This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
File:                     YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json)
Hash identifier:          MgqOCK+tUHplVcmKaqd0XErU3w+KEfW6NUYsnU+/Rwg=
Subject key identifier:   E5:6F:3F:EB:80:C4:8E:DA:02:54:B9:62:EF:4A:12:DF:94:B5:AE:01
Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
Certificate issuer:       /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
Manifest number:          6C
Signing time:             Sun 25 Jan 2026 06:01:26 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:26 +0000
Manifest next update:     Sun 01 Feb 2026 06:01:26 +0000
Files and hashes:         1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: ThciQyIGLE7FFaoc+gJuAbkN1jjC9SZWEHNXvtiV/bE=)
                          2: 05939A1C554611F09F737331C4F9AE02.roa (hash: wHvbvusPDO6yRWHfYUtmsZklb3g0w6TjKvsCHWFb4uE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
                          rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
        Validity
            Not Before: Jan 25 06:01:26 2026 GMT
            Not After : Feb  1 06:01:26 2026 GMT
        Subject: CN=6975b1b6-8d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:2d:2d:0d:a0:aa:c4:6c:a6:ad:57:ca:d5:
                    73:d2:bb:b8:64:a3:fd:44:94:9b:b8:25:88:63:8f:
                    f2:d2:43:6c:a9:ec:95:62:4a:6e:b1:6c:62:d0:60:
                    89:50:54:e8:9f:f4:8e:df:dd:e9:f1:9c:f6:05:38:
                    a9:74:a0:4b:df:e6:a3:21:84:48:bb:fc:0f:97:2e:
                    17:fc:eb:87:08:58:18:c6:b9:0d:d8:33:a7:9d:36:
                    77:db:af:f9:67:9c:2f:df:79:25:88:a7:de:d1:a8:
                    94:a6:ed:79:59:4f:43:05:1f:81:34:84:c0:5e:8f:
                    6b:82:14:7b:f6:6a:f1:7f:df:f3:6d:fe:67:e4:81:
                    76:67:50:33:f0:22:54:d5:9b:a2:2f:ee:41:23:df:
                    1b:32:58:d6:e6:35:71:d4:7b:db:90:4f:55:e5:73:
                    d2:75:c3:4d:1e:f4:b0:c7:e7:d5:40:1c:09:84:54:
                    19:c8:95:26:51:24:b3:cd:1f:17:2c:5f:84:8a:cc:
                    4f:94:81:2e:38:06:86:68:f5:a0:ab:bf:b6:a9:9e:
                    b0:f8:56:3c:e6:3c:7a:ad:ea:ac:7f:8f:b7:34:c9:
                    ee:a4:45:f2:98:04:81:31:e6:bc:4b:83:2f:59:0b:
                    ab:7b:42:26:3d:34:f1:55:3f:5f:07:e6:a0:6d:8e:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6F:3F:EB:80:C4:8E:DA:02:54:B9:62:EF:4A:12:DF:94:B5:AE:01
            X509v3 Authority Key Identifier:
                keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f3:25:e5:a3:2c:53:b4:6d:22:4a:c4:9b:11:ef:0a:74:a9:
         ff:3c:5e:26:df:04:ab:2c:a7:ff:db:41:c0:a2:2f:f2:2e:b2:
         60:af:67:f6:c9:ec:06:be:5b:8d:a7:c1:eb:34:33:fb:e8:d7:
         f1:40:00:01:7e:6e:d5:d2:e5:3b:db:3e:0d:8f:23:e5:00:ef:
         df:fe:a5:1d:ad:13:d6:70:e7:51:f4:7d:0d:c3:8c:61:e1:d5:
         83:82:6b:44:83:6b:20:1f:f4:ce:81:90:61:25:bc:39:af:e3:
         97:85:00:54:96:74:8f:b0:ba:b8:36:f8:92:45:55:f1:ab:67:
         f0:3d:5b:c7:1a:5f:4f:ec:e7:a3:1a:0d:2b:3a:9d:2e:1b:4b:
         36:85:25:e6:72:0b:ed:1e:27:ef:dc:a9:00:12:46:33:6b:b4:
         58:d8:14:11:4f:da:38:c7:7a:ba:dd:9f:0b:6b:ba:40:9e:e9:
         13:01:f4:cf:cf:af:80:e0:82:be:8d:eb:b0:d6:1e:9d:d5:1b:
         f5:df:ca:e1:76:7f:4f:25:cd:8a:97:25:88:06:90:81:59:58:
         94:45:87:9f:60:8c:ec:91:71:dc:18:1f:e7:46:eb:1a:3a:5b:
         45:53:97:7e:0b:6f:8e:1c:42:c9:62:a4:9a:c5:92:e1:80:de:
         d3:37:9e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:50:13 2026 by rpki-client