This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
File:                     y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json)
Hash identifier:          QhlkSUqB/86Up4xIz/L0CktdGp4GP/sSdOnylmx8t0g=
Subject key identifier:   CE:45:5B:CD:37:AD:4F:D0:0B:4C:A4:38:57:EF:E0:E6:91:AD:CD:23
Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
Certificate issuer:       /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Certificate serial:       0552
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
Manifest number:          054A
Signing time:             Sat 24 Jan 2026 22:40:54 +0000
Manifest this update:     Sat 24 Jan 2026 22:40:54 +0000
Manifest next update:     Sat 31 Jan 2026 22:40:54 +0000
Files and hashes:         1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: 00dAfSvfUqyB8tTQcOXbtqraHlpvTG3XbNSlugYT9Ng=)
                          2: 004A745EDBB011F0904A453A4D641951.roa (hash: AdhWoboxvB3fE2Iwxcb6ADucdBfCgNo/P3RvBt247qE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
                          rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362 (0x552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
        Validity
            Not Before: Jan 24 22:40:54 2026 GMT
            Not After : Jan 31 22:40:54 2026 GMT
        Subject: CN=69754a76-89d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:bf:b1:67:d6:c4:c4:61:96:9a:00:a3:42:
                    5f:c4:c5:c9:48:8d:ad:00:f5:34:c3:54:e1:a9:55:
                    6a:c0:a3:4b:1e:29:0c:c0:3a:50:b6:c7:b7:37:98:
                    f0:ac:af:e6:2a:d1:35:03:ef:ee:47:64:7b:47:ad:
                    c0:06:c2:2a:6b:78:fd:28:e9:e2:e2:3d:3e:af:1d:
                    f4:85:32:3b:ea:c1:18:fb:92:d2:46:f0:69:e3:40:
                    6d:35:38:6a:ce:bc:38:4d:e1:61:fe:e1:de:e3:4b:
                    c5:7f:86:75:0c:59:79:a4:c3:1b:06:eb:94:25:09:
                    61:46:4f:34:38:22:9b:58:12:38:06:f8:d5:a6:9d:
                    eb:ee:3d:00:fd:96:01:7e:fa:5c:a7:da:ee:8c:09:
                    7d:98:e1:6c:48:96:c8:2e:11:67:ed:12:55:f9:9c:
                    0e:9e:fd:c6:91:09:05:c6:46:2a:55:af:f6:f8:99:
                    a5:4c:b8:44:3f:be:0c:90:d5:68:7f:6e:53:5b:2a:
                    d5:62:97:aa:8f:ee:b5:6a:81:bc:d3:02:7b:36:37:
                    7f:50:be:9c:36:13:56:0b:ad:46:e7:6c:db:e7:4e:
                    5d:2b:03:04:4c:4d:2b:58:34:19:f1:f7:04:82:61:
                    3c:b3:a0:9e:82:f0:f1:38:f7:05:5c:5b:23:67:ee:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:45:5B:CD:37:AD:4F:D0:0B:4C:A4:38:57:EF:E0:E6:91:AD:CD:23
            X509v3 Authority Key Identifier:
                keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:52:96:37:4b:2c:91:90:b6:31:df:77:b3:62:8a:ed:ad:
         25:d5:7e:e8:72:79:b9:ca:30:98:b6:8a:10:13:2a:af:eb:76:
         04:2a:29:d0:fb:ba:b4:61:e1:0a:86:1c:a5:2b:08:65:e7:87:
         f6:e3:a0:ab:5c:d0:c8:2d:ef:be:e5:62:32:a7:0d:17:44:18:
         b4:d9:94:16:af:86:74:1c:19:b8:f5:35:7d:a4:4f:f1:9e:4a:
         10:2f:45:8f:88:c1:00:e2:55:34:41:4d:d2:e9:43:54:11:77:
         73:38:99:38:fb:ab:d3:95:dc:18:ce:da:e4:4a:e4:ed:84:42:
         26:5f:4e:d4:2a:1b:67:bf:25:9a:d9:73:89:ab:2e:f1:23:49:
         07:45:79:b0:7a:88:af:07:e0:36:72:36:69:f8:4b:18:36:13:
         57:94:6a:41:a2:01:43:18:76:d9:63:f1:b1:0e:31:7c:6b:b1:
         77:20:6b:3d:4f:7b:63:ec:3c:ea:01:bd:6f:bd:e5:b4:ff:53:
         b8:3a:6c:68:3a:d2:26:d7:ad:7f:30:bc:1e:c3:dd:32:81:39:
         ea:2c:d6:21:bd:a0:06:ce:51:d4:ed:ae:cd:2c:a8:b7:e4:cf:
         59:df:48:c1:4d:06:1c:75:ba:32:e4:ab:0b:30:da:4a:4c:30:
         a6:c7:6c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:52 2026 by rpki-client