This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
File:                     Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft (raw, json)
Hash identifier:          spNelk9K+5QUT3DzNuHfZFamE9cEhaEqToPH6DeiW9M=
Subject key identifier:   FC:C3:4E:D2:6E:EA:59:6A:84:A7:A2:B9:84:6D:7A:C4:D8:D1:5F:D8
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Certificate issuer:       /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
Manifest number:          0228
Signing time:             Sun 25 Jan 2026 01:24:05 +0000
Manifest this update:     Sun 25 Jan 2026 01:24:04 +0000
Manifest next update:     Sun 01 Feb 2026 01:24:04 +0000
Files and hashes:         1: Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl (hash: cc+wBTVzNYnUSdt7x/x8nF7sjAshoq8PCFbGToZEoRQ=)
                          2: AD286018B29C11EDB216812EC4F9AE02.roa (hash: ck7frHwbdvA8vLLhGdgsJbIt8cpEwUyRbFKBDEFTB8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
                          rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFB4C, serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
        Validity
            Not Before: Jan 25 01:24:04 2026 GMT
            Not After : Feb  1 01:24:04 2026 GMT
        Subject: CN=697570b5-eb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:f3:67:d9:b7:df:95:8b:17:ee:37:e0:ba:
                    f9:0e:e5:4e:0c:63:66:47:17:97:b1:8b:54:28:8d:
                    c8:9c:69:8a:b3:54:df:dc:b6:15:1e:06:b5:6e:81:
                    cd:ed:9f:29:67:b0:8f:25:54:d7:03:cb:fe:8e:6b:
                    2a:94:5d:7b:c1:d8:20:e7:ae:33:06:6e:81:89:c8:
                    4c:da:c4:10:bd:5b:f1:82:7e:b8:65:cc:83:6c:dc:
                    f7:c2:35:77:a5:a3:b5:4c:0b:88:aa:86:f9:41:9c:
                    a8:79:7c:b4:00:2e:b0:b5:9d:70:e0:9b:00:77:ea:
                    69:80:a7:50:90:16:6d:59:ab:0b:bc:b1:0e:cb:73:
                    4d:1b:ac:ee:a8:14:86:61:af:b3:12:cb:ab:ea:25:
                    cd:af:e4:7c:79:61:b4:86:ff:7d:44:58:5e:a3:b2:
                    bc:ea:33:f3:a7:0c:77:a6:aa:e0:1d:48:c8:78:dd:
                    9d:08:0d:f0:a9:a2:bf:ae:86:3d:ce:40:64:0d:fb:
                    5f:e2:43:46:d8:84:9d:cc:e9:2e:71:65:b4:a3:ea:
                    9b:27:2e:5c:4f:5c:ca:f6:38:3a:8a:f2:ea:2e:8f:
                    a5:24:d8:d3:d6:45:b4:6b:ff:64:78:05:4a:43:ec:
                    99:fa:1d:10:23:69:06:a7:dd:5a:37:93:2e:0a:a1:
                    02:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C3:4E:D2:6E:EA:59:6A:84:A7:A2:B9:84:6D:7A:C4:D8:D1:5F:D8
            X509v3 Authority Key Identifier:
                keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:92:8d:8b:2f:02:c1:a2:9b:ef:fb:d0:62:57:a0:6a:4f:08:
         93:e8:96:88:6c:46:b0:f0:c9:2e:bd:aa:b6:a6:8c:1a:48:24:
         b8:1d:1a:20:e8:24:fd:31:53:00:91:d8:0d:52:52:b3:dd:0c:
         f5:24:58:53:b6:c8:f9:58:77:07:7d:0c:7f:f2:18:ff:42:50:
         95:63:d1:e0:5c:27:de:91:42:2e:20:75:18:9e:18:a4:80:aa:
         ca:f5:a0:e0:b2:de:c5:79:10:ab:88:72:39:65:4b:09:2a:26:
         b8:cf:4c:2d:36:84:d7:29:63:2f:13:36:bd:1a:49:51:92:bb:
         24:a0:61:5b:7e:be:3b:34:08:e8:fe:9a:c6:d7:3e:e7:d7:59:
         83:bc:d2:4e:49:e0:64:b3:1b:3b:69:5c:9d:2e:db:e6:64:1c:
         86:c8:24:fc:65:dc:85:47:9c:4a:3f:be:c5:6a:53:07:a6:65:
         73:2c:40:68:05:b8:3b:84:55:76:a0:14:a7:1c:05:eb:33:1a:
         7a:75:53:05:37:5b:af:7f:32:4e:26:ad:ab:20:e1:25:ee:b8:
         e1:d4:0a:7a:cd:ac:37:82:6a:92:f9:0d:47:0e:85:bb:8a:9f:
         6f:e1:76:6d:98:5c:e8:17:35:53:cd:f9:6e:76:6f:fc:81:69:
         d2:80:a8:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZCNEMxMTAvBgNVBAUTKDYzNDk3MzU5MDRFMUJDMEQ2NUJENTk0QTA3NzYyQkI1
Mjk5QzAzOEEwHhcNMjYwMTI1MDEyNDA0WhcNMjYwMjAxMDEyNDA0WjAYMRYwFAYD
VQQDDA02OTc1NzBiNS1lYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtxnzZ9m335WLF+434Lr5DuVODGNmRxeXsYtUKI3InGmKs1Tf3LYVHga1boHN
7Z8pZ7CPJVTXA8v+jmsqlF17wdgg564zBm6BichM2sQQvVvxgn64ZcyDbNz3wjV3
paO1TAuIqob5QZyoeXy0AC6wtZ1w4JsAd+ppgKdQkBZtWasLvLEOy3NNG6zuqBSG
Ya+zEsur6iXNr+R8eWG0hv99RFheo7K86jPzpwx3pqrgHUjIeN2dCA3wqaK/roY9
zkBkDftf4kNG2ISdzOkucWW0o+qbJy5cT1zK9jg6ivLqLo+lJNjT1kW0a/9keAVK
Q+yZ+h0QI2kGp91aN5MuCqECwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzDTtJu
6llqhKeiuYRtesTY0V/YMB8GA1UdIwQYMBaAFGNJc1kE4bwNZb1ZSgd2K7UpnAOK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI0Qy9DNDcwQjIyQUIy
OTcxMUVEOTRFRjA5MjZDNEY5QUUwMi9ZMGx6V1FUaHZBMWx2VmxLQjNZcnRTbWNB
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kwbHpXUVRodkExbHZWbEtCM1lydFNtY0E0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkI0Qy9DNDcwQjIyQUIyOTcxMUVEOTRFRjA5MjZDNEY5QUUwMi9ZMGx6V1FUaHZB
MWx2VmxLQjNZcnRTbWNBNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBAko2LLwLBopvv+9BiV6BqTwiT6JaIbEaw8Mkuvaq2powaSCS4HRog
6CT9MVMAkdgNUlKz3Qz1JFhTtsj5WHcHfQx/8hj/QlCVY9HgXCfekUIuIHUYnhik
gKrK9aDgst7FeRCriHI5ZUsJKia4z0wtNoTXKWMvEza9GklRkrskoGFbfr47NAjo
/prG1z7n11mDvNJOSeBksxs7aVydLtvmZByGyCT8ZdyFR5xKP77FalMHpmVzLEBo
Bbg7hFV2oBSnHAXrMxp6dVMFN1uvfzJOJq2rIOEl7rjh1Ap6zaw3gmqS+Q1HDoW7
ip9v4XZtmFzoFzVTzfludm/8gWnSgKgi
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:34 2026 by rpki-client