This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
File:                     yZ1gB81HfYmzWcM8k8qptbsQYBo.mft (raw, json)
Hash identifier:          APtghGiT4+PN5cnuHMr2x6tpsQm2SDqta13QXD3rKUE=
Subject key identifier:   BF:78:24:C7:0D:53:D2:0C:C3:75:CF:2C:3E:B0:FF:E8:1F:C2:1E:53
Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A
Certificate issuer:       /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
Certificate serial:       0CA9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
Manifest number:          0C99
Signing time:             Sat 24 Jan 2026 18:05:52 +0000
Manifest this update:     Sat 24 Jan 2026 18:05:51 +0000
Manifest next update:     Sat 31 Jan 2026 18:05:51 +0000
Files and hashes:         1: yZ1gB81HfYmzWcM8k8qptbsQYBo.crl (hash: F/t5+As/bnCiD0BAcHF40a5QOtsM5IU3WKkFli/Mc+8=)
                          2: 1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa (hash: KCbvW2+iTb2FhCUJSCAthuyvDnx7MU5+U8PZ8z1pu+g=)
                          3: 7D16D03C861A11EF99D32B66C4F9AE02.roa (hash: LFZ6uBkW6voau17buZXmD8B1WuozeZe536RV9ixDxuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl
                          rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3241 (0xca9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173F03, serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
        Validity
            Not Before: Jan 24 18:05:51 2026 GMT
            Not After : Jan 31 18:05:51 2026 GMT
        Subject: CN=69750a00-1104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:10:fe:f2:ef:78:dc:5e:eb:4a:8c:8d:23:
                    05:76:17:cb:75:7b:70:2c:58:a6:59:97:1f:50:7c:
                    a1:2a:df:eb:55:91:0d:01:37:41:25:ff:39:e7:41:
                    ca:fe:5a:60:a2:89:3b:fe:25:26:eb:dd:a9:1a:6f:
                    a2:49:91:66:7a:c6:9d:24:35:9b:f0:73:7a:4e:e3:
                    b2:ee:33:44:bf:d7:a2:71:75:2b:f7:da:8d:25:aa:
                    8e:41:dd:32:90:38:64:b6:33:3c:66:ed:b7:51:83:
                    0a:dc:e7:f3:95:67:bd:a9:51:40:b5:f5:c3:38:7f:
                    96:80:d2:d1:87:1d:a8:0b:84:5c:fc:49:24:7c:0e:
                    69:33:54:22:9a:23:77:fa:45:df:7f:39:63:2a:f9:
                    55:c4:3c:67:21:f9:ba:31:08:36:06:d6:fb:8c:d6:
                    16:3e:ed:ba:1e:69:19:96:72:03:39:85:0a:6f:d9:
                    db:63:46:c8:69:4b:53:55:f9:e8:77:27:62:dc:49:
                    02:8f:f8:7d:a3:06:af:8c:3d:77:a4:01:63:75:ed:
                    2f:d9:f4:50:04:9d:8c:b6:22:cb:8b:04:13:57:a6:
                    bc:ee:a1:26:05:32:15:b8:5b:9c:35:9a:d2:98:31:
                    79:1a:f9:db:a5:dc:96:32:d8:f2:4d:e0:41:3e:28:
                    7a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:78:24:C7:0D:53:D2:0C:C3:75:CF:2C:3E:B0:FF:E8:1F:C2:1E:53
            X509v3 Authority Key Identifier:
                keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:ea:37:8a:bf:6e:94:d1:71:e4:9d:df:c2:8a:96:08:0b:
         42:5a:2b:b2:18:fe:6b:52:b9:86:dc:5f:3f:f3:92:ce:fc:9e:
         6a:4d:fc:67:c5:f4:e4:47:e3:e8:a2:41:1c:29:4d:f5:24:81:
         7a:cc:bd:d1:6f:1b:a4:2a:1c:ee:20:92:22:cc:6c:fb:8b:c5:
         b8:e4:74:90:db:bb:2b:44:25:1d:ac:fb:4e:c4:54:32:8f:65:
         e7:37:2f:17:db:d3:8f:f0:b4:92:19:ca:81:e8:af:7d:21:32:
         5e:cc:70:38:13:9e:f4:2c:a6:9e:92:51:1d:30:f4:fd:8e:e3:
         1b:8f:33:a9:8e:83:64:c4:37:aa:b8:d9:28:9e:0b:15:61:32:
         32:aa:ef:c1:03:b2:52:8e:03:1b:a7:17:84:86:41:2c:de:76:
         76:90:5d:79:99:77:d0:51:3f:48:31:32:80:75:ca:fd:09:e3:
         23:13:0c:28:b7:e8:78:0f:d9:fe:1a:07:7f:99:da:23:42:0b:
         39:73:d1:0d:0f:c9:f5:8f:1b:2e:39:83:38:73:d2:cc:bf:b8:
         18:a3:80:a2:c3:b8:37:3f:46:8c:97:a4:de:8e:ca:b1:39:4b:
         dc:8c:d9:2c:f4:f8:a6:8c:06:1e:97:e3:b8:f3:30:38:da:40:
         12:6d:a3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:59 2026 by rpki-client