This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
File:                     0ypa3AVCwugXwgK-a3KB6GnReJc.mft (raw, json)
Hash identifier:          QQ5h0mTa+jtWww0nX129PnOQo27lZ48nAAFXRH+7pPY=
Subject key identifier:   95:3C:EB:1D:17:B8:07:25:DB:D0:81:56:27:28:D0:C1:7A:C1:19:A8
Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Certificate issuer:       /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
Manifest number:          0128
Signing time:             Sun 25 Jan 2026 03:59:31 +0000
Manifest this update:     Sun 25 Jan 2026 03:59:31 +0000
Manifest next update:     Sun 01 Feb 2026 03:59:31 +0000
Files and hashes:         1: 0ypa3AVCwugXwgK-a3KB6GnReJc.crl (hash: nZXAUmu3Ve5qqPzuxQZWjBvNyIiSXqhRcXOCwpX/3s0=)
                          2: 6F723CC0830B11F0B82E836DC4F9AE02.roa (hash: 20LByREQakyZFtw7XXZgcAlPRUMCZmgOccSGiPQln6o=)
                          3: 7DCD6940E59211F08B61DB89486F56BC.roa (hash: 89BQOiulnGKKaTJdNAG0XNXtRZ29+eJDZyjsRdZKe0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
        Validity
            Not Before: Jan 25 03:59:31 2026 GMT
            Not After : Feb  1 03:59:31 2026 GMT
        Subject: CN=69759523-25b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d9:8e:02:9b:80:ee:fb:1d:6c:a7:9f:bf:19:
                    a6:94:82:85:a5:2f:09:c9:5c:47:14:8b:cb:f8:a5:
                    e8:eb:3e:eb:bf:f8:68:74:f7:6f:85:d1:fa:d7:71:
                    95:eb:33:87:27:9d:3c:3b:0f:73:f4:35:7c:e9:c8:
                    f1:38:dc:4f:2e:a7:0e:dc:3b:e8:e5:02:1e:a5:3d:
                    11:59:f6:0a:99:63:84:7d:f8:e8:6c:91:54:76:f6:
                    57:5f:1f:a7:eb:85:ec:95:7b:9d:d9:f5:f1:95:f0:
                    a6:0d:06:59:1b:97:9c:96:d9:95:c7:c2:04:5f:07:
                    62:82:40:6b:bc:09:b7:c7:53:3a:8d:ff:15:fd:28:
                    79:07:97:22:f7:34:ac:0b:d4:2b:8e:ee:dd:ba:f5:
                    32:e6:44:af:7e:16:51:fb:9c:02:28:e1:66:06:7c:
                    a6:90:44:8c:12:86:04:89:52:76:76:8c:75:87:9e:
                    f7:82:62:e6:94:fe:38:94:c2:ef:39:be:22:2e:09:
                    07:da:80:ab:69:32:19:1e:e6:9e:6d:57:b2:8d:2a:
                    2f:fb:90:7d:e0:77:86:94:e0:af:8c:4b:3c:22:5d:
                    26:3d:12:46:49:fb:73:3b:ab:af:e8:63:ec:af:e9:
                    36:c4:a2:d1:2a:1c:c6:2d:a0:bd:e9:4a:60:c9:87:
                    bc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3C:EB:1D:17:B8:07:25:DB:D0:81:56:27:28:D0:C1:7A:C1:19:A8
            X509v3 Authority Key Identifier:
                keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1e:6e:77:be:a4:da:73:10:07:91:bb:90:06:f4:14:a3:8a:
         c1:9e:90:51:cf:e7:f6:80:6f:66:f7:c1:ff:e3:99:27:c3:f1:
         3e:52:9d:3d:af:26:f3:33:5a:96:3c:82:ae:8d:a9:6f:23:e4:
         07:d2:4d:94:31:b4:99:0e:79:d0:fc:e7:0e:69:f0:ab:0e:e2:
         29:3e:14:1a:aa:19:d3:e2:b3:1f:bc:98:42:ba:2a:f7:8f:5b:
         a2:68:d2:5e:75:50:67:03:df:9e:59:c2:83:22:8f:1c:fb:cd:
         05:d2:b7:b4:c1:28:2a:60:f6:8d:a9:c9:58:de:90:ae:aa:b2:
         5f:82:bd:7d:97:73:6d:02:bc:4b:af:cb:3e:e9:5a:13:be:de:
         dd:c5:6d:04:f5:56:a5:27:d2:f0:5f:2f:02:ca:82:80:3a:c7:
         63:cd:29:e4:e0:81:4a:22:22:f0:10:77:bb:df:19:4e:d5:28:
         97:0a:a5:83:3e:a8:d3:ec:27:08:b0:fd:73:b5:06:c6:a8:89:
         96:f8:57:fb:e6:10:b5:3b:74:0e:2d:9f:4d:2e:3d:36:4a:cc:
         86:61:60:e7:ec:6e:3d:b6:37:93:0f:e3:97:93:38:6e:a2:ff:
         26:f5:f7:8a:3c:8c:32:74:45:70:f6:1e:c7:55:2f:3e:45:92:
         fa:23:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:35 2026 by rpki-client