This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
File:                     yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft (raw, json)
Hash identifier:          aMNuTmkGjgxtNFg1TQt1LxknHYjX51snVSCy6DKIDq0=
Subject key identifier:   76:2F:DC:47:F0:DE:C5:E5:75:23:25:88:26:08:A2:09:21:2E:E8:E1
Authority key identifier: C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0
Certificate issuer:       /CN=A917E1FA/serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
Manifest number:          78
Signing time:             Sun 25 Jan 2026 05:55:49 +0000
Manifest this update:     Sun 25 Jan 2026 05:55:48 +0000
Manifest next update:     Sun 01 Feb 2026 05:55:48 +0000
Files and hashes:         1: yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl (hash: bahVQKvNqEXZ0eCdKICzHFCejsocyxGmulNrCWpqrtw=)
                          2: 7354ACC0472811F0ADE2D44BC4F9AE02.roa (hash: wcclgPl4R6E/Zzr/USbPvSIER4uFng9U6618g1EWkBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl
                          rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1FA, serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0
        Validity
            Not Before: Jan 25 05:55:48 2026 GMT
            Not After : Feb  1 05:55:48 2026 GMT
        Subject: CN=6975b064-8344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:a0:05:dc:1e:37:7e:ac:3b:8c:6e:4f:76:
                    95:a0:3b:80:9a:78:b8:68:1e:26:80:60:34:5d:f1:
                    1c:04:51:2f:6b:a1:2b:ec:a2:23:ca:82:5c:3f:88:
                    25:8d:8a:b7:2f:28:10:17:af:01:c9:1e:f1:9d:a9:
                    34:df:ae:c7:70:a5:d3:d5:3c:fc:ac:bc:5c:c8:aa:
                    99:f4:4c:34:bb:15:db:5a:ad:f9:c4:84:b7:2c:5b:
                    f6:f5:b1:78:07:99:83:ec:7d:81:7e:f0:ec:37:61:
                    66:a2:02:f2:2d:3a:0c:4f:46:cf:a5:ed:fe:bf:e2:
                    9d:84:3c:c8:3e:db:b8:5a:b0:ea:41:1f:84:31:65:
                    fd:13:5c:ae:0c:59:0b:db:8a:cd:f8:9a:e4:5b:7f:
                    5b:5c:82:93:7b:bc:ac:2a:47:11:79:ad:a8:0c:00:
                    37:ee:25:67:10:a5:e1:22:fd:cc:bc:91:8b:50:b2:
                    75:43:b4:f7:60:ad:08:73:45:e3:b5:5e:cc:d2:ad:
                    48:ff:6e:27:0a:92:08:20:c7:ea:4b:06:a5:53:5c:
                    94:59:dc:34:84:1c:1c:71:70:7b:4c:78:5b:ff:a3:
                    7b:4c:a8:e5:64:22:26:5c:82:90:80:24:33:ca:c3:
                    1f:59:63:f4:8e:9e:c7:e4:fc:98:ce:29:eb:ba:16:
                    66:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2F:DC:47:F0:DE:C5:E5:75:23:25:88:26:08:A2:09:21:2E:E8:E1
            X509v3 Authority Key Identifier:
                keyid:C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:4a:1e:b0:18:75:b7:5c:29:e9:cf:c6:56:86:35:04:8a:
         28:9d:5b:0a:a2:6d:cb:a3:43:4f:61:b7:9e:92:1d:fb:b2:3c:
         53:92:de:0c:cc:7a:74:ea:78:21:34:3c:4c:ea:0c:7b:62:c4:
         09:90:1b:56:9f:65:63:7c:69:5d:1e:32:a2:41:6d:58:24:9b:
         12:2c:b8:77:b9:5c:c6:19:e7:08:a5:3c:9b:c0:5a:57:91:b7:
         cc:32:51:5b:e9:51:e4:66:1d:90:5f:d4:f8:d3:96:20:84:2b:
         b3:c5:54:68:60:8b:f4:75:89:c4:6f:7b:71:33:cb:ab:53:c6:
         83:7b:0f:d4:d5:59:1f:36:81:cf:b6:00:41:06:f9:41:39:20:
         f9:77:e1:65:33:b4:af:7a:70:83:f4:45:58:de:76:8a:cd:76:
         13:72:24:7f:ab:fb:08:0b:7c:ce:7a:f8:1f:ba:38:85:a7:e3:
         78:a3:2b:1f:12:be:bd:88:ec:39:5b:e7:78:f7:15:1d:ac:2e:
         d2:0b:4e:24:ef:09:ff:77:72:85:73:7d:b1:d4:1e:0c:c0:a4:
         6f:ed:ae:00:e3:96:11:66:f9:dd:22:99:f3:65:3b:11:36:33:
         28:ce:37:2a:5b:77:bc:83:c5:a4:0f:b2:cb:93:c2:8e:4b:df:
         02:f5:c0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:41:57 2026 by rpki-client