This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
File:                     yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json)
Hash identifier:          SAbxQPKbKT4xYLevsRpm4JYQXIGd/CIz+u0liDZz75I=
Subject key identifier:   9F:39:A2:C2:CF:D0:4B:EB:1D:DC:6D:36:48:B1:63:AE:AD:AF:27:BD
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       01E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
Manifest number:          01DE
Signing time:             Sun 25 Jan 2026 02:04:21 +0000
Manifest this update:     Sun 25 Jan 2026 02:04:21 +0000
Manifest next update:     Sun 01 Feb 2026 02:04:21 +0000
Files and hashes:         1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: ZWyGA5VHkg8WNJPfOokbKpnL/RUXoqEwkmRA8vA6jpc=)
                          2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: CaEKHRoKKS0xih9+MI5NnGo2p0uXvy+Gde+CICjV6ME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
                          rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: Jan 25 02:04:21 2026 GMT
            Not After : Feb  1 02:04:21 2026 GMT
        Subject: CN=69757a25-114e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:09:ab:f0:14:67:94:dd:df:50:1e:d2:fd:e8:
                    47:66:f5:5a:58:5b:b3:d5:83:5e:e7:d6:3c:b4:3e:
                    42:83:90:d0:2f:08:f1:b6:92:cf:d8:54:07:ff:a0:
                    6a:6c:67:72:83:88:14:51:e6:55:ae:a9:74:91:84:
                    98:90:78:90:b9:f3:1b:44:48:87:be:65:10:b4:5d:
                    df:3b:a2:7b:17:45:87:7c:f0:03:9d:a2:82:05:ec:
                    35:fb:67:15:4c:0a:49:35:e6:1b:b6:47:37:0a:9e:
                    28:21:22:20:3f:cb:da:2b:8b:0b:86:d9:2a:29:ad:
                    8b:4e:d9:46:93:86:55:2d:f0:ad:dc:c0:fa:e7:9b:
                    a7:ec:5d:c7:42:0b:26:ff:0a:48:e5:ae:69:b1:e0:
                    31:ee:b2:27:2f:b3:c8:6f:d9:8e:3d:c0:07:84:e2:
                    31:d4:44:f8:a5:10:de:49:0d:5e:1a:6d:18:4a:5d:
                    2a:98:e2:cf:15:11:41:83:3a:13:29:e4:93:96:9f:
                    71:60:f7:fa:f4:cf:ba:f5:1b:9f:09:2e:07:6f:43:
                    52:c3:bd:ae:c1:1f:8b:07:12:06:8a:83:56:8a:0e:
                    67:e9:81:34:dc:cc:47:35:99:e7:65:b7:92:39:95:
                    ef:c5:39:31:3c:fe:da:b9:84:c8:f1:d7:76:76:3d:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:39:A2:C2:CF:D0:4B:EB:1D:DC:6D:36:48:B1:63:AE:AD:AF:27:BD
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:33:e9:e4:8d:ff:3a:7a:57:ab:ad:bf:13:08:1f:2e:4d:ef:
         32:44:53:74:83:ec:5b:8d:ce:cb:f7:c1:59:d6:e2:ae:f4:a9:
         08:4a:f2:18:dd:bf:49:94:15:af:81:00:ff:3c:eb:81:3d:ce:
         4b:cb:93:21:f0:89:c1:d9:ff:91:ec:77:5e:f2:80:91:82:3d:
         de:3b:c8:6e:7f:d8:f7:51:a4:a9:8c:98:95:43:86:f9:ec:3f:
         67:60:01:3d:19:58:db:2a:5c:91:8b:97:89:4f:7f:ec:61:25:
         46:00:50:04:ca:44:e6:56:34:62:43:e6:99:9c:8b:32:60:dc:
         2f:92:c8:fd:91:ed:e6:2d:a3:9d:d9:e2:c6:5b:7e:1a:86:ea:
         00:5c:b0:ab:ff:73:b3:6c:9b:26:f3:78:74:4a:e1:db:92:be:
         27:5c:33:9a:1c:33:eb:d8:54:cf:12:0d:5d:92:49:a1:9a:3c:
         81:74:60:91:c8:41:16:8e:7a:e4:7b:0f:c8:88:f4:43:76:97:
         16:06:cd:d6:02:47:71:56:5f:c1:8e:60:0f:c4:1e:5e:f2:7e:
         96:5b:7f:e0:fa:3d:29:55:bb:6c:2c:78:ad:f5:63:48:0b:cb:
         dd:a7:af:42:88:44:60:80:f9:05:e9:26:4a:a1:e1:05:1b:83:
         05:83:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:37:07 2026 by rpki-client