This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
File:                     YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json)
Hash identifier:          NudL65lheWjGXIG6Gu+WtGST20YWgQKuYd2ASLZkgTI=
Subject key identifier:   5B:7F:B2:46:F0:F3:B8:5E:7E:3A:04:AA:75:A0:78:9C:49:80:63:87
Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5
Certificate issuer:       /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5
Certificate serial:       01F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
Manifest number:          01EC
Signing time:             Sun 25 Jan 2026 01:55:15 +0000
Manifest this update:     Sun 25 Jan 2026 01:55:14 +0000
Manifest next update:     Sun 01 Feb 2026 01:55:14 +0000
Files and hashes:         1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: SLKN3tcTL2u8tRXO3RipT1HWpjMd+dyqXfhKO2+4UOA=)
                          2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: fc1mmSSRqzCuGE7h3o2YcW/Wc0vCR2x5Y/Ca8guGROk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl
                          rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5
        Validity
            Not Before: Jan 25 01:55:14 2026 GMT
            Not After : Feb  1 01:55:14 2026 GMT
        Subject: CN=69757803-6a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7b:6b:e9:5e:a7:ef:02:f4:ad:63:71:da:ea:
                    9b:94:83:49:d7:c4:51:d3:ee:45:2a:f3:a0:09:c3:
                    53:3c:a6:ba:d9:ea:c6:a6:71:34:4b:50:2e:5e:43:
                    b1:df:32:0e:4d:2a:12:87:f0:9a:3a:45:1e:34:9d:
                    99:dc:9c:de:b3:c8:2f:48:dd:f3:78:72:42:9b:03:
                    c3:20:df:41:3c:e4:37:67:b3:f8:f0:4f:66:05:90:
                    bc:e1:f7:2c:5f:5b:f2:fb:f1:b0:a7:4b:90:0d:6b:
                    3e:5b:e3:1b:8f:72:d9:11:1a:b1:a4:1e:be:db:b3:
                    80:40:fe:c7:b1:38:a3:45:7e:40:43:8e:3d:94:5e:
                    fc:69:b3:3b:63:95:64:37:91:13:f5:95:62:82:57:
                    19:67:f0:10:ee:a7:3b:2a:35:b1:f5:38:df:d0:10:
                    2c:84:a9:38:d4:95:7d:33:2f:5e:12:1b:9d:5e:6c:
                    ef:4b:6e:95:19:a2:64:ef:3f:ca:bc:9f:59:98:8d:
                    7d:85:b1:89:6d:67:53:71:7b:c3:d7:3d:dd:1e:88:
                    32:a9:d2:ae:ad:ee:19:42:75:03:2b:33:28:40:16:
                    05:b4:9b:6d:9b:34:13:76:9d:60:8c:57:ed:59:49:
                    31:6e:08:8c:17:cf:fe:73:6a:17:17:8f:c3:2f:68:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7F:B2:46:F0:F3:B8:5E:7E:3A:04:AA:75:A0:78:9C:49:80:63:87
            X509v3 Authority Key Identifier:
                keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:34:49:b6:50:92:2d:8c:c5:c8:bd:da:51:b1:be:54:f0:48:
         18:b0:ee:d6:13:37:e2:0d:92:d6:58:16:21:85:94:af:5f:e0:
         dd:8e:20:34:9b:3c:cc:cf:7c:ab:0b:29:b1:3e:d6:5e:4e:c5:
         22:9b:8e:ab:a5:8b:0e:a8:3e:9a:4f:95:6d:76:29:ac:d7:51:
         a0:52:04:af:14:f8:20:86:21:85:c6:ed:19:32:67:23:d4:37:
         74:eb:16:1d:26:b5:d7:31:32:6a:bd:dc:0a:91:1a:16:67:79:
         74:17:a3:37:21:7a:1a:a5:ad:61:c3:16:86:69:e8:06:3e:90:
         ec:e4:05:e4:92:b0:a3:dd:e4:39:0c:cd:49:08:8b:6c:d7:d1:
         52:15:9d:f8:62:3a:66:73:d7:52:8a:c9:de:bb:01:cf:fb:27:
         dd:07:8b:5b:9d:9e:21:37:41:f3:9d:9d:fc:04:a8:8e:83:89:
         ff:76:b7:21:27:06:29:b5:72:53:b2:98:77:c6:b6:c6:f6:8b:
         44:4d:6e:26:b4:10:cb:e0:73:fd:3b:9c:16:7a:a7:e4:f4:c3:
         ef:b8:2d:74:69:42:9f:6b:12:8d:27:19:d7:ee:cc:1b:f7:89:
         31:e2:52:a7:e1:28:ed:43:9c:61:f9:52:43:47:25:81:6b:87:
         26:fa:fa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:36 2026 by rpki-client