This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
File:                     yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json)
Hash identifier:          9dVtSGZlZobMptZd83qsifT06lb+D5GwdPUtJ4Ig7QU=
Subject key identifier:   FA:B8:74:7F:BC:8B:2B:3F:F5:A2:42:C2:68:40:50:F0:70:E4:EA:5B
Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B
Certificate issuer:       /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
Certificate serial:       020F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
Manifest number:          020A
Signing time:             Sun 25 Jan 2026 01:39:21 +0000
Manifest this update:     Sun 25 Jan 2026 01:39:20 +0000
Manifest next update:     Sun 01 Feb 2026 01:39:20 +0000
Files and hashes:         1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: tahlhuG409B/90F/aJq/F1jHtaStHYwbzGvm53n60Bw=)
                          2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: F7qGiUSXmfTHkG4rLsiz9f3fhRuXMOAIShVR1Seg7DE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl
                          rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
        Validity
            Not Before: Jan 25 01:39:20 2026 GMT
            Not After : Feb  1 01:39:20 2026 GMT
        Subject: CN=69757449-c35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2c:51:8e:6e:63:94:e8:bd:0b:a2:fe:b4:11:
                    e0:5e:07:d7:f2:2f:8d:e7:49:01:2d:ef:64:36:33:
                    0c:72:43:1d:4d:c0:fe:50:ec:e4:41:cc:6e:71:c5:
                    82:9d:75:de:39:ce:fe:8a:eb:6e:a5:7d:e6:e6:75:
                    34:65:e3:da:c9:43:52:5d:2b:bd:43:3a:a4:59:ca:
                    b4:cd:92:af:80:40:a8:7e:fc:e0:06:35:36:22:6a:
                    f8:e2:ac:48:bb:74:d1:cb:b2:83:75:c9:6d:20:b1:
                    12:16:92:08:ce:ce:77:ed:32:44:ef:87:97:90:c7:
                    c7:33:2a:fc:cf:39:e8:5b:17:58:95:b5:29:3d:b7:
                    ed:e1:ff:31:ab:d5:6f:fd:38:33:d7:9c:1c:3b:14:
                    6b:e9:56:7f:78:39:78:32:e8:5d:97:70:06:0a:fb:
                    69:47:4c:b8:40:98:fd:ed:2d:25:05:db:96:6a:43:
                    f4:7d:d0:1e:6b:b6:45:61:2c:81:13:64:ee:33:69:
                    17:bf:3d:a2:e2:67:5a:49:90:aa:03:df:45:29:dc:
                    44:34:65:1b:ae:fd:ac:d0:e2:41:40:d8:32:dc:36:
                    be:66:aa:56:69:31:13:e1:07:35:1b:9f:cf:20:ff:
                    d7:22:72:b7:cc:1a:06:a7:9f:62:9b:50:5a:88:f7:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B8:74:7F:BC:8B:2B:3F:F5:A2:42:C2:68:40:50:F0:70:E4:EA:5B
            X509v3 Authority Key Identifier:
                keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c5:2b:b7:5d:91:12:9b:bd:2f:bd:6e:1b:eb:99:5b:d3:f1:
         9e:54:14:40:8c:d7:14:b0:e2:f8:f2:5c:6c:32:c5:ff:be:a3:
         b8:6d:c3:68:bb:96:8d:69:41:ef:b0:f9:b3:5d:4e:04:40:82:
         49:4a:b7:97:5d:fa:f0:65:03:5f:80:0e:15:0a:23:3a:61:65:
         c8:5d:f8:ed:d3:7f:34:66:67:1e:d6:43:6c:ed:80:6f:2d:77:
         02:61:cb:db:95:94:0e:c9:bb:95:0e:50:a8:fb:f5:4a:dd:32:
         2d:43:89:9d:af:2c:b7:fa:b7:72:50:d8:11:db:6d:88:62:4a:
         55:19:f6:75:04:de:5d:cb:87:b1:c6:44:a5:17:ce:bc:d1:ab:
         00:60:18:3c:b6:69:ec:58:d8:5b:92:08:8c:22:f3:77:97:c7:
         24:fb:df:26:91:7d:7a:43:3b:21:86:83:70:00:9b:82:5c:31:
         e5:8e:99:28:07:06:de:69:48:be:20:bf:05:69:0b:1c:ab:61:
         a6:c6:7f:f5:ea:8c:f8:7c:14:5e:44:aa:f9:73:f5:4d:e7:94:
         a3:b8:82:0c:7d:f7:5f:01:77:e5:56:d0:f6:58:47:f6:11:e5:
         b0:5e:8d:cd:44:ec:ea:e8:fd:28:80:ee:a2:f0:be:6d:49:3d:
         e6:00:ff:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:55 2026 by rpki-client