This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
File:                     yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json)
Hash identifier:          Wf2Lke9KYV6E6fsc29bBkKJ6hg+R2ZPm06PIOxxvnO4=
Subject key identifier:   60:52:82:B8:37:4A:E7:DA:ED:80:49:A7:D1:4C:A9:5B:8F:AC:28:1A
Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
Certificate issuer:       /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Certificate serial:       0A1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
Manifest number:          0A15
Signing time:             Sat 24 Jan 2026 19:15:17 +0000
Manifest this update:     Sat 24 Jan 2026 19:15:17 +0000
Manifest next update:     Sat 31 Jan 2026 19:15:17 +0000
Files and hashes:         1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: /bovlNE1x7nfzwPTnd/VUn/Ntasvzm1Bc1BNODHZkd4=)
                          2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: 2eavA5MnM8j9MsEorxYmL8jVbA9inLFPJYXoSo6cKDw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
                          rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2588 (0xa1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
        Validity
            Not Before: Jan 24 19:15:17 2026 GMT
            Not After : Jan 31 19:15:17 2026 GMT
        Subject: CN=69751a45-0813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cb:b3:44:63:b8:34:42:db:1c:37:4e:68:fc:
                    1e:63:9b:37:22:3c:c3:7b:d9:e2:ac:9f:e0:26:45:
                    86:e9:b4:00:3e:b0:e9:9a:40:33:47:46:4d:bb:7a:
                    65:b1:53:c1:cc:43:dd:ab:b3:d6:9d:94:2d:6a:0f:
                    3c:f9:c5:98:80:7d:14:f0:39:91:9c:57:8f:d0:3e:
                    7d:a2:1e:90:01:f1:ec:72:06:f5:6a:95:39:3e:52:
                    f6:3b:18:a5:f9:55:12:45:0c:dc:bf:06:22:23:a9:
                    9e:7a:45:5e:c9:c2:3e:f7:63:82:4a:50:eb:4e:f4:
                    4b:e1:cf:d2:5b:ec:94:3e:2a:9f:21:2e:89:2e:1d:
                    0a:12:2d:50:a9:80:ea:9b:2d:d6:f1:a4:d4:8e:a7:
                    04:18:e2:9b:57:46:5b:56:1d:c6:da:26:29:4c:ab:
                    ec:bf:d3:0c:f7:f0:c5:3c:57:53:ce:8b:c8:17:3d:
                    86:76:ca:cd:65:68:a6:31:4a:89:bb:ac:7d:cb:af:
                    15:2f:e7:25:81:c2:b2:76:82:f8:a3:c1:07:a5:c4:
                    5a:4c:86:3a:9a:cb:4c:7f:8d:91:4b:bd:e5:09:1d:
                    82:87:5e:5a:bc:8d:49:41:23:e7:8d:39:ab:99:ee:
                    bd:ad:ca:c3:06:e1:86:af:43:34:b7:e6:5e:ec:6c:
                    13:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:52:82:B8:37:4A:E7:DA:ED:80:49:A7:D1:4C:A9:5B:8F:AC:28:1A
            X509v3 Authority Key Identifier:
                keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6a:62:86:fe:4f:92:e3:56:4f:30:44:b1:3d:3f:3b:90:74:
         c2:95:8a:fc:62:ee:7c:cd:d4:ad:f7:2c:46:2f:7b:33:2c:5b:
         ad:59:81:6f:62:07:02:c0:eb:85:a1:ae:b8:89:23:4a:53:ae:
         f7:10:05:49:7d:b5:a1:ff:af:8a:67:2f:34:4d:9a:0d:61:cc:
         78:8a:a7:e7:4d:fd:67:2e:f6:8c:ae:b1:fd:12:3e:f3:37:54:
         c3:1c:68:b4:ba:85:1c:22:8d:c6:26:dc:84:1f:9b:91:73:56:
         4f:1c:b8:82:50:77:69:ce:db:1e:d4:9c:c8:5f:f4:51:e6:9c:
         a4:53:5a:3a:5d:ad:13:e0:04:a5:49:d3:ac:a9:22:7e:0e:d8:
         97:f1:25:98:a9:4d:ac:3c:3a:cb:03:79:85:56:00:3a:08:fa:
         b9:d7:13:5a:cd:15:6c:1c:26:08:45:bf:e7:b3:e3:ba:09:50:
         c5:69:ec:19:0f:3a:64:4e:73:c6:c9:b5:84:e0:c9:3b:1f:ad:
         4d:a4:8d:fa:2b:0d:de:43:4a:43:a8:75:04:63:cc:fa:f3:ec:
         9a:5d:bf:1e:8a:6e:38:b5:6d:84:9b:37:1b:61:b9:b0:13:14:
         b3:b0:0a:93:73:09:4f:fa:03:4f:23:64:0f:fe:8b:07:3e:7f:
         e4:b3:9b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:20 2026 by rpki-client