This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
File:                     YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json)
Hash identifier:          AVUtFkRYZ9HCj2808bgkz1o1JD8o3DJEaeUEm5+tFk4=
Subject key identifier:   68:04:B4:82:3B:3B:7D:62:83:5B:51:86:34:F7:F8:DC:04:85:47:6F
Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82
Certificate issuer:       /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882
Certificate serial:       02E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
Manifest number:          02E2
Signing time:             Sun 25 Jan 2026 00:30:41 +0000
Manifest this update:     Sun 25 Jan 2026 00:30:41 +0000
Manifest next update:     Sun 01 Feb 2026 00:30:41 +0000
Files and hashes:         1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: rU0FoqMgtWLvpunedYSUaVXkz+dteTwXG8NehK7MCDA=)
                          2: 008C0876148311ED856EF438C4F9AE02.roa (hash: P+roK1MWVCeuqJ3VqTzxEcvXNnpNsDkqcE1YQV3b+P8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl
                          rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744 (0x2e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9293, serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882
        Validity
            Not Before: Jan 25 00:30:41 2026 GMT
            Not After : Feb  1 00:30:41 2026 GMT
        Subject: CN=69756431-2a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:4e:0b:f6:7e:a6:a1:84:3a:89:d7:cf:11:
                    9e:f2:5d:c3:5e:5b:ae:0b:59:28:44:0c:27:83:4a:
                    4b:32:9c:29:67:bd:de:28:bc:73:1a:4a:0d:43:52:
                    61:a7:27:d8:f2:87:eb:bd:e7:a1:1e:36:46:94:3f:
                    91:0e:8b:3b:f6:27:da:db:f1:f7:31:a9:65:64:e0:
                    ed:8b:56:ee:34:d1:5d:ba:e1:43:02:0b:8a:61:8a:
                    fd:35:57:a2:82:50:76:64:07:57:48:85:d8:f9:01:
                    80:ec:43:fa:05:52:d4:15:e0:0d:2a:ba:0a:f3:16:
                    9f:97:64:36:ad:71:a1:32:7f:f1:09:c2:2b:52:41:
                    78:9d:7e:63:68:af:19:48:52:e1:18:a2:88:d8:30:
                    44:96:b5:27:4d:df:a7:a6:d9:12:c1:28:a3:1d:b9:
                    6b:7a:69:cb:e7:68:b5:9c:58:ba:b2:27:c3:56:5f:
                    12:9f:97:47:8f:0d:b0:47:87:98:da:3a:27:73:4b:
                    54:7f:34:0e:83:8e:1b:56:0b:00:f0:43:d1:2f:0f:
                    d3:fa:a2:e4:20:03:5b:49:7e:f3:e2:9a:dc:9c:0e:
                    c0:d2:98:6b:96:c8:d8:34:6c:5f:19:f5:e5:c8:a3:
                    0e:f0:6f:4e:4e:93:ef:79:bb:be:f7:1f:de:66:60:
                    e4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:04:B4:82:3B:3B:7D:62:83:5B:51:86:34:F7:F8:DC:04:85:47:6F
            X509v3 Authority Key Identifier:
                keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:64:d4:3b:12:f9:02:6e:31:a9:e9:8a:06:72:01:bc:b4:
         8e:b8:a8:b4:54:31:36:2c:22:37:0d:9e:b7:9c:7e:c8:c4:93:
         53:5b:39:d2:71:fd:0b:c4:90:20:5a:34:5d:2c:6c:73:5a:22:
         f6:6e:95:a3:94:9a:8d:bc:81:3c:14:35:e2:cf:e8:f1:5d:ae:
         84:31:ed:71:70:59:a8:20:c3:0c:ea:4b:4a:51:ec:cf:d6:35:
         31:8c:7f:ae:4c:3b:8a:b1:39:c2:6a:b2:d9:f1:50:f0:73:50:
         76:91:d4:c6:da:21:79:d6:b8:de:c1:bb:df:6e:96:0b:30:73:
         c6:04:50:00:05:59:9d:06:f0:dd:45:00:a8:9d:5b:7c:b4:a0:
         a1:4d:c4:0b:5f:41:4f:e6:1d:c3:53:48:f0:27:ae:b6:6b:b6:
         53:49:4e:c4:79:dc:cc:67:2e:15:0d:1a:55:37:97:a7:39:58:
         9f:cb:97:36:02:a8:bd:e4:e5:3d:2d:4a:2d:11:89:27:44:8a:
         fd:13:f1:6a:6a:87:35:cd:5e:e8:df:db:a8:2f:a6:74:c6:27:
         0f:3d:ae:e2:2d:4f:12:17:c4:1d:9f:55:61:5b:a9:e2:bf:ad:
         0b:ce:a9:24:d8:12:bf:52:86:32:7d:9d:06:ca:99:10:5a:a8:
         33:dd:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:51:32 2026 by rpki-client