This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
File:                     kYy2egJiI43veP8oikXZKB-V0us.mft (raw, json)
Hash identifier:          h5xXuy8hpF6G6791a/eXwrT46Gpq07bqF/nSoTtzarw=
Subject key identifier:   FF:76:A0:C6:9B:F1:B6:65:42:8F:26:DA:85:34:D7:A8:41:19:AB:2B
Authority key identifier: 91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
Certificate issuer:       /CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
Manifest number:          0179
Signing time:             Sun 25 Jan 2026 03:03:33 +0000
Manifest this update:     Sun 25 Jan 2026 03:03:33 +0000
Manifest next update:     Sun 01 Feb 2026 03:03:33 +0000
Files and hashes:         1: kYy2egJiI43veP8oikXZKB-V0us.crl (hash: w9le36SrdC6MQlJk9qR+FudiBT2b3HKCalo44SKeJ88=)
                          2: B36E0BFAB8C511EE9C927072C4F9AE02.roa (hash: Qm+OTW2NbpHhD1GfCowGRntOHCUaUo/6QfBRl6hKqIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
                          rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168946, serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
        Validity
            Not Before: Jan 25 03:03:33 2026 GMT
            Not After : Feb  1 03:03:33 2026 GMT
        Subject: CN=69758805-31f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:1f:ce:ad:3f:4a:a2:f9:29:5d:2f:80:fb:
                    70:87:49:1c:d7:02:94:71:05:92:6c:e6:31:54:fd:
                    83:e7:b9:1c:1b:27:55:13:98:ac:94:d4:95:64:86:
                    35:79:7f:02:4b:d6:cf:8c:8d:5c:62:65:e8:08:3f:
                    72:73:21:e1:b9:01:88:eb:9e:7a:87:46:56:86:59:
                    2e:55:89:f4:47:f4:a3:ed:2d:b0:b1:90:c7:4b:f3:
                    90:53:ab:72:59:38:29:19:1a:38:3c:7a:fc:07:bd:
                    44:53:be:10:e6:8f:2b:cc:e4:e6:b3:c0:77:7b:84:
                    c8:39:21:61:33:fa:26:37:04:e0:60:6f:18:02:65:
                    cd:bb:91:95:11:be:e9:89:00:10:1b:cc:1f:ce:2b:
                    4a:87:96:87:f5:fc:32:59:45:f2:2c:3f:b3:a2:45:
                    a1:99:38:6b:bb:f1:57:b9:dc:28:bc:92:f7:85:ad:
                    a6:b1:ce:fa:83:f8:19:94:b9:4e:c7:14:5d:20:84:
                    56:16:17:9d:ee:c1:15:73:65:77:1f:10:69:36:ef:
                    c6:66:f0:f9:f6:7e:f8:57:33:53:26:70:32:bf:c0:
                    18:87:65:99:60:42:10:15:99:09:dd:9a:3e:b6:f9:
                    d2:2a:e2:cb:d7:de:1b:e0:f7:fd:15:ca:4c:37:57:
                    d4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:76:A0:C6:9B:F1:B6:65:42:8F:26:DA:85:34:D7:A8:41:19:AB:2B
            X509v3 Authority Key Identifier:
                keyid:91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:57:0e:7f:54:07:fa:89:5e:12:01:0e:e1:43:72:6b:b9:79:
         0b:95:87:fb:16:dd:19:b2:2a:7e:84:98:63:e2:ac:4e:41:b8:
         60:4e:34:4c:4a:02:17:87:d1:92:23:68:e1:cd:f8:de:be:3e:
         06:62:f3:72:e1:83:de:e2:1c:83:b3:ed:c3:d4:a3:1a:ee:11:
         af:e1:16:93:c0:33:a4:16:49:67:14:0b:f8:0b:4d:89:a9:3a:
         d6:fe:0c:48:ef:d5:62:19:7b:81:91:68:ef:81:aa:79:b7:fc:
         6b:cd:30:ed:6a:d4:40:53:d5:63:19:64:c6:79:26:87:c6:24:
         d6:8d:a1:cb:bb:53:6c:64:08:23:a3:74:f9:71:3a:c8:f0:14:
         39:f8:d6:d0:66:bc:09:49:2a:06:7c:51:f0:ae:60:4b:ab:25:
         d0:25:da:c3:76:9d:25:7d:61:18:d6:39:66:3f:fb:ac:bf:9d:
         77:25:60:14:9a:0d:86:71:15:0e:61:2a:2c:02:1c:b7:57:c3:
         09:4c:68:3a:04:ba:9e:2c:39:3e:89:1c:44:6f:a6:d7:ca:ac:
         00:68:4d:2d:98:ac:48:2a:91:c7:6c:1c:1f:ee:7f:a2:18:46:
         0e:29:5e:94:a9:ed:2f:af:98:28:12:ca:d5:b8:b5:df:2e:17:
         92:09:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:41 2026 by rpki-client