This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
File:                     yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json)
Hash identifier:          3ObGgYE4syIitYTKJsYOK7d6nCUEXXjpb7TreAAxe9s=
Subject key identifier:   69:5A:BB:04:D2:78:D0:70:E5:60:0E:8E:BE:BC:38:D7:35:FD:1E:EB
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Certificate issuer:       /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
Manifest number:          0120
Signing time:             Sat 24 Jan 2026 20:48:09 +0000
Manifest this update:     Sat 24 Jan 2026 20:48:08 +0000
Manifest next update:     Sat 31 Jan 2026 20:48:08 +0000
Files and hashes:         1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: SurNQjCnQoKoG2xOvK74AlEWZ5jGUvbJxCFRpsZlNvc=)
                          2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: p1NZ9NnirQbZI+pUJKRFnk/LQesx95uqpmbnkuNBqak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
                          rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
        Validity
            Not Before: Jan 24 20:48:08 2026 GMT
            Not After : Jan 31 20:48:08 2026 GMT
        Subject: CN=69753009-9458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:da:bb:c0:7a:65:90:eb:83:2a:c6:4c:fe:63:
                    9f:44:29:c2:14:db:0c:38:44:3f:45:fc:e0:8d:d1:
                    f0:56:17:37:0f:5e:07:4c:00:73:41:1a:0c:b6:6c:
                    a3:df:92:2c:89:3d:7a:5b:a6:f7:ba:b6:ba:e4:d9:
                    0b:66:db:04:b0:fa:22:87:84:96:27:37:f2:24:34:
                    83:b4:eb:5d:ef:cf:5d:fa:50:d8:3f:4c:84:a8:b7:
                    82:17:32:96:80:08:85:95:12:58:81:95:6e:dc:a4:
                    f0:6d:5d:44:bc:b6:15:72:53:f8:57:41:22:08:b2:
                    27:3d:50:45:e9:e7:aa:48:27:e7:41:b9:0e:ce:99:
                    b2:08:4c:cd:2a:c6:62:be:82:44:cf:61:da:5e:81:
                    46:07:64:bd:24:8c:dc:89:01:eb:26:31:ce:60:49:
                    3a:1c:f5:53:8d:7c:40:75:0a:70:90:7c:43:49:3a:
                    4b:07:33:e7:28:c4:6f:bd:6e:46:15:d9:e3:c7:d3:
                    6f:44:b1:9d:e7:fe:4e:c6:cc:3b:f6:74:42:84:9a:
                    5a:c0:1d:2c:a3:10:cb:b7:d4:ec:fb:68:04:61:14:
                    eb:19:d2:91:f3:a7:1f:a7:5f:09:74:5e:d0:cd:45:
                    09:d5:7d:c7:8f:59:e2:22:aa:9b:92:d3:50:35:02:
                    31:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5A:BB:04:D2:78:D0:70:E5:60:0E:8E:BE:BC:38:D7:35:FD:1E:EB
            X509v3 Authority Key Identifier:
                keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fa:e8:fd:1e:8a:a4:e1:4c:31:b3:88:3f:e9:d8:c3:d1:f6:
         33:9b:2c:36:4b:b9:f4:27:7a:b2:e3:a0:4c:61:ad:ce:5e:7b:
         7f:02:87:f8:d4:f8:1c:1e:56:75:86:69:0c:d0:1a:4c:c3:90:
         80:28:f3:0b:d3:93:6e:51:f1:e9:9a:9f:42:f6:39:6d:89:c2:
         7b:dd:55:47:0d:29:e9:70:3d:f9:6d:1e:e2:a6:c8:a1:e3:8b:
         36:14:47:95:f9:df:89:e0:d2:00:88:6f:75:10:91:a5:d2:2e:
         b9:38:08:a6:ad:5f:d2:1a:18:42:92:55:91:f1:20:83:8f:48:
         f3:24:be:5f:cd:24:3f:19:ad:a9:79:0e:10:de:de:68:e0:ac:
         35:7c:84:01:80:5e:4f:8a:2e:40:e1:83:62:f9:8e:e7:fa:66:
         43:6e:d0:3e:80:7b:51:3e:97:f3:47:7a:9e:34:70:3d:46:37:
         43:3b:62:40:02:45:fe:00:42:bf:5a:84:d3:b4:39:6e:5c:15:
         7f:bd:d5:67:7b:50:be:ed:c7:01:a8:80:65:14:5d:7e:30:80:
         10:2b:8d:dd:1f:9f:67:71:1d:fb:64:18:7e:b6:97:2d:cb:c8:
         1a:e3:4b:ac:3e:75:97:2d:cb:cb:5d:35:f6:fe:36:62:dd:6f:
         92:c6:96:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:02:59 2026 by rpki-client