This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
File:                     YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json)
Hash identifier:          SfqYimdsQ0e7/E2OjdVVoIdjZgFp/qOK8BCYL+RqhFc=
Subject key identifier:   9E:B6:1E:99:7E:C6:BA:8F:D1:06:DC:44:C6:94:E6:0D:83:10:17:6C
Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
Certificate issuer:       /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Certificate serial:       1AE1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
Manifest number:          1AD2
Signing time:             Sat 24 Jan 2026 16:05:48 +0000
Manifest this update:     Sat 24 Jan 2026 16:05:47 +0000
Manifest next update:     Sat 31 Jan 2026 16:05:47 +0000
Files and hashes:         1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: mOR7AjBIyiQThhsBph6Ct1Kg8oqEwiziIRdnSHtBU7Q=)
                          2: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: Wesd0InqJ/VHy6+SYHu7ABNFnSg/btyWb+0cbj+CPEk=)
                          3: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: rSf0co4QElknqmx/HUwcUze0T308M2kPbS2aUDzOJyo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
                          rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6881 (0x1ae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
        Validity
            Not Before: Jan 24 16:05:47 2026 GMT
            Not After : Jan 31 16:05:47 2026 GMT
        Subject: CN=6974eddc-3cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:78:2d:8e:99:d0:b7:f7:d4:95:73:61:dc:
                    6c:b3:f5:5d:65:3f:14:c9:8f:b7:85:76:59:b9:fc:
                    f6:85:ea:79:b5:05:2d:75:b0:50:79:09:27:3c:71:
                    63:cb:9a:4a:d3:fe:00:0d:6b:de:6e:e1:12:70:71:
                    a5:95:df:cc:ed:d7:73:38:5b:22:85:79:bb:89:2f:
                    21:b0:ab:48:6d:cd:13:1b:f9:80:8f:f6:e1:4f:2e:
                    dc:a7:bf:9f:45:d6:6f:63:65:8a:83:84:fe:da:9a:
                    6d:44:c0:33:51:fb:8f:83:90:32:07:c6:d3:79:65:
                    5b:7f:06:f6:2c:01:19:d4:30:f6:fe:d5:02:d2:44:
                    29:a5:96:da:7e:dc:6a:70:7a:6c:8f:b0:67:9f:c9:
                    8b:24:05:a8:a2:c3:c8:7d:5b:9a:ac:9d:bd:d6:2f:
                    e6:b4:66:9d:17:b0:6a:09:fa:bd:7c:a9:1e:35:f5:
                    f4:8b:0f:75:e7:c8:ac:8f:10:e1:67:4d:71:59:40:
                    d9:60:a1:11:b5:79:df:0f:8f:85:16:ff:86:f9:53:
                    00:e2:cb:26:e7:0b:91:74:ec:fb:27:53:b6:63:f9:
                    24:c3:6d:18:a8:1f:c4:0b:8a:60:a8:8a:79:11:d3:
                    9f:67:42:cd:a0:9b:02:c9:f8:91:c4:28:b8:c8:90:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B6:1E:99:7E:C6:BA:8F:D1:06:DC:44:C6:94:E6:0D:83:10:17:6C
            X509v3 Authority Key Identifier:
                keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:45:48:2a:63:2d:d8:dc:37:fd:ab:43:9a:c3:1b:28:10:80:
         21:fb:00:25:99:ef:46:81:c4:1e:15:25:04:b4:b7:03:1d:69:
         2c:08:3b:20:51:8b:4f:d5:7c:be:96:36:de:aa:33:a3:4c:56:
         ab:bf:c5:f4:27:f7:b9:69:0f:67:52:c4:2e:5c:79:b5:af:56:
         d4:a4:8f:54:78:de:0b:6d:82:33:ed:62:2e:d7:41:16:50:0b:
         d6:f3:23:21:88:c8:a3:75:73:0e:81:d8:80:e7:85:b6:00:52:
         b7:48:49:4b:53:27:b3:9d:9b:1c:00:48:46:9d:df:2b:17:ff:
         1f:87:5a:44:07:9e:f3:9d:e7:48:f8:e2:a0:0c:fd:be:cf:5d:
         a6:8a:b7:0f:58:54:9c:e7:1d:93:fc:17:6e:8e:81:a7:20:f8:
         c8:59:16:24:2e:18:97:e0:25:4a:88:c0:ec:b5:1c:2f:3e:71:
         42:f9:59:ed:ad:5b:08:38:ee:2c:57:2f:9e:2f:d7:94:98:78:
         21:d5:ca:1e:19:d6:2b:9d:21:59:d3:a2:c3:b7:22:0b:f6:8a:
         79:89:5f:97:65:7b:97:11:71:6e:8f:44:83:47:ce:38:ad:ab:
         5e:88:80:dd:53:60:19:17:85:d5:03:ac:f9:17:0a:00:d5:e1:
         2c:05:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:43:24 2026 by rpki-client