This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft
File:                     y1McHsaSJfDcrkTOyl41mAzpwPI.mft (raw, json)
Hash identifier:          2nPxvfCbHjTrS3x4hyCQGBHQmkNr5pftLi6rdVs9Nwc=
Subject key identifier:   FC:B2:D1:9C:CF:88:FB:04:B7:4C:25:81:89:D4:06:1F:DE:37:D7:F7
Authority key identifier: CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2
Certificate issuer:       /CN=A91CFFCB/serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft
Manifest number:          79
Signing time:             Sun 25 Jan 2026 05:54:49 +0000
Manifest this update:     Sun 25 Jan 2026 05:54:48 +0000
Manifest next update:     Sun 01 Feb 2026 05:54:48 +0000
Files and hashes:         1: y1McHsaSJfDcrkTOyl41mAzpwPI.crl (hash: rV3WLgBMq1dAsQJIQnQTVUKVIAMQ+QbF412TSEHMqY4=)
                          2: BB8F3118497B11F096DCA14EC4F9AE02.roa (hash: n0pGyYXueEy9F7Jw89IAbICySxf38MqDCZugETeFEBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFCB, serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2
        Validity
            Not Before: Jan 25 05:54:48 2026 GMT
            Not After : Feb  1 05:54:48 2026 GMT
        Subject: CN=6975b029-2c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:40:e5:63:37:6b:99:f6:1e:8c:d6:b6:d4:
                    a1:4c:d8:e1:e6:5a:b0:18:4b:b9:89:d7:59:be:14:
                    de:d4:60:be:74:fb:73:3a:22:5b:cc:0e:44:bc:3e:
                    29:00:94:69:d4:59:d2:85:02:7e:cd:0e:ba:fc:c0:
                    25:43:9c:a0:e0:c3:41:3b:7b:9d:0a:50:cf:fc:e3:
                    7f:3a:2e:61:c2:03:fa:16:24:2d:e8:99:ad:fd:4e:
                    ef:2b:31:86:d8:d7:20:d5:38:a4:49:6c:78:d2:d1:
                    b1:11:07:b4:f8:46:5c:bf:f7:0f:3b:be:18:49:9f:
                    fd:ac:1b:44:2f:16:a6:01:41:0d:26:7a:3e:bb:c2:
                    b0:cf:ad:ff:1e:20:42:8f:a0:9e:a3:8f:72:d9:82:
                    0d:9b:3c:8e:93:7f:a1:02:35:5c:d6:4c:a6:4f:a2:
                    cb:3d:de:e3:8e:21:fd:5d:c8:eb:53:82:fc:9a:c3:
                    64:8f:ba:34:5d:bb:13:26:10:18:eb:6d:0d:94:b4:
                    13:bb:f6:76:9f:c7:69:a5:8f:4e:ff:de:ba:a4:3c:
                    b6:73:f9:29:0e:73:94:c3:64:b3:51:66:bb:cf:66:
                    03:f3:6e:e1:79:f9:3f:cb:ee:b6:ce:bc:82:b6:6f:
                    c2:cd:6d:8d:42:d8:b6:28:74:aa:5b:1f:57:65:9c:
                    9d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B2:D1:9C:CF:88:FB:04:B7:4C:25:81:89:D4:06:1F:DE:37:D7:F7
            X509v3 Authority Key Identifier:
                keyid:CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d4:06:54:ca:21:56:10:c4:bc:71:e1:93:ac:73:9a:67:52:
         1d:8b:8b:d9:9d:0c:b8:7a:5c:4c:8b:4a:35:62:ba:85:9d:96:
         c2:9a:e6:f7:0f:c2:46:0a:d7:64:c7:65:15:e3:92:cb:45:52:
         5e:2e:00:a3:38:2f:53:9f:dc:0f:bb:29:29:5f:74:48:93:bf:
         14:ed:01:a1:43:5b:a2:20:e6:4f:65:e7:41:ee:a8:05:a5:70:
         23:97:41:01:62:b5:6f:36:db:0a:32:ff:3b:02:57:17:3e:b4:
         73:27:27:8e:2d:ae:d4:6a:3e:9e:f1:8d:b2:37:5a:a9:54:55:
         35:b5:af:ac:ac:03:39:27:4d:07:ef:13:80:7b:f2:bb:49:32:
         03:f7:ae:6a:ed:24:75:fa:af:fa:6a:fc:37:3d:4e:db:d9:75:
         e6:b0:9f:ac:66:a7:d7:ca:ef:c5:63:03:17:67:b6:4e:51:fd:
         62:91:06:19:a7:cd:2b:f9:25:30:9c:3e:44:f2:28:a7:4c:bd:
         ca:2c:c7:cd:9c:08:3f:b0:7e:0d:b2:b5:c4:c7:97:18:6f:33:
         6a:20:c3:d7:7a:ee:8b:6f:5d:74:55:9b:0b:2d:9a:76:f9:39:
         1d:86:10:0e:e4:6a:76:24:58:0b:0a:17:5b:69:01:85:2a:0a:
         76:96:9e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:31:13 2026 by rpki-client