This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
File:                     yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json)
Hash identifier:          W1xPb7Uc0yCWWedmIPvd0u0llSGuV8vA7mA/D9HlWT4=
Subject key identifier:   6F:ED:D0:F1:90:FC:66:A7:7B:1D:3D:85:6C:7F:15:4D:C0:27:2E:92
Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3
Certificate issuer:       /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3
Certificate serial:       0DC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
Manifest number:          0DBC
Signing time:             Sat 24 Jan 2026 17:33:29 +0000
Manifest this update:     Sat 24 Jan 2026 17:33:29 +0000
Manifest next update:     Sat 31 Jan 2026 17:33:29 +0000
Files and hashes:         1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: KJUahRQCXIpRk+ldGddlZ4MMVjkn6Z4eQYVBqEFAnRc=)
                          2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl
                          rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3528 (0xdc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3
        Validity
            Not Before: Jan 24 17:33:29 2026 GMT
            Not After : Jan 31 17:33:29 2026 GMT
        Subject: CN=69750269-d6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e3:8a:12:03:2a:03:38:69:d5:cd:d0:19:0d:
                    8f:9d:79:80:9c:ec:2a:e2:3d:2f:7b:10:38:ab:6b:
                    4a:30:0b:18:f5:d4:02:6b:fb:d5:53:07:98:4b:f3:
                    c1:0a:aa:d9:ca:71:cc:4b:6b:77:f4:82:c1:a9:a3:
                    9c:db:66:b3:da:1c:0f:f9:b3:fd:1c:f2:15:c1:ec:
                    dc:b7:c3:d2:dc:10:66:1b:59:91:1a:d0:dd:9b:64:
                    6a:ae:e4:56:e1:72:33:47:16:43:a3:9c:b5:e8:6f:
                    78:13:0e:84:95:26:82:02:22:df:08:d8:6a:cc:7e:
                    90:9a:5e:bf:ec:80:bc:81:7a:ff:37:fd:02:f7:be:
                    9d:cf:8a:4c:e3:cf:1a:36:6e:2a:f6:a7:31:2d:e6:
                    bd:ce:8f:5c:85:42:57:1a:08:80:7a:85:71:b7:99:
                    3d:22:a6:44:12:8c:44:ec:74:e2:79:0b:f9:0d:2a:
                    39:f1:24:98:db:1f:4e:f7:ee:db:43:65:cd:93:57:
                    8f:00:7a:c9:af:f7:e3:a4:7d:5b:bc:92:4a:be:4d:
                    b8:84:63:a5:6c:d3:00:df:40:69:70:64:79:2f:9d:
                    4a:01:ba:94:c3:a0:88:a4:62:62:f0:14:1f:81:7d:
                    a9:b4:72:15:ae:69:aa:b9:fa:ea:fc:d8:ac:60:08:
                    4f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:ED:D0:F1:90:FC:66:A7:7B:1D:3D:85:6C:7F:15:4D:C0:27:2E:92
            X509v3 Authority Key Identifier:
                keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b4:3f:3a:05:0e:44:aa:aa:af:67:d2:ad:ea:23:8e:2a:8b:
         8f:5e:27:83:2e:84:fd:cd:c0:ad:f5:c9:7f:18:74:d4:38:75:
         f7:e2:18:c8:5b:ca:16:b7:dc:49:21:2a:d1:82:60:7d:9a:58:
         a7:25:be:c3:47:33:b5:d4:68:e1:24:fd:42:2a:82:86:43:fd:
         9c:2c:a5:82:4d:85:a7:8a:d9:94:b9:8d:08:50:91:50:fc:2b:
         9a:be:59:2a:12:3e:16:b9:e4:ee:d9:e1:9f:ff:5a:09:b9:e5:
         a4:42:1f:2d:84:7a:42:1b:f3:30:7c:9a:f6:63:e8:34:a9:1d:
         89:ae:38:57:49:b9:e1:f9:64:c1:6f:a8:cd:c0:7b:6d:ac:49:
         10:c7:b1:f3:29:46:1e:82:fb:f1:43:ee:ff:85:e0:89:ee:64:
         74:c1:48:7d:d8:16:96:33:8f:09:94:88:8b:65:83:84:4a:52:
         01:17:47:f2:a6:d1:30:37:d2:41:e4:70:29:a6:e0:43:7e:e1:
         23:d3:71:4e:42:83:ea:95:b9:08:87:4b:2e:7c:5c:c1:f0:88:
         57:cf:4f:fc:1b:2c:c6:d8:12:1a:fe:e8:b9:6f:43:5b:3c:f9:
         46:f3:84:e6:66:60:f9:d2:99:a5:fb:a5:6d:a6:59:4c:cc:18:
         d8:6c:e2:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD
QTU3MTcwQTMwHhcNMjYwMTI0MTczMzI5WhcNMjYwMTMxMTczMzI5WjAYMRYwFAYD
VQQDDA02OTc1MDI2OS1kNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+OKEgMqAzhp1c3QGQ2PnXmAnOwq4j0vexA4q2tKMAsY9dQCa/vVUweYS/PB
CqrZynHMS2t39ILBqaOc22az2hwP+bP9HPIVwezct8PS3BBmG1mRGtDdm2RqruRW
4XIzRxZDo5y16G94Ew6ElSaCAiLfCNhqzH6Qml6/7IC8gXr/N/0C976dz4pM488a
Nm4q9qcxLea9zo9chUJXGgiAeoVxt5k9IqZEEoxE7HTieQv5DSo58SSY2x9O9+7b
Q2XNk1ePAHrJr/fjpH1bvJJKvk24hGOlbNMA30BpcGR5L51KAbqUw6CIpGJi8BQf
gX2ptHIVrmmqufrq/NisYAhP9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/t0PGQ
/Ganex09hWx/FU3AJy6SMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0
OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj
S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u
aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAtD86BQ5EqqqvZ9Kt6iOOKouPXieDLoT9zcCt9cl/GHTUOHX34hjI
W8oWt9xJISrRgmB9mlinJb7DRzO11GjhJP1CKoKGQ/2cLKWCTYWnitmUuY0IUJFQ
/CuavlkqEj4WueTu2eGf/1oJueWkQh8thHpCG/MwfJr2Y+g0qR2JrjhXSbnh+WTB
b6jNwHttrEkQx7HzKUYegvvxQ+7/heCJ7mR0wUh92BaWM48JlIiLZYOESlIBF0fy
ptEwN9JB5HAppuBDfuEj03FOQoPqlbkIh0sufFzB8IhXz0/8GyzG2BIa/ui5b0Nb
PPlG84TmZmD50pml+6VtpllMzBjYbOJW
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:20 2026 by rpki-client