This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
File:                     hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json)
Hash identifier:          VjVpI0zasjZNKLuV24CxYIeUw0loOEA+crsHBAaPIuU=
Subject key identifier:   10:D1:A1:DE:6F:D7:7D:70:CF:86:9A:6D:05:B8:FF:4F:AF:38:77:3A
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Certificate issuer:       /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
Manifest number:          0F
Signing time:             Fri 23 Jan 2026 07:03:55 +0000
Manifest this update:     Fri 23 Jan 2026 07:03:54 +0000
Manifest next update:     Fri 30 Jan 2026 07:03:54 +0000
Files and hashes:         1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: VIwaEdnvqsqMFOsyzPWtZYFIZi0VAuyU85aTRVCr5hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
        Validity
            Not Before: Jan 23 07:03:54 2026 GMT
            Not After : Jan 30 07:03:54 2026 GMT
        Subject: CN=69731d5a-3ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:54:6f:0c:55:92:41:2b:e0:47:d3:d1:b7:
                    68:c4:06:6d:29:9a:b0:f7:5f:20:94:d0:15:26:ab:
                    ec:9a:88:e5:75:47:cc:81:44:ff:6b:71:40:b3:d0:
                    12:22:86:76:fe:86:83:02:f8:38:56:88:a1:83:5b:
                    94:a4:85:e4:38:6d:d1:8c:1e:27:5f:d2:ed:42:97:
                    26:c6:03:a6:13:4c:3d:f4:40:9e:08:bd:5c:0d:ba:
                    38:34:33:9d:87:be:8d:04:cb:c9:ac:ac:17:d6:27:
                    37:01:20:55:3a:74:51:b6:e6:8f:58:92:3c:6b:71:
                    54:dd:a1:3f:82:4e:71:0a:48:44:41:c5:24:17:d3:
                    43:25:5e:bf:48:7a:10:f2:88:c4:c7:f5:e4:04:6a:
                    e3:d0:fc:a4:e7:f9:33:8d:01:ad:77:dc:0f:68:13:
                    29:68:59:56:08:f4:d4:8a:67:02:23:4e:ef:1c:24:
                    74:3b:29:b3:35:3f:68:7d:10:6f:fe:f7:64:b5:6a:
                    e1:18:ae:82:d8:44:f8:54:13:7b:d7:e7:ca:d9:c9:
                    ae:c4:e0:25:bd:a6:c9:1e:04:b4:27:fb:32:31:5a:
                    e6:82:75:1a:d0:ad:e0:2a:fd:81:11:f1:51:50:29:
                    83:52:28:a5:7b:7d:4b:ab:c1:b9:ff:e3:1c:bb:fb:
                    3c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D1:A1:DE:6F:D7:7D:70:CF:86:9A:6D:05:B8:FF:4F:AF:38:77:3A
            X509v3 Authority Key Identifier:
                keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0e:49:ce:93:dd:c7:61:cb:55:2a:78:4f:8d:76:a1:31:a1:
         1b:9b:82:b0:b4:18:dc:da:33:9f:9e:d6:dc:b8:b5:61:54:3b:
         0d:25:b5:87:bf:1b:e2:58:86:ee:5e:ca:a0:ad:f1:06:7a:66:
         22:6d:75:37:79:02:eb:d1:c3:e0:3b:de:36:38:02:de:9f:df:
         07:07:aa:a9:c3:9e:20:a2:ad:a1:47:ba:57:47:3a:fc:16:60:
         1a:e1:d4:ff:c5:4c:3e:a1:c2:82:fc:5d:f2:d1:55:c7:e4:c7:
         3f:33:15:7a:b6:71:39:77:82:23:16:17:65:fe:91:97:26:62:
         91:73:a6:b3:ff:59:31:1a:90:1e:c0:35:3a:78:6d:9b:35:70:
         37:cb:85:e1:3e:77:16:be:0c:e8:e4:d1:bc:86:79:df:2d:41:
         a0:48:7f:85:29:9f:55:c6:8a:49:90:5a:ac:af:fb:0f:08:0f:
         bf:90:c9:1c:40:cc:07:f8:f6:18:15:87:d4:f4:49:f5:57:5d:
         8d:55:99:4b:03:f2:92:5d:70:6b:e1:f9:42:97:03:2d:05:8a:
         0e:c7:98:ae:3e:fa:28:37:e1:e1:23:04:1a:36:98:02:b0:f7:
         d0:74:db:de:f6:f0:6a:97:a1:01:0b:d8:96:83:21:d3:88:d5:
         cc:c8:f7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:35 2026 by rpki-client