This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
File:                     YB71rSfD3A1NmC22u0dsBsvHAKA.mft (raw, json)
Hash identifier:          Jn2OgGs+T3diPEXQkzi32gfR6m0Wp+tMEgyfm3fJ16A=
Subject key identifier:   A6:6E:99:6F:1A:AD:32:D0:20:4F:05:CB:54:99:CC:C2:66:16:5F:D9
Authority key identifier: 60:1E:F5:AD:27:C3:DC:0D:4D:98:2D:B6:BB:47:6C:06:CB:C7:00:A0
Certificate issuer:       /CN=A91BFE4E/serialNumber=601EF5AD27C3DC0D4D982DB6BB476C06CBC700A0
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
Manifest number:          F9
Signing time:             Sun 25 Jan 2026 04:25:35 +0000
Manifest this update:     Sun 25 Jan 2026 04:25:34 +0000
Manifest next update:     Sun 01 Feb 2026 04:25:34 +0000
Files and hashes:         1: YB71rSfD3A1NmC22u0dsBsvHAKA.crl (hash: DjPy/kY7JtpPUyNxHGxJuwg41M03BEjthMMcUUq7JOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE4E, serialNumber=601EF5AD27C3DC0D4D982DB6BB476C06CBC700A0
        Validity
            Not Before: Jan 25 04:25:34 2026 GMT
            Not After : Feb  1 04:25:34 2026 GMT
        Subject: CN=69759b3f-3d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1d:a2:75:81:30:2c:20:20:04:89:ed:5a:e0:
                    d4:eb:bf:56:ea:70:d7:07:60:34:e4:75:10:9f:05:
                    e8:4e:2d:c2:ad:c8:7b:b6:79:3f:38:fe:ee:02:1d:
                    44:17:59:cc:56:46:3d:06:1c:b4:d4:33:e6:1d:c0:
                    e3:bd:84:47:44:6b:a7:8c:e4:85:3b:0e:d6:7b:49:
                    67:5e:92:c2:d7:80:73:ea:db:8f:b8:a2:b4:42:ba:
                    19:13:20:d2:b8:77:7e:75:e4:2d:f6:f8:f1:d0:98:
                    79:c0:d8:93:a9:ac:94:9c:da:d0:75:21:64:92:8e:
                    f3:d2:04:5e:dd:70:0a:2a:b7:72:77:9e:04:61:62:
                    d8:36:1a:fb:2f:2b:2a:53:a2:4b:d7:87:51:ec:12:
                    e7:5f:76:f0:6c:da:8e:4b:cb:ba:d2:33:68:06:45:
                    44:4c:3a:fb:88:00:66:6a:12:ff:e9:56:9a:bd:c2:
                    90:23:7c:6d:3d:bd:b2:05:75:b8:54:77:56:53:27:
                    e3:ed:59:5f:81:93:47:f8:50:47:1a:ee:39:ba:50:
                    44:bb:01:e8:b0:43:a3:60:a9:21:cf:f8:bf:39:5f:
                    45:17:c6:84:31:a8:1f:82:92:67:5d:8b:cb:20:80:
                    00:90:29:80:2a:3a:ec:2c:72:e0:94:0a:f3:13:f8:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:99:6F:1A:AD:32:D0:20:4F:05:CB:54:99:CC:C2:66:16:5F:D9
            X509v3 Authority Key Identifier:
                keyid:60:1E:F5:AD:27:C3:DC:0D:4D:98:2D:B6:BB:47:6C:06:CB:C7:00:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB71rSfD3A1NmC22u0dsBsvHAKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/DA3D71A87BE311EF88D9C753C4F9AE02/YB71rSfD3A1NmC22u0dsBsvHAKA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0a:c3:7a:64:15:dd:a8:68:7b:56:54:19:27:f1:bb:4c:42:
         52:3b:eb:5b:b1:13:32:ec:20:d8:a5:de:ec:4f:2a:96:e8:14:
         a0:74:43:9b:c6:f2:a6:c7:6c:8c:ff:4f:59:2f:29:a7:d7:69:
         36:ce:b9:1d:57:f8:f0:72:e6:79:44:b1:8c:14:ac:3d:7d:93:
         19:6f:48:53:54:70:72:ab:d6:25:25:40:e2:38:99:18:bc:79:
         b3:85:bd:96:d2:0a:30:7a:42:c0:3f:13:31:b4:29:99:c7:61:
         ee:42:63:b3:74:f0:a1:c2:98:ed:54:c9:64:84:8c:f7:2f:6f:
         d5:54:df:be:9d:82:d7:f2:c2:28:c4:0f:10:4d:51:c5:e7:33:
         13:a3:db:53:47:9b:1c:67:fd:a5:a1:9d:fe:67:8e:e7:9d:bc:
         dc:3f:71:1a:c0:d9:f0:bb:35:cf:aa:fb:b6:70:76:5a:fb:26:
         c3:d7:03:cc:1f:17:cb:b4:a1:4d:59:84:5a:fb:e7:bd:2d:71:
         db:d5:a3:b5:df:b0:1f:fc:85:99:da:ad:3f:2a:cd:83:5d:b8:
         b9:26:51:6c:fc:62:28:2e:44:c3:b6:d4:61:bd:56:7d:de:96:
         e1:97:15:2a:3e:ad:99:55:11:28:70:c0:82:0f:83:f6:36:b1:
         7e:a5:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:45:21 2026 by rpki-client