This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
File:                     u99YzWESke9boarLayzE7VCwEVc.mft (raw, json)
Hash identifier:          Q0kqPnhCKpoDsf+aWLyx1hByzr1SkZAJqOniXTzHcK0=
Subject key identifier:   3C:95:89:0C:3D:30:5E:79:31:92:52:31:44:BB:00:2D:CA:10:1D:F8
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Certificate issuer:       /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial:       04AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
Manifest number:          0491
Signing time:             Sat 24 Jan 2026 23:17:28 +0000
Manifest this update:     Sat 24 Jan 2026 23:17:28 +0000
Manifest next update:     Sat 31 Jan 2026 23:17:28 +0000
Files and hashes:         1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: we/TqYDI2R+YLK7akSR6ODhemfJFQT37FCQAMoNcsBY=)
                          2: 08241A166B1111EE99759439C4F9AE02.roa (hash: ySASg3k7OY7oJkXL5Ws/83THPGLSCp+zucNat555hyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
                          rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194 (0x4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D46FD, serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
        Validity
            Not Before: Jan 24 23:17:28 2026 GMT
            Not After : Jan 31 23:17:28 2026 GMT
        Subject: CN=69755308-74d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:00:92:8a:ed:7e:f7:49:bb:bf:8b:0e:ee:
                    e4:44:71:4e:2e:66:c0:45:1e:ac:e1:9d:8d:1d:06:
                    30:89:ff:11:29:1b:59:52:7d:a4:1a:29:fe:35:51:
                    35:f6:ec:28:2f:de:bd:dc:69:12:99:93:b8:70:d2:
                    38:90:1c:1d:5d:22:ef:40:e6:12:81:7a:f5:15:81:
                    e6:3b:eb:f7:d9:59:e8:74:50:1a:35:f6:37:9a:2e:
                    05:ff:e4:94:9a:7a:30:92:15:b9:99:35:70:38:35:
                    cf:7c:1f:9b:66:cf:6b:69:7e:8f:79:be:ed:49:e2:
                    e7:43:56:90:79:56:a9:46:45:6c:c1:0d:e6:d8:44:
                    30:88:f5:14:91:1a:84:ba:73:11:fb:8a:fe:6f:59:
                    e0:8c:8e:d3:ca:3d:c9:20:61:08:93:ad:a4:8e:ca:
                    fc:60:75:63:90:c9:36:16:e3:11:c5:73:3b:50:2e:
                    16:b5:ed:f2:cf:38:3a:4c:37:53:b5:9f:a9:59:5a:
                    22:33:db:64:59:20:42:1e:53:e9:84:09:90:48:1d:
                    d8:62:63:11:ab:71:93:a2:1f:d0:89:bf:31:b0:1c:
                    22:81:54:65:02:cd:6e:b2:b8:22:82:a5:fb:6f:14:
                    9e:5f:e1:84:b2:a7:0f:47:79:c6:9e:0c:f7:ad:db:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:95:89:0C:3D:30:5E:79:31:92:52:31:44:BB:00:2D:CA:10:1D:F8
            X509v3 Authority Key Identifier:
                keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:06:79:c5:8d:3d:d3:e4:0d:6d:2b:7a:b4:f7:30:dd:5a:ad:
         89:14:45:9a:24:07:fa:79:94:29:7e:df:3b:1e:94:96:fd:9a:
         11:b8:48:3e:62:75:aa:41:b8:02:9e:76:bd:b9:b3:c2:ad:93:
         d5:a5:f1:d5:05:bb:54:e1:75:3e:a5:c9:30:7b:d3:73:91:eb:
         5d:83:6a:c7:8b:e7:1c:2c:ee:36:47:7e:bb:5b:7c:b4:77:32:
         47:f1:a5:ac:e1:e8:22:a7:94:7b:24:54:2e:ea:20:8e:19:76:
         33:aa:fc:51:7e:a3:2e:2b:0c:37:24:42:03:3d:85:31:ea:81:
         c1:ef:7e:d4:cd:14:30:3a:de:28:2c:e8:90:5e:35:b0:6a:32:
         78:eb:70:53:f5:d8:4e:e2:ca:53:f9:6a:2d:dc:2b:d1:c7:98:
         91:e7:17:ce:66:7a:50:42:ed:cc:7b:09:60:22:10:d3:a1:1f:
         d2:5f:63:a1:aa:d5:99:d9:dc:f3:92:7b:ed:62:2b:a6:1b:59:
         ba:61:72:c3:00:d1:d7:27:b0:bd:0f:6a:90:45:0f:da:5a:fc:
         c8:73:44:64:47:cf:49:89:4c:2d:5f:45:85:3d:cf:cf:59:a3:
         a4:8f:16:a7:9f:89:dc:b7:7b:e1:0d:be:cf:ef:74:45:81:39:
         90:9c:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:33 2026 by rpki-client