This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
File:                     Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft (raw, json)
Hash identifier:          J3hLjrjd2peUrjJBPnVpivx0VohNY6695dJ7b0UWu9w=
Subject key identifier:   B2:15:58:37:B3:F3:24:A4:CE:F5:48:11:31:CE:A0:23:39:31:57:B1
Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C
Certificate issuer:       /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
Certificate serial:       0665
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
Manifest number:          065B
Signing time:             Sat 24 Jan 2026 21:54:11 +0000
Manifest this update:     Sat 24 Jan 2026 21:54:10 +0000
Manifest next update:     Sat 31 Jan 2026 21:54:10 +0000
Files and hashes:         1: Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl (hash: tf/2xAVDDrjBDBJHC/BcxitVB8vmXLT/QR1Bxl1vW6s=)
                          2: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (hash: epd0cPO6XLoMNONThoYjKoYJrowDT9sNzGiBafqzZ5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl
                          rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C15F2, serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
        Validity
            Not Before: Jan 24 21:54:10 2026 GMT
            Not After : Jan 31 21:54:10 2026 GMT
        Subject: CN=69753f82-45f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:6f:a4:52:60:b6:3f:4a:f1:a4:78:b8:aa:
                    53:38:57:d5:12:65:0a:46:f9:08:62:f5:be:b8:fb:
                    e2:e9:bf:ff:e7:55:6c:00:0b:ff:b1:e8:79:f1:82:
                    e8:7b:5a:43:f5:de:c8:54:0c:b3:60:77:e5:9e:fc:
                    a6:d2:22:91:a9:41:78:f4:0c:84:59:ca:17:25:2f:
                    9d:b3:ca:67:ba:69:c9:ad:e2:66:27:a7:ab:34:39:
                    36:a4:cc:d2:34:c2:fc:64:3c:0b:86:e2:84:ed:66:
                    06:5b:ad:6f:bf:81:16:03:2e:40:50:b1:ad:e9:03:
                    73:60:54:25:74:a2:15:09:e6:35:2b:5b:01:7d:bf:
                    91:5f:b4:4f:c5:0e:d4:26:c5:a0:ea:d0:76:b1:b1:
                    d7:14:89:5b:7e:b3:ed:50:60:9d:b4:94:8d:e3:96:
                    c4:8c:8a:5e:9e:40:0f:13:b8:f0:61:fd:a3:33:eb:
                    98:fd:cd:e6:d0:45:12:6e:ca:7e:2f:d9:bb:62:8c:
                    be:97:17:80:f4:89:c3:4c:5a:1b:86:d9:a6:40:35:
                    5c:49:57:e6:87:57:94:d4:1e:c7:83:89:de:88:5c:
                    9e:73:e7:ea:45:49:b1:ca:87:b1:9e:62:b5:00:2a:
                    49:23:ff:58:f7:35:01:14:7e:cd:c2:5b:fe:a2:d4:
                    7f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:15:58:37:B3:F3:24:A4:CE:F5:48:11:31:CE:A0:23:39:31:57:B1
            X509v3 Authority Key Identifier:
                keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:37:21:b8:30:fb:be:7c:00:2e:d6:53:db:3c:a4:9f:8d:1d:
         35:25:02:c2:4a:d3:2a:0a:92:8e:ce:46:4c:95:cd:13:66:a0:
         60:31:0a:25:ae:ab:98:ed:de:ad:0e:5e:6b:48:e0:6d:d6:64:
         b3:4b:34:8d:1b:3e:fa:01:08:6e:5b:b1:3e:d1:6e:5c:6a:d3:
         a6:55:bb:be:c2:37:b4:bc:7c:8b:d1:d4:11:f8:7e:63:f7:40:
         5e:e5:d2:e7:a2:db:17:73:ea:e0:b5:f0:9f:95:3c:4a:d1:6d:
         ea:4b:b7:31:7a:53:eb:93:a6:5a:11:10:d6:eb:1f:47:f3:b2:
         0e:43:d7:ba:4c:d2:ec:dd:a2:11:f2:e5:3c:dd:7b:70:de:0d:
         da:c0:fb:cb:ea:b5:ca:fe:dd:2b:bf:50:c2:83:c4:9a:8f:59:
         58:f6:d3:23:46:20:ca:91:d4:8f:b0:d9:c6:8d:93:09:4b:25:
         91:85:71:f5:65:f1:70:57:ed:65:01:85:f9:b5:1b:78:8b:39:
         8d:5e:c6:c5:96:f2:4f:50:62:6f:26:74:74:64:61:2d:55:7d:
         0d:af:69:00:d0:45:68:7e:cf:75:cc:76:37:cf:48:b2:2a:73:
         ef:b5:7e:f3:b1:be:44:1f:fa:df:1d:0e:63:03:7d:ce:b7:23:
         13:cc:0d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:36 2026 by rpki-client