This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
File:                     YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json)
Hash identifier:          xJ+b/9aWLf7NPTH3+QcIjGA8ZeeJOo60VblFtxsEnF8=
Subject key identifier:   9B:A9:7D:9D:67:54:A0:CA:9C:E2:2D:E2:72:FE:A7:9E:64:C1:5A:E8
Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
Certificate issuer:       /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
Manifest number:          0BB1
Signing time:             Sat 24 Jan 2026 19:37:15 +0000
Manifest this update:     Sat 24 Jan 2026 19:37:15 +0000
Manifest next update:     Sat 31 Jan 2026 19:37:15 +0000
Files and hashes:         1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: W18mMsI5MHb12uCF3xsNQaqQE2ECxPK2ckyPtHznbOA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
        Validity
            Not Before: Jan 24 19:37:15 2026 GMT
            Not After : Jan 31 19:37:15 2026 GMT
        Subject: CN=69751f6b-0fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:3c:81:3a:06:d9:a1:12:88:4d:61:50:8f:
                    43:a5:28:67:08:25:2e:b5:9c:02:60:59:d6:f3:24:
                    eb:b8:1a:df:f9:0e:1b:df:b0:7d:9b:6f:ab:19:49:
                    d2:6f:aa:eb:c7:e3:ce:65:77:82:ff:67:ce:f1:ef:
                    a4:01:c3:38:b9:9d:e2:49:a0:5c:9a:63:a7:4f:14:
                    57:40:23:43:62:07:ae:a6:56:5b:89:08:0b:96:d3:
                    3a:54:e7:38:c9:32:6b:5c:01:38:28:43:03:d9:63:
                    6c:69:fc:ad:5a:6f:54:21:81:27:6a:c7:80:8c:85:
                    6e:63:c9:ad:f4:f9:d4:1b:87:f7:73:86:d9:40:ed:
                    b4:b4:41:cf:b7:7f:0c:20:8a:3a:f6:96:85:91:75:
                    9a:77:e1:3e:3a:1c:02:fe:ac:1c:b0:91:f4:5d:23:
                    af:cd:1e:97:54:52:1e:91:6d:f8:db:b5:ff:6b:f1:
                    e1:90:5b:d7:d2:4c:db:da:50:0e:ce:e1:82:16:08:
                    12:f3:30:1d:6b:38:8e:ee:78:16:46:47:38:32:0a:
                    1c:dd:42:8c:58:26:59:e7:bc:bb:64:37:8e:56:bc:
                    fc:7f:4c:71:07:d2:6b:48:c0:af:33:a8:ac:e3:d7:
                    39:3d:d1:c6:af:9b:6b:63:da:ae:12:27:d0:4a:fe:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A9:7D:9D:67:54:A0:CA:9C:E2:2D:E2:72:FE:A7:9E:64:C1:5A:E8
            X509v3 Authority Key Identifier:
                keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:29:3b:35:06:d1:66:43:b5:68:75:9f:90:f3:3f:ec:92:a5:
         f5:5b:fd:50:57:08:1b:b1:ba:45:5d:13:11:34:0c:02:a3:1e:
         6a:bb:c5:03:c8:30:23:30:cd:ac:4b:d3:35:d7:e8:bb:ad:4d:
         90:d3:a2:11:81:76:e2:29:63:40:85:d7:b1:08:7b:7e:e9:22:
         cc:df:23:64:a8:fc:a9:6f:f2:c7:bf:d9:48:ee:16:ca:b7:4d:
         4b:68:3a:89:5c:b5:c9:9d:68:9a:23:c0:33:00:1e:d2:43:33:
         63:c5:37:59:9b:7b:c0:7e:c1:1a:ee:a0:50:f1:85:20:77:74:
         4b:58:30:9b:a1:10:8f:3c:92:7c:e1:24:50:fa:3d:92:c0:7f:
         b9:f9:02:00:73:ad:90:ef:20:75:7e:03:0f:e4:0c:2d:63:e2:
         7b:2d:57:73:83:b1:20:2d:ee:26:7f:f3:75:de:b2:3e:2b:59:
         54:00:a5:78:73:54:30:8d:a9:d0:15:29:74:29:c4:f5:7e:c1:
         2a:2a:93:cd:7d:35:3b:90:68:22:a9:11:0d:52:47:f2:8f:3b:
         d9:e0:54:d0:c9:3a:3c:4c:ff:bf:bb:fb:47:bb:c7:16:ec:59:
         3f:84:71:9b:a5:c2:ac:ee:67:22:9e:e6:74:c8:9d:7f:9b:b5:
         85:ed:b5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:14:21 2026 by rpki-client