This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier:          nbmIfQ5cvhlW3A7tkuFtJPGuvIqBQ8U9WXGEW+P1cH8=
Subject key identifier:   32:17:F9:47:3E:23:60:10:39:DE:14:C2:31:FD:53:BF:A0:83:F6:D2
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       0254
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number:          024F
Signing time:             Sun 25 Jan 2026 01:02:22 +0000
Manifest this update:     Sun 25 Jan 2026 01:02:22 +0000
Manifest next update:     Sun 01 Feb 2026 01:02:22 +0000
Files and hashes:         1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: cTpwVwNka1ViU4w5v+fv6JDZVIEuVNBggQcDKB4+CKo=)
                          2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: GPH0EzTOvf8jZ7f6MSDgIy6jbOQ54/6c8g2ijkFuu3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Jan 25 01:02:22 2026 GMT
            Not After : Feb  1 01:02:22 2026 GMT
        Subject: CN=69756b9e-5c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:d2:c8:f6:37:09:1e:50:f5:00:40:6e:75:
                    a0:31:3b:aa:a5:41:69:04:ae:70:37:d0:63:97:c9:
                    13:7f:67:be:0a:4a:b5:10:1a:d9:92:0d:1c:7a:fd:
                    f9:c8:8a:a4:65:cd:3c:18:64:4e:01:2f:eb:3a:cf:
                    77:7c:cd:d2:14:58:77:08:92:38:bc:c1:bc:3d:17:
                    33:16:32:54:86:b8:5f:f9:6b:1e:1e:81:b3:ca:ff:
                    94:92:a7:3d:d1:df:82:ef:fa:b8:7b:b9:5f:38:bd:
                    00:f6:4b:40:5e:e5:ee:4b:3e:21:ad:81:38:e0:30:
                    8d:0f:2e:cd:a1:4f:c1:e8:6d:4a:0f:ec:b4:7f:40:
                    00:7b:f2:81:68:af:9e:7e:bd:f8:6c:d8:71:36:b0:
                    0e:35:3d:19:88:a7:cf:3d:00:db:79:38:9b:69:60:
                    a7:e6:a2:90:4f:87:01:66:40:59:65:ae:46:54:e7:
                    5f:a5:5d:92:e9:0d:99:be:26:fb:96:95:1c:bd:7a:
                    95:47:5b:00:f6:7a:fe:24:70:4c:e3:e9:cd:63:70:
                    ca:81:60:c9:b8:32:ee:0a:53:af:e1:3e:22:99:d7:
                    b1:ad:50:17:4c:ce:fc:cc:89:dd:95:71:a6:16:46:
                    84:3f:6c:d8:1d:20:95:7a:48:0c:37:60:7c:0b:5d:
                    0b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:17:F9:47:3E:23:60:10:39:DE:14:C2:31:FD:53:BF:A0:83:F6:D2
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:27:5e:c2:18:14:c9:2d:17:e3:0f:74:50:43:1d:ca:f3:26:
         33:60:da:c9:9e:e6:2c:a8:18:1a:b7:80:e9:8d:ab:f3:6b:a5:
         51:bb:b9:d6:31:e3:9e:f0:46:a2:50:bd:7d:db:53:ac:c4:ef:
         a4:15:e8:4c:a6:ad:29:26:61:fd:d1:de:df:9b:90:b9:25:11:
         22:15:a2:5e:ce:be:44:6e:05:4b:7c:c5:ae:a7:b2:12:5b:5f:
         53:65:cf:4b:90:de:17:fc:09:bd:57:59:35:fa:0f:96:9e:53:
         93:ba:96:c2:4c:0d:3b:97:52:6b:9a:e1:99:7d:fc:fe:60:cc:
         de:79:60:87:31:78:97:63:c7:ee:f2:25:4b:06:0b:34:39:5b:
         7b:69:9d:a5:52:60:5b:db:c8:2e:a3:9e:d3:d4:eb:32:78:be:
         f7:4d:6e:0a:ab:12:6f:70:ba:c0:51:1a:98:ba:32:1c:7c:92:
         92:43:5a:08:59:a6:fc:4c:fd:13:c2:4c:a7:8d:e5:39:de:b3:
         c9:3f:45:d3:3b:38:45:8c:c7:ac:22:f7:45:da:fa:e9:77:de:
         0b:24:df:e8:62:df:89:c7:bf:f7:de:21:75:bb:27:c3:62:d3:
         6e:6e:9a:9e:fd:93:ed:d9:ad:71:c5:0d:a3:7a:e1:b9:25:66:
         51:ba:70:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:16:52 2026 by rpki-client