This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
File:                     _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json)
Hash identifier:          GDjUl0qFQgDw4StMg9nzB4m/ZzCKGRpEDVRCdjOp7zg=
Subject key identifier:   07:6C:C5:23:52:F2:80:49:6E:58:DA:9D:FF:B7:B6:AA:B9:34:C8:13
Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09
Certificate issuer:       /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
Manifest number:          DA
Signing time:             Fri 23 Jan 2026 04:45:42 +0000
Manifest this update:     Fri 23 Jan 2026 04:45:41 +0000
Manifest next update:     Fri 30 Jan 2026 04:45:41 +0000
Files and hashes:         1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: ByO2rt0Tpq7xhv+Fzrxui7HBgfcK1gKL31V+qxQ/y5s=)
                          2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: Rc9brTS9qhrwUI4y6KFA7OXRuq+HA76Zn61TGx8tdAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl
                          rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509
        Validity
            Not Before: Jan 23 04:45:41 2026 GMT
            Not After : Jan 30 04:45:41 2026 GMT
        Subject: CN=6972fcf6-dd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:ac:0d:30:04:e0:32:91:9c:5b:e6:23:11:
                    21:4b:0e:58:2e:bb:72:64:d1:03:c3:43:f3:59:16:
                    52:59:6c:bd:88:af:f1:0f:0d:d0:fd:10:3f:88:76:
                    c2:d6:0e:5f:1a:49:f7:88:4d:6b:14:08:e4:c7:49:
                    9b:ad:a5:06:7a:89:08:92:fe:09:e7:0d:83:72:59:
                    85:47:2e:64:e2:67:2e:ce:e1:9b:a1:f6:b8:d6:9f:
                    3d:9c:8a:07:42:4c:94:f0:00:53:85:4c:ab:51:b4:
                    35:b5:e6:c7:82:79:4d:8b:ee:45:93:0a:fc:fb:95:
                    86:5a:90:d6:8c:af:59:90:ac:a4:25:6f:65:39:d5:
                    86:52:61:22:67:0a:e1:93:74:87:08:f2:6d:74:13:
                    14:2f:40:a0:d2:52:f3:7b:92:80:ed:b0:81:50:2b:
                    09:dc:e2:f5:d8:7c:ac:ad:45:47:c4:5d:58:0a:26:
                    c4:07:5d:61:40:7c:8b:50:ab:94:22:6d:92:8d:f4:
                    b0:e0:52:8d:47:23:ec:b0:9c:d3:81:0f:88:0d:70:
                    bc:41:60:0d:dd:63:a0:f2:a1:7d:c3:2b:cf:50:c5:
                    6c:68:49:29:b8:cd:fe:e3:f4:8c:0c:d3:b4:35:6a:
                    b6:18:1f:de:77:ec:5f:87:83:bf:7c:73:d1:a7:33:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6C:C5:23:52:F2:80:49:6E:58:DA:9D:FF:B7:B6:AA:B9:34:C8:13
            X509v3 Authority Key Identifier:
                keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:07:55:65:5a:ec:4c:0c:fc:e3:74:be:8e:ee:5f:f0:45:98:
         a2:cc:a3:72:d4:65:16:bc:a7:ae:61:82:ca:33:04:cc:d8:94:
         df:ea:16:be:3f:34:4e:1f:5f:30:82:18:fc:b6:2b:b4:15:d6:
         e8:2d:8e:54:8b:fb:09:06:53:d6:66:b4:fb:3c:22:c0:6a:6b:
         01:a3:63:90:d6:48:5e:da:72:37:af:d6:2c:dc:d2:c1:72:09:
         ca:01:09:45:98:6f:0d:49:5e:7b:56:70:ac:68:c9:99:84:08:
         79:f2:f2:26:77:b9:57:b0:c7:bb:a3:13:30:11:ff:25:fc:10:
         17:c1:69:22:3a:b7:fe:14:33:34:9a:8b:6e:54:76:08:ce:b8:
         f8:76:44:0a:2b:31:a0:8e:98:b2:7a:0f:aa:bc:c7:7c:ca:2a:
         fe:3e:1e:0a:b8:0c:c0:b9:c8:b5:38:72:55:3c:f7:a6:45:8e:
         f7:28:20:85:83:f8:24:f4:03:08:6b:d7:58:eb:35:d0:e8:18:
         da:6f:51:1f:28:fe:5f:de:b0:01:59:f8:33:58:01:43:7e:e9:
         1c:31:2a:0a:f3:12:fb:8f:3a:7c:c6:29:05:57:73:3a:63:38:
         ac:f6:9f:ae:80:ee:b6:62:ea:e5:fb:4e:2b:22:12:b8:1a:15:
         e4:22:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:33 2026 by rpki-client