This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
File:                     Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft (raw, json)
Hash identifier:          dj9PoZNKFr9ExsLFosBASrqXdlY0MhSKfm1zROltQQk=
Subject key identifier:   B8:42:A7:63:F0:1F:D3:58:AB:E0:25:35:87:1E:52:E5:31:1C:C8:9B
Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
Certificate issuer:       /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
Manifest number:          50
Signing time:             Sun 25 Jan 2026 06:20:22 +0000
Manifest this update:     Sun 25 Jan 2026 06:20:22 +0000
Manifest next update:     Sun 01 Feb 2026 06:20:22 +0000
Files and hashes:         1: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl (hash: TS4Eo4zZvHr9n1BG1lZHUhA6txwJCoOAJJtqlPh9N6I=)
                          2: 4EC550229F7911F0892F6680C4F9AE02.roa (hash: 8V07zUVOskE1wa+gVr+yuKqZDgrgYU/QSi8IILKEhL0=)
                          3: 3A4C99D49F7911F08FC08A7FC4F9AE02.roa (hash: hzN1fw40guW51CNb+UZLqljQGspAiSfGnAzMh1uOZu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
        Validity
            Not Before: Jan 25 06:20:22 2026 GMT
            Not After : Feb  1 06:20:22 2026 GMT
        Subject: CN=6975b626-4761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:f0:1d:08:e2:fe:e3:6e:e9:98:d1:a1:10:
                    f8:63:52:a4:bd:9f:93:d9:cf:3e:93:24:cc:25:56:
                    82:2f:12:a9:b1:70:7d:41:fc:c9:5c:99:af:a2:ac:
                    50:f6:17:56:23:8d:14:54:35:8b:5e:6b:3e:57:e9:
                    dc:43:a4:a2:e4:b9:4b:7c:f6:ab:dc:74:2f:8e:9f:
                    6f:2e:17:13:a5:2e:a0:93:bb:29:bd:3c:97:8f:81:
                    d6:e5:15:1d:bd:73:d0:ae:12:9a:47:79:ea:1c:23:
                    fe:02:9e:af:86:a8:71:73:d3:cd:5b:6f:90:fe:7c:
                    5c:cf:f4:2d:07:01:9f:5a:1c:cd:8d:89:a8:c9:43:
                    27:30:f0:82:81:9b:f2:ee:bf:95:67:43:55:37:ec:
                    09:9b:2f:24:73:40:f4:8c:09:39:5a:42:59:cb:7b:
                    70:41:8f:e3:90:b3:f7:63:88:b3:8c:fe:4c:f9:18:
                    0a:70:cd:ed:0a:ae:75:30:80:45:9d:47:db:ec:76:
                    a4:a2:56:5f:e5:c1:72:72:8a:60:45:e4:55:86:5e:
                    2a:f8:1c:75:eb:0a:8e:a5:4b:9f:f5:9d:0f:c1:75:
                    0d:c5:dd:66:15:6a:84:6c:75:fa:5b:9b:7b:4e:c7:
                    d4:2c:19:61:58:12:7a:54:56:e5:aa:1d:eb:ba:ca:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:42:A7:63:F0:1F:D3:58:AB:E0:25:35:87:1E:52:E5:31:1C:C8:9B
            X509v3 Authority Key Identifier:
                keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:70:8e:7f:d5:71:b5:89:cb:c8:04:30:19:db:a0:e8:76:6a:
         a2:90:08:cf:fa:a8:4c:6c:3c:66:b5:0d:c6:d8:4f:f6:25:89:
         6e:5b:1a:c2:c9:01:e3:20:44:f7:4e:63:fc:b0:0c:36:38:ef:
         38:43:d0:f7:bd:d5:66:b6:cb:96:d5:4f:2f:ea:1c:61:02:1a:
         c1:94:b3:8d:01:87:3e:a4:e3:1f:62:81:d8:a6:7a:13:48:7a:
         82:8a:b5:88:b6:e4:b1:9e:93:77:95:ab:d1:38:7c:cb:1e:00:
         bb:7e:6b:c8:ca:56:0b:2a:94:ff:d2:8f:ba:11:ac:b4:3b:e0:
         ab:46:49:3e:0c:3a:5d:db:a7:89:ee:cd:62:64:59:a9:fd:d1:
         34:1f:50:fe:be:2d:df:d1:51:08:45:a9:0e:23:25:fb:a6:96:
         8b:dc:2a:62:28:4f:05:fb:f6:a9:c5:55:c8:90:55:2a:22:1d:
         0d:b0:a4:a0:a4:13:42:f6:5d:66:7e:c9:55:fd:88:fd:f3:df:
         08:ca:eb:8f:77:97:bf:dd:d0:e5:76:cb:3b:4d:3f:76:c7:62:
         d4:d5:fb:ce:53:eb:7e:17:d4:88:fa:b2:a6:36:f6:7f:8a:3f:
         8f:df:d0:18:5d:1d:30:82:6a:a5:0f:1e:72:64:6a:39:5e:27:
         95:c8:d1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:45 2026 by rpki-client