This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft
File:                     yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft (raw, json)
Hash identifier:          0U5zJRiYbXI2AnewxdLWMid44Vii0UtKgEx+qQ4NuRk=
Subject key identifier:   FD:9D:D3:16:C4:AD:FD:9B:2E:57:C1:F7:06:8C:55:AB:DE:7B:D4:D2
Authority key identifier: CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B
Certificate issuer:       /CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B
Certificate serial:       02FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft
Manifest number:          02F7
Signing time:             Sun 25 Jan 2026 00:26:46 +0000
Manifest this update:     Sun 25 Jan 2026 00:26:46 +0000
Manifest next update:     Sun 01 Feb 2026 00:26:46 +0000
Files and hashes:         1: yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl (hash: dFtgGsxb+Q3IjA+GaFS+94lYAHM/U9etkCD+Pki9+xs=)
                          2: 755581D40D7E11EDA9F2CA4AC4F9AE02.roa (hash: L/OoYrYOhuGJMFdRgAmm9owGHD6xvG0PlHjA2AQlTLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl
                          rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162914, serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B
        Validity
            Not Before: Jan 25 00:26:46 2026 GMT
            Not After : Feb  1 00:26:46 2026 GMT
        Subject: CN=69756346-0b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a4:db:71:14:a2:ab:2d:80:26:f7:79:5d:b7:
                    38:97:14:e0:08:c2:e4:4a:86:91:8d:77:59:30:dd:
                    f9:ff:47:2b:ab:97:1b:dd:c6:71:74:88:cd:04:3f:
                    5e:81:3d:ea:56:e3:a9:0d:2f:08:1c:b3:ee:d4:7a:
                    d1:7f:1f:b9:4a:5f:0c:6c:8a:a7:bf:45:10:dc:2b:
                    8a:0a:2c:b8:31:0a:b0:e2:32:96:f0:70:a6:9a:ab:
                    01:57:d6:ae:64:91:ec:83:77:24:18:f5:a6:6d:ec:
                    9e:80:62:f2:a0:21:d9:20:d3:08:1a:b5:48:2c:b1:
                    0d:ec:02:ad:10:d0:b4:6b:90:3b:50:d0:4c:a1:5a:
                    60:9b:f4:48:f5:a6:fc:80:9a:10:4c:de:8e:70:99:
                    41:b3:1c:57:20:d3:9a:54:1e:28:c9:1b:01:77:9a:
                    65:5b:c0:16:36:80:96:f4:94:1f:f9:88:db:12:cc:
                    0b:6c:3c:75:85:a7:58:66:6d:90:e2:5e:d8:9d:4d:
                    e5:31:9c:73:f8:58:b2:01:a5:09:63:ca:35:e0:93:
                    e3:8b:1f:ea:1c:0f:3e:27:df:7d:83:3b:bf:5b:5a:
                    78:a8:da:1e:e5:19:28:76:13:8f:a2:46:50:9d:af:
                    4e:89:4f:00:8b:4e:b5:3c:08:c8:97:d5:34:2d:e1:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9D:D3:16:C4:AD:FD:9B:2E:57:C1:F7:06:8C:55:AB:DE:7B:D4:D2
            X509v3 Authority Key Identifier:
                keyid:CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:cf:bf:52:e3:3e:4c:6d:11:da:1f:a6:7b:2f:b2:d7:0d:32:
         a6:5b:1e:c0:09:d4:a3:7e:6f:7d:62:1c:b6:4b:91:2b:4f:e6:
         e8:74:2e:37:5f:f5:32:2e:ae:ea:2e:5e:83:66:6f:5f:85:03:
         b7:da:54:d3:3f:e3:f7:0b:f4:f7:22:0c:5a:59:fd:b6:f1:6b:
         e9:54:f5:ee:3e:7f:fc:c1:6f:40:f2:9f:4b:6b:03:f9:75:ed:
         59:61:93:e8:67:7e:11:96:7e:69:e1:07:d6:b8:ba:d1:3b:8d:
         cb:a9:40:13:32:b8:6f:c7:ef:f5:42:70:ec:df:b0:54:97:06:
         5f:93:17:14:00:ad:8a:be:9f:a2:98:52:02:02:d5:5c:4e:fd:
         0f:29:e5:a7:af:a7:4a:5a:a7:a7:34:75:6f:d5:87:bb:f9:ef:
         65:03:68:2e:49:9a:5b:fa:9a:71:99:ac:15:74:48:81:89:d1:
         58:35:c6:b9:1b:d3:5d:30:e3:6b:c8:7f:c3:3c:e0:19:d2:17:
         e2:98:e6:9a:88:6c:96:e5:ad:be:33:4f:5a:56:36:0b:72:43:
         43:6c:e1:d8:9b:5c:cc:22:6f:e2:50:9a:65:45:f2:14:73:71:
         ff:90:a8:55:51:d6:b0:67:57:f5:4b:63:85:02:64:be:a1:b1:
         de:b0:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:08 2026 by rpki-client