This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
File:                     yut3vPCf9pfximF6qGCJbkMm2dM.mft (raw, json)
Hash identifier:          XHltE24Z3Drb1FY/HdQZjISV2783icZ37ZWgmN/uAKM=
Subject key identifier:   0C:65:E4:7D:0E:D7:23:E6:71:D1:F9:4C:7E:D1:52:CC:C6:95:1B:70
Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3
Certificate issuer:       /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
Manifest number:          D7
Signing time:             Sun 25 Jan 2026 04:54:40 +0000
Manifest this update:     Sun 25 Jan 2026 04:54:39 +0000
Manifest next update:     Sun 01 Feb 2026 04:54:39 +0000
Files and hashes:         1: yut3vPCf9pfximF6qGCJbkMm2dM.crl (hash: ZJBH3YpmMYiZj4fPRSsHGcLH4VjMZb/Kq75jxh5V3mA=)
                          2: DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (hash: TrSo/WNo8vRs+k8LhJbJ3jLfLE11BY0adxowcWQuQfs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl
                          rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BF2B, serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
        Validity
            Not Before: Jan 25 04:54:39 2026 GMT
            Not After : Feb  1 04:54:39 2026 GMT
        Subject: CN=6975a20f-6db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:f3:12:c5:27:5c:da:31:d7:17:97:5f:33:
                    d6:b5:69:4f:a4:ce:a1:17:4e:36:b7:93:5b:b9:22:
                    9f:b6:ef:5c:b6:ac:f1:32:09:b1:af:06:29:e0:a9:
                    34:11:04:fb:98:b3:01:4d:35:66:60:d7:ac:1a:b5:
                    2e:1c:d9:c3:af:fb:5c:d9:64:03:6e:f1:20:30:d5:
                    0d:77:9a:f6:65:b1:0f:78:35:f7:ce:01:88:92:fe:
                    23:af:b2:5d:7b:e2:f2:a5:c6:a3:f5:33:2f:b4:c7:
                    a8:1f:d6:2b:5b:75:63:75:38:5f:f2:41:8b:52:0f:
                    d3:c2:43:5b:86:d3:31:5c:6b:8a:35:98:98:33:45:
                    4a:fe:b3:de:33:ca:eb:3e:6e:9b:4d:b6:5f:1f:f3:
                    8d:b9:c4:94:2d:00:bd:b7:32:50:c6:66:a9:bd:d2:
                    ea:93:be:88:be:dd:3f:60:d0:c9:49:26:14:6a:51:
                    15:d7:f4:97:87:c2:ce:9a:c3:ee:a1:d7:8d:69:be:
                    8b:95:e2:7b:48:1f:b4:d2:25:0b:e9:ee:69:c3:54:
                    ea:2a:41:79:ef:de:42:bc:73:88:d4:25:4e:32:af:
                    00:1f:52:2a:d6:a8:55:f6:f5:3f:7a:63:41:8c:9f:
                    38:f4:66:d7:bf:97:73:66:d1:30:fd:67:5f:d1:33:
                    2f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:65:E4:7D:0E:D7:23:E6:71:D1:F9:4C:7E:D1:52:CC:C6:95:1B:70
            X509v3 Authority Key Identifier:
                keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:37:e7:62:51:7b:4e:38:1a:66:3b:96:ec:7c:5d:e8:e6:60:
         c2:f1:93:00:cf:29:c3:dc:aa:04:0c:3e:5d:cc:bc:cc:7d:46:
         77:3c:4c:1f:ed:6e:7c:b6:3e:3c:f1:48:ad:fd:53:3a:2e:88:
         0b:6f:f9:a0:5a:d6:40:16:19:57:8a:78:ba:bb:3a:f4:07:71:
         4b:de:6c:51:fa:65:09:08:9e:1d:3f:36:7e:89:bb:43:64:f1:
         26:50:26:09:2e:f8:73:44:55:42:00:06:e8:8a:0d:89:db:0e:
         47:65:61:5d:5f:30:3e:73:50:e7:ce:50:ce:b9:8f:ef:8e:d3:
         09:cf:63:c3:b5:38:fc:8e:79:dc:89:0e:5c:22:91:a8:89:14:
         5a:e8:ed:8d:47:aa:a8:50:d1:4c:bf:6a:c7:b0:7b:06:27:d4:
         54:b7:03:a6:4f:9f:31:3f:da:7a:ca:9d:46:35:b7:4c:c6:c7:
         79:b2:f4:8c:a0:c1:3a:47:dd:f6:b4:a0:44:4c:11:b9:ce:9d:
         f7:20:e7:1c:63:93:46:55:2f:27:43:a2:de:c7:6a:1c:c2:54:
         2d:2f:43:8e:e5:de:67:52:80:74:c9:50:f7:35:ec:29:a4:44:
         cd:5c:e1:b8:3c:fc:13:35:4b:76:c6:44:e3:83:d8:bb:73:64:
         19:f1:99:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:56 2026 by rpki-client