This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
File:                     yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json)
Hash identifier:          o78Wfo+nsiWPSN6JWCTc1ZRt/xTtoVrCjWdWSG3xTzs=
Subject key identifier:   57:9F:04:5D:12:C8:96:27:C3:44:27:EA:47:9D:94:B9:75:E0:76:14
Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
Certificate issuer:       /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Certificate serial:       0ECA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
Manifest number:          0EB4
Signing time:             Sat 24 Jan 2026 17:22:47 +0000
Manifest this update:     Sat 24 Jan 2026 17:22:46 +0000
Manifest next update:     Sat 31 Jan 2026 17:22:46 +0000
Files and hashes:         1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: y5SP/SzQYKudiZcSimceJSTxD9CQ4LVsAOyMaifz7EQ=)
                          2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: ecUYAzKP1VHNDV8/DURQ3XmWYJTnzDR9mLUMMYKH7wE=)
                          3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: RU2Bp78eGDXSscZxxDiygRwZ64V3JmS10+rUng9roo8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
                          rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3786 (0xeca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
        Validity
            Not Before: Jan 24 17:22:46 2026 GMT
            Not After : Jan 31 17:22:46 2026 GMT
        Subject: CN=6974ffe6-0526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:46:b7:42:fa:c0:5f:1d:92:96:e5:65:4e:d9:
                    e8:7f:f0:1b:62:51:96:8f:ba:15:dd:80:61:6d:3d:
                    51:58:a3:3b:07:2a:ac:96:09:4c:f1:d2:40:99:b1:
                    f6:67:42:71:79:e3:71:9e:1c:0d:b2:3e:89:50:9f:
                    1f:4d:00:69:40:14:88:4d:53:bb:08:bf:0a:3f:d2:
                    d3:57:51:f1:f3:b6:9c:db:e8:c3:23:06:c7:73:03:
                    82:f5:8b:18:f5:c9:e4:50:b4:1d:74:61:10:66:26:
                    63:69:a7:c2:04:85:0d:b3:8e:88:a6:b0:58:ca:b0:
                    db:f5:31:06:cf:62:af:79:fd:f5:51:7d:03:68:93:
                    a4:68:43:5e:7f:73:88:e4:29:c3:85:7f:00:bb:b2:
                    30:4f:3d:b6:96:b1:43:b8:c6:48:d3:ad:91:a3:c1:
                    a3:1a:7e:f7:cd:54:9c:dd:b3:0b:38:f6:c5:51:31:
                    d6:97:e2:a3:9f:41:84:ae:e1:cd:8c:0c:28:f9:da:
                    98:83:89:09:cb:78:a5:15:21:73:a9:b5:c8:18:54:
                    8c:36:b5:d6:73:de:f5:f5:84:ce:75:47:25:ea:65:
                    b9:87:e8:3c:db:ef:e7:21:a6:c7:e4:21:61:a1:f3:
                    26:c2:ad:5d:c7:81:b6:0b:da:18:de:c9:2c:f3:ce:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9F:04:5D:12:C8:96:27:C3:44:27:EA:47:9D:94:B9:75:E0:76:14
            X509v3 Authority Key Identifier:
                keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9d:81:13:24:3f:70:9e:ac:1c:2f:6a:12:01:e7:f5:30:58:
         0e:f6:4a:75:f0:bb:80:cc:c7:f7:93:7d:d9:0c:cf:bb:ba:a3:
         dd:f9:b5:de:7a:d9:17:56:22:d4:a2:3c:5f:fc:0b:75:55:88:
         2b:1e:7f:4c:0b:da:99:7a:4b:2d:07:59:c5:0d:6d:c0:b5:62:
         2f:2c:a1:f8:20:45:2e:4e:cb:3c:4b:b2:10:a7:6d:10:89:c6:
         8e:bc:4f:23:6d:7b:76:59:be:c9:a3:5d:a5:de:42:2b:cf:9b:
         89:37:64:49:cd:ed:69:ae:7e:93:a0:ba:2b:2a:a4:c6:93:7f:
         6a:6c:e2:3a:c2:64:3b:4c:92:a6:40:76:75:c1:29:88:74:3d:
         f1:36:a0:a5:92:22:14:3c:74:6c:d5:fe:3a:7c:66:96:f1:db:
         3f:29:6a:bf:82:42:40:19:2d:b8:90:66:12:cf:18:96:3d:a6:
         12:7b:96:03:3f:cb:d7:a8:a0:b8:e2:39:33:c2:7e:89:6b:5c:
         40:39:bd:d3:44:9f:27:b2:94:8e:40:27:22:3c:0a:06:26:93:
         5a:a6:28:43:1b:92:df:72:8f:54:80:09:ad:17:9d:ce:94:87:
         33:a5:82:7c:7a:f4:59:e3:cf:f8:59:ed:0e:29:0f:0a:a3:f8:
         02:c1:55:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:51 2026 by rpki-client