This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
File:                     YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft (raw, json)
Hash identifier:          HuYZ4/89PEgJ0jwZDajsMVnpXNUDmO5yio9nf2xDgBY=
Subject key identifier:   05:DD:BC:9D:1D:A7:6D:43:9B:D3:5A:35:5C:0E:4E:34:B0:D3:38:D2
Authority key identifier: 61:7F:05:4E:3C:E4:51:E0:C3:E7:F4:46:DD:09:F7:86:46:52:B6:56
Certificate issuer:       /CN=A91A1CAA/serialNumber=617F054E3CE451E0C3E7F446DD09F7864652B656
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
Manifest number:          0169
Signing time:             Fri 23 Jan 2026 03:08:42 +0000
Manifest this update:     Fri 23 Jan 2026 03:08:42 +0000
Manifest next update:     Fri 30 Jan 2026 03:08:42 +0000
Files and hashes:         1: YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl (hash: ZhUdNyx3uafIXHlGNyqhZ0UUKYmjvkf4f56XZ4xnMJw=)
                          2: E75FB4F0CE4A11EE95C15E20C4F9AE02.roa (hash: utq11zi2cO+ldR8mXOv++lb25ZgD5tUSUW03iRiwBL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl
                          rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1CAA, serialNumber=617F054E3CE451E0C3E7F446DD09F7864652B656
        Validity
            Not Before: Jan 23 03:08:42 2026 GMT
            Not After : Jan 30 03:08:42 2026 GMT
        Subject: CN=6972e63a-d6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:41:f3:25:4e:8d:2b:1f:b7:00:41:2a:8d:c4:
                    ab:e1:49:71:80:66:d6:b4:58:30:5f:cb:b9:92:d7:
                    5a:79:0f:be:36:f5:ba:4a:d0:5a:82:c8:d3:e5:0d:
                    59:e2:73:3e:c6:9d:51:0f:dc:27:b8:b4:c8:42:da:
                    ba:d6:26:e1:ee:78:a2:be:f4:d0:ad:b4:ab:5b:b3:
                    97:19:e5:b3:37:f0:86:fe:e3:9b:f9:c9:a3:c9:58:
                    ff:58:fa:00:e4:ba:d8:89:d9:e5:9a:07:af:cc:11:
                    e8:e5:a7:05:9b:a6:38:bb:cc:e2:74:cc:44:48:07:
                    26:e9:8e:da:b6:c0:df:d5:ec:03:9f:d3:69:4f:fa:
                    12:43:ee:0e:0b:b3:21:17:77:2c:8f:09:0a:98:40:
                    18:77:8e:42:f8:fd:3c:4e:93:55:4f:dd:d8:7f:61:
                    d9:6c:24:c8:f3:2f:fd:ee:ef:a7:47:53:8d:02:66:
                    09:9b:08:28:68:6c:e6:25:88:0f:b6:e5:39:a7:26:
                    58:43:a5:aa:e6:91:13:5a:4b:43:b8:ee:06:00:7f:
                    1a:65:4d:9f:f9:66:7b:98:63:aa:3b:5a:85:d5:28:
                    8c:3f:ac:a7:fb:48:78:ba:3d:93:d4:35:f7:41:13:
                    dd:af:de:73:fc:e2:d7:47:fd:4e:0d:fe:24:1f:1d:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DD:BC:9D:1D:A7:6D:43:9B:D3:5A:35:5C:0E:4E:34:B0:D3:38:D2
            X509v3 Authority Key Identifier:
                keyid:61:7F:05:4E:3C:E4:51:E0:C3:E7:F4:46:DD:09:F7:86:46:52:B6:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:43:05:d9:9c:90:d8:60:71:a4:4d:95:41:0a:22:9c:6d:dd:
         4a:c0:f5:d6:bf:e4:56:7e:c3:28:17:75:6e:7a:8e:79:d5:d6:
         9d:2f:a5:2d:ce:04:8a:c9:a2:20:91:a9:e3:ac:b1:3e:ea:2f:
         0a:98:c0:b8:e1:93:ad:aa:87:ff:7c:c3:02:6c:3f:67:95:6a:
         6d:3a:fb:91:5c:4f:31:1a:1a:c3:82:b7:e5:08:3e:5d:68:96:
         b2:21:91:89:57:0c:66:9d:52:df:d5:d4:ab:07:1c:55:9a:bb:
         91:24:2f:6d:37:e5:8e:48:ee:5e:3c:6c:8f:2d:72:86:b6:13:
         1b:6c:57:38:3c:40:5f:78:ce:13:f7:c7:6d:d0:60:c1:7f:a2:
         c3:5b:82:8b:67:a0:d3:e4:d8:db:5f:36:b6:73:18:d3:83:fc:
         34:5e:08:b2:15:11:b0:8b:5a:a5:e3:73:af:48:28:10:01:48:
         ac:ba:7e:1c:16:3c:42:66:82:e5:2c:2a:0e:8b:0a:79:61:5e:
         d5:39:e8:60:b3:4e:6b:a6:57:58:c9:60:5b:3c:62:52:ea:69:
         b8:9c:56:b4:cb:8c:e6:de:f7:75:e2:46:c4:0d:74:25:2c:f1:
         91:97:96:f0:71:4a:f0:f7:fd:2e:8c:b4:26:49:a8:16:9e:8e:
         eb:17:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:56 2026 by rpki-client