This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
File:                     yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json)
Hash identifier:          FWozFJLBA42lTh0u2xcgCLNGe26GH5QOFlMjrcoXf6w=
Subject key identifier:   BF:2C:B5:0E:50:28:45:B1:DE:EE:BD:7E:82:EA:6B:41:D5:19:97:C6
Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
Certificate issuer:       /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Certificate serial:       0DDF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
Manifest number:          0DCA
Signing time:             Sat 24 Jan 2026 17:32:50 +0000
Manifest this update:     Sat 24 Jan 2026 17:32:49 +0000
Manifest next update:     Sat 31 Jan 2026 17:32:49 +0000
Files and hashes:         1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: 0sgiwgVNbLHzW4t4w6U1HDLxTDBauZOEdkfNCOuHKSE=)
                          2: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: sy4Su4ASjc+OqwWE5jPxA/U7NJeDsxDapY34Q7SzDAE=)
                          3: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: h9Ek+uVHJkd43jpvXLhIeId4TZWOhn+0W2MAspUZuOw=)
                          4: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: +QLq15+GCrbTMv3T/U18UwN/WHFJnfWgXMxuf5yq0ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3551 (0xddf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
        Validity
            Not Before: Jan 24 17:32:49 2026 GMT
            Not After : Jan 31 17:32:49 2026 GMT
        Subject: CN=69750242-50f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:a8:00:20:cf:ec:68:2f:03:a2:e7:93:ef:
                    96:62:71:49:72:c8:c3:0b:24:f7:cd:87:37:d6:e6:
                    5f:2c:29:84:44:4f:32:19:f6:50:c0:74:f3:30:c9:
                    42:f6:2f:78:82:b9:4c:7e:e7:1a:65:50:4e:8e:e3:
                    a9:90:5c:3f:2c:a8:77:cb:39:b3:37:06:42:09:f9:
                    9f:2f:5f:fc:5a:96:fb:14:e1:07:1e:1b:49:50:0c:
                    cb:fe:db:68:29:2b:a7:79:2d:e6:b1:46:29:bf:f5:
                    06:2b:ba:59:79:a6:c0:0f:dc:19:3c:ec:ad:a7:01:
                    81:ae:c7:d1:9c:7e:d1:16:52:9a:59:41:4f:9f:1e:
                    f3:05:f2:fb:5b:76:eb:f8:5e:15:90:5b:2e:85:89:
                    16:5d:e0:32:16:2c:e4:19:79:d1:ab:8f:53:94:c3:
                    f9:dc:ab:39:e1:4b:ae:f2:9e:6e:69:83:58:80:a3:
                    c1:f8:4e:f9:8e:2d:a6:81:53:2d:97:8f:77:19:2e:
                    46:58:4c:59:55:49:c9:27:35:80:3e:02:e4:f4:f7:
                    0f:de:a7:dd:cb:77:db:d7:87:cc:b6:6e:fe:2a:2c:
                    0f:1e:ea:ef:b6:cf:45:ff:10:f3:bf:74:20:f4:f8:
                    ae:95:b2:1b:f3:a2:51:e5:9d:36:44:a7:30:c1:96:
                    13:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2C:B5:0E:50:28:45:B1:DE:EE:BD:7E:82:EA:6B:41:D5:19:97:C6
            X509v3 Authority Key Identifier:
                keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cf:db:44:7b:1a:6e:da:01:33:d2:26:62:f2:92:ca:4f:97:
         7e:99:61:38:cb:1a:44:8c:40:84:42:36:b7:80:e6:92:f0:3b:
         6e:dc:8c:3e:58:32:69:f1:1f:e5:cd:ef:ea:ab:34:7d:f1:50:
         6d:7f:e0:f4:19:d1:67:80:06:7e:99:62:d8:ff:ff:09:ef:25:
         5f:3d:ff:93:e0:4c:ec:d0:44:5d:5b:d6:15:83:5a:2e:fa:6f:
         41:eb:4b:28:4e:04:c7:7b:52:53:d4:25:d9:c3:a3:05:df:a0:
         28:fb:f4:c1:59:1f:2c:4c:ec:a2:8e:75:d2:6f:b6:c1:ba:b5:
         75:69:5e:60:75:ec:e0:38:7a:d3:10:3e:e8:c4:6c:55:8e:0e:
         a0:a5:93:fc:9a:0d:2f:34:7d:df:d7:e0:be:11:0d:76:14:90:
         a4:74:2d:da:ce:84:97:0f:31:7a:ee:de:3a:57:d9:bb:07:96:
         df:61:57:98:81:2c:47:3f:43:8d:6d:17:ab:52:d2:88:17:fa:
         31:02:a5:78:d8:cd:a5:a8:aa:bd:24:21:aa:c8:41:95:d5:5b:
         9d:cd:74:8a:c1:a8:e0:10:37:59:c8:29:c8:30:fc:cb:67:c7:
         ed:1f:e4:ba:22:ae:27:8e:a9:41:58:ec:f6:d8:85:a2:ff:e1:
         bc:32:48:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:21:07 2026 by rpki-client