16:16 2026 GMT
            Not After : Jan 30 06:16:16 2026 GMT
        Subject: CN=69731230-be44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:56:cb:61:f2:33:79:84:b0:9a:4d:6e:51:af:
                    4b:06:f8:d5:f1:76:08:f0:3b:f6:13:93:2e:e0:5a:
                    e4:32:86:55:02:b6:90:6e:3a:10:d2:7a:32:02:96:
                    d4:86:e4:18:af:e3:a7:90:e5:83:ab:3a:a9:e6:cb:
                    1d:0f:b0:11:1f:bb:a8:9f:1e:a7:df:0d:fb:34:90:
                    50:d9:46:5f:e3:97:fa:dd:5a:6b:7e:62:87:cb:1a:
                    56:f5:9c:e0:cb:e8:b5:22:72:8d:60:fa:cc:66:c3:
                    30:46:97:1c:0e:5f:a8:3b:4c:25:39:e3:e8:86:e1:
                    e9:c8:70:d0:56:8e:64:b4:0c:67:17:16:f8:8a:9f:
                    e5:2b:2e:50:53:79:30:a8:2b:ca:36:2b:c4:79:7d:
                    14:4c:71:03:c8:93:45:02:81:de:0e:df:8e:a9:76:
                    d4:b7:dc:95:79:c7:5f:65:0f:2f:ca:15:94:23:51:
                    f2:63:89:65:02:e3:91:90:83:3e:8b:3e:79:e2:67:
                    71:4d:c5:90:35:69:5d:2e:1a:9b:67:ec:ed:56:43:
                    5f:40:ca:f1:0d:01:2c:d4:12:ad:98:da:70:20:31:
                    c4:1a:f0:a6:2a:5f:3a:e4:c9:1e:45:4d:37:aa:16:
                    e0:77:ad:fa:b4:8f:dc:bf:d1:34:13:04:39:34:ff:
                    b1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:49:86:62:9F:5B:3C:EF:17:F0:78:D5:6C:07:5C:87:06:79:C9:D1
            X509v3 Authority Key Identifier:
                keyid:C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:83:87:61:6c:fd:a2:dd:e4:10:c4:4c:38:3e:f1:aa:11:d7:
         c6:f2:8f:ca:70:33:48:b4:58:75:0b:47:76:ff:3b:eb:99:5f:
         ab:36:15:c9:75:f2:ba:08:3b:82:f5:db:2f:2e:3c:c5:13:e0:
         8f:2e:5a:b1:07:be:a4:fb:f3:4b:20:aa:b2:8e:e9:26:9c:b3:
         0d:8a:9f:d9:6c:35:1d:44:1b:5f:70:ae:66:41:4e:01:68:e8:
         12:6a:98:f2:a3:ba:d1:72:03:f4:1f:d1:14:26:c2:05:8f:65:
         d3:37:83:87:04:0c:6b:bd:49:8f:f1:e9:38:81:a8:3c:10:74:
         d4:d0:26:b7:6f:ba:7d:04:94:25:29:33:9e:89:a7:4f:fc:1b:
         d4:56:b0:47:7f:31:d0:d8:ff:1d:95:e0:2b:d5:49:0d:28:2d:
         7a:9e:66:7a:29:43:ac:66:ae:46:97:4d:e1:7d:7b:bc:72:90:
         ae:f2:1a:30:ae:ef:f8:dc:b6:09:a4:e0:58:9c:8d:86:58:fc:
         e5:60:6c:8d:fb:a8:71:c6:23:98:b6:41:e0:2b:40:14:84:74:
         f5:33:7c:89:e2:e6:c8:8e:2e:07:74:d9:04:a6:d2:18:ca:bb:
         10:fe:d8:02:84:87:86:38:05:ce:a5:f0:a7:c8:3f:d7:f8:8a:
         aa:bf:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:05 2026 by rpki-client