This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File:                     2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier:          QxEVUDO/g9CNzdxwznOSknXU9zXfq/xL4pOsD4JF8iU=
Subject key identifier:   B8:D0:CE:33:6D:41:64:CE:AD:E7:2E:42:95:DB:ED:89:5D:4D:82:6C
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer:       /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number:          03
Signing time:             Fri 23 Jan 2026 07:12:29 +0000
Manifest this update:     Fri 23 Jan 2026 07:12:29 +0000
Manifest next update:     Fri 30 Jan 2026 07:12:29 +0000
Files and hashes:         1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: h34bVQAPJ+qNpDvJHmASWiL5Ny04NklUG+rw4hXy39U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
                          rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
        Validity
            Not Before: Jan 23 07:12:29 2026 GMT
            Not After : Jan 30 07:12:29 2026 GMT
        Subject: CN=69731f5d-9418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:13:cd:4e:60:f5:0d:31:93:ba:4b:d3:1a:
                    f1:4e:cb:2c:e5:a9:be:fd:82:36:a2:7a:c4:81:5a:
                    65:60:0f:52:21:44:bb:03:9a:b8:89:04:e5:25:b7:
                    7d:29:a6:cd:14:55:44:83:aa:4a:be:f5:84:c5:f5:
                    d6:01:74:15:24:23:5b:14:6f:96:ec:e9:44:d7:76:
                    52:73:05:37:40:d7:9f:00:ca:6a:cc:10:bc:31:dc:
                    50:de:71:a5:72:b9:6b:c5:f5:1b:28:ea:cb:76:b7:
                    b5:69:ab:23:57:9e:18:07:e5:87:31:97:04:8c:23:
                    93:77:0c:61:30:e0:48:82:31:93:ee:a7:d3:10:23:
                    70:fd:41:5a:0b:9e:8b:55:6d:6b:3f:cf:32:24:b2:
                    3c:6f:06:3a:01:b2:9c:ee:d3:15:93:ac:fc:94:f6:
                    ce:44:f5:99:b9:c4:03:bc:10:78:f1:17:62:b2:5c:
                    70:f9:40:82:0b:95:dc:0b:c1:72:ac:ee:d4:3f:c7:
                    56:f3:29:cb:72:08:57:1b:84:a9:10:1d:17:bd:7e:
                    4b:ef:3d:d6:1c:5f:28:53:76:c0:ab:f0:e0:f3:f4:
                    56:ae:11:90:05:64:82:93:32:74:98:22:2f:fe:43:
                    cf:9f:3d:3f:d6:84:bf:32:25:a5:67:f1:ee:59:90:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D0:CE:33:6D:41:64:CE:AD:E7:2E:42:95:DB:ED:89:5D:4D:82:6C
            X509v3 Authority Key Identifier:
                keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3d:cd:1c:b7:55:81:b5:8c:aa:19:00:6a:2d:60:72:7d:b4:
         5f:28:d4:18:99:92:d7:a3:19:6f:09:cd:54:64:74:5d:22:65:
         83:a3:0b:31:e5:46:dd:21:e2:a9:29:e3:4b:f2:f7:fc:d8:21:
         2a:3d:99:05:a1:71:ad:04:51:e8:cc:2b:c1:df:93:87:41:f1:
         e5:32:03:8a:11:4c:d0:d9:6b:27:ca:4c:5b:71:7d:fd:8e:00:
         61:b7:4f:e3:37:02:af:2f:66:55:7d:58:f0:f3:cd:a0:ce:5a:
         9a:de:e5:2d:97:56:d0:53:c6:46:dc:09:2a:d8:04:9e:69:b7:
         57:f9:68:24:1a:8f:40:e1:0c:0e:ff:24:f4:90:c1:22:19:26:
         be:38:eb:4f:0d:3f:e4:5b:cf:92:4c:82:c8:45:89:0d:ba:6a:
         ed:9b:68:67:b3:88:69:89:65:62:8c:4e:27:e6:19:31:1d:4e:
         e2:b0:00:5f:ba:18:1c:eb:b4:3c:17:dd:f9:d8:3c:01:f2:34:
         7b:f9:6f:c8:d3:05:be:f8:ef:6f:90:07:0e:e8:b2:ba:68:11:
         04:70:77:d9:fb:04:b7:b3:08:ec:d0:95:63:80:5b:54:e0:99:
         69:71:00:2e:ad:41:bb:02:1f:e0:27:7d:c6:01:79:b2:4c:11:
         cc:15:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:55:29 2026 by rpki-client