This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
File:                     Y06sGbStSypNQSgRX59VZ5TMdSM.mft (raw, json)
Hash identifier:          Ay3LesgFWZDChLjNIBOe0CWn6S8HVXQ2hBtPfI6ke4g=
Subject key identifier:   7F:55:7A:71:2A:51:FC:C8:9B:98:AE:A2:77:24:83:C9:04:50:C4:7F
Authority key identifier: 63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23
Certificate issuer:       /CN=A91647ED/serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
Manifest number:          1F
Signing time:             Fri 23 Jan 2026 06:50:56 +0000
Manifest this update:     Fri 23 Jan 2026 06:50:56 +0000
Manifest next update:     Fri 30 Jan 2026 06:50:56 +0000
Files and hashes:         1: Y06sGbStSypNQSgRX59VZ5TMdSM.crl (hash: J3Cmv2BXFywwVFGxZvMYIJjJEcmVfzd1TnBhuWMDVTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl
                          rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91647ED, serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523
        Validity
            Not Before: Jan 23 06:50:56 2026 GMT
            Not After : Jan 30 06:50:56 2026 GMT
        Subject: CN=69731a50-0180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:8a:45:af:13:65:7e:aa:d8:01:62:c0:67:
                    ee:ff:b0:ae:57:7f:80:6d:c2:00:53:da:b4:36:5a:
                    52:d8:f3:2b:24:dd:e8:31:1d:87:13:1a:ae:ad:30:
                    06:15:08:28:ef:2b:07:9e:21:89:ab:f5:ff:7f:32:
                    05:42:8c:7d:3b:a5:87:90:f3:20:e0:59:33:6e:b7:
                    15:ea:31:0b:79:ee:1b:65:b8:dd:b1:a4:c7:ee:44:
                    3c:5e:9a:f5:9e:ab:25:a5:70:09:83:46:31:ff:95:
                    98:fd:fd:70:0b:37:1e:b3:8f:5c:61:62:4f:25:36:
                    fb:4c:df:5e:f1:f6:94:22:1d:98:ba:dc:9a:3c:71:
                    bd:c2:ab:a2:5f:59:bd:bc:87:30:43:d0:93:0d:f2:
                    b3:c0:52:80:90:2c:28:41:2b:16:ac:b8:1e:89:2e:
                    8b:53:68:ab:67:38:32:ae:2c:f2:b5:43:cc:c0:38:
                    bf:c4:be:f7:cd:07:72:3e:37:89:34:9c:85:d8:6e:
                    05:4e:0c:2e:df:a2:f1:0b:03:6b:ca:34:9a:db:e0:
                    e0:4c:69:1f:8c:8e:d6:f2:66:6e:a5:59:b1:4c:42:
                    fe:7d:18:ae:e8:22:7a:aa:be:ca:e6:19:ec:44:cd:
                    d6:5d:f4:10:1c:5b:e5:ca:56:ca:1a:7a:ce:a6:e2:
                    27:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:55:7A:71:2A:51:FC:C8:9B:98:AE:A2:77:24:83:C9:04:50:C4:7F
            X509v3 Authority Key Identifier:
                keyid:63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:03:de:2c:50:35:99:5b:dd:88:4a:bd:e6:c8:25:61:5b:11:
         43:6d:9a:39:7a:93:ac:c1:dd:71:78:b6:f6:2b:db:32:bc:47:
         ea:4c:f8:1b:2f:b6:b4:c0:da:98:d0:3c:80:3f:2f:cf:0a:b9:
         22:c6:c5:cb:f8:36:e7:8c:b1:8c:4e:da:4e:be:61:03:f9:69:
         84:0e:21:fe:8b:54:93:c1:61:8e:53:44:c6:df:8f:b8:fb:94:
         6e:6a:5f:c7:7e:ca:7e:36:68:5d:aa:31:73:2d:af:9b:1f:5f:
         32:86:52:af:ad:08:d1:51:24:e9:9f:de:79:52:06:22:9b:6e:
         b3:e2:dd:67:0b:e5:93:79:12:26:fb:2a:54:3c:68:24:d2:8a:
         59:4d:d0:c4:4f:fa:67:07:e5:c2:1f:b1:67:a5:5e:17:06:b8:
         aa:6a:55:c9:c2:48:5a:ae:b1:8c:b5:00:71:18:91:7f:1e:31:
         23:2b:19:a5:e8:27:5a:3b:7e:a2:6a:e4:71:eb:17:b7:e5:ae:
         64:15:31:4b:9c:cd:19:42:f8:a8:a7:e7:bc:ab:fa:78:65:a8:
         e1:12:91:8c:bc:ed:53:92:92:82:9d:ec:ff:57:f0:f5:d2:57:
         f6:bc:a8:1f:7a:f7:42:43:89:6a:8a:f0:30:70:ba:a0:3e:cc:
         87:47:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:22 2026 by rpki-client