This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
File:                     YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json)
Hash identifier:          3o77chE3h5RZZpEUAGxQvepXlNSf7E5By7vzBzzPBAM=
Subject key identifier:   7C:C2:B8:0C:C7:CD:0A:05:5B:21:CE:BD:D5:84:7F:9E:81:51:AF:BF
Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
Certificate issuer:       /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
Manifest number:          BF
Signing time:             Sun 25 Jan 2026 05:11:42 +0000
Manifest this update:     Sun 25 Jan 2026 05:11:42 +0000
Manifest next update:     Sun 01 Feb 2026 05:11:42 +0000
Files and hashes:         1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: X786/+1Lf9fhrm92ilCOxQ7d9X5utMvHdkseffaex/I=)
                          2: 6FFDB6E4A30C11F0ABE46042C4F9AE02.roa (hash: d6uVF1i6ZT73+dk+Mk43in2noeNbthxeD9nGk9TeUo8=)
                          3: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
                          rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
        Validity
            Not Before: Jan 25 05:11:42 2026 GMT
            Not After : Feb  1 05:11:42 2026 GMT
        Subject: CN=6975a60e-a8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:20:60:ae:bc:94:18:0c:86:03:19:ba:86:
                    00:fb:a1:bc:9e:3f:88:06:82:83:d9:85:70:e6:bb:
                    e3:28:bc:31:f2:ca:eb:72:66:a7:3c:41:e8:cc:a6:
                    7e:47:df:4b:8e:7a:92:00:56:09:46:93:1a:0d:87:
                    6d:84:60:a5:6c:ef:63:0c:3b:36:1b:14:1b:49:64:
                    11:7c:ee:0c:f6:5e:5e:f9:03:82:c8:10:87:bc:93:
                    aa:ba:f9:05:8f:2a:e9:22:e1:7b:0d:f2:15:33:3b:
                    65:a6:5c:17:36:f9:bb:d2:54:67:95:fe:0c:65:c9:
                    14:10:1e:1b:a0:01:a0:02:b8:31:a7:b4:e1:2c:13:
                    20:cc:a7:44:4f:42:e5:3c:f6:c6:8a:6a:8c:1e:7f:
                    a4:09:cf:f0:b9:2d:88:15:77:40:ec:b2:8b:d1:ff:
                    69:3f:b6:62:57:fb:36:c3:0f:5b:2e:9f:13:f5:d4:
                    bf:55:84:b9:98:9d:23:d8:0c:05:a1:ae:27:28:87:
                    ba:fe:2e:59:22:87:7c:b9:c2:e1:cb:e6:21:99:6e:
                    77:58:15:c0:89:50:7c:e1:d9:e6:df:8d:9f:70:ff:
                    37:9f:be:8b:81:9a:c6:a6:a0:30:d7:d2:cd:99:e6:
                    7a:79:0c:c9:87:ac:a2:6e:a7:5b:e3:f6:43:d4:f8:
                    a1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C2:B8:0C:C7:CD:0A:05:5B:21:CE:BD:D5:84:7F:9E:81:51:AF:BF
            X509v3 Authority Key Identifier:
                keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:06:48:eb:62:d5:83:ce:b9:6a:45:b7:92:86:85:64:a0:d4:
         37:b9:0e:21:75:78:fd:6f:55:04:bc:84:ab:b8:2e:70:7d:21:
         62:68:17:8c:87:52:09:24:99:71:55:15:c3:81:ed:18:5a:07:
         9c:8e:22:01:f9:42:45:05:1d:01:be:0d:5e:c6:b5:38:cc:e6:
         a2:4d:e7:07:e9:62:b5:5b:df:06:71:27:a7:e1:a8:5f:93:58:
         09:ad:32:4a:af:73:44:c1:f4:12:06:cd:a5:79:4e:c5:ef:48:
         7a:41:a7:72:4d:cf:34:1d:4e:9d:54:47:d6:ec:3a:6e:c9:39:
         1b:27:46:92:1c:52:3a:96:e4:2b:97:3b:21:a0:75:93:04:7d:
         f8:81:40:ed:76:5d:80:cc:e4:5a:11:a8:01:6f:b6:9e:5a:c3:
         4f:4c:c2:6e:0d:0f:74:38:ba:fd:00:74:4d:49:b1:60:66:59:
         42:c8:8c:ad:44:49:a7:60:35:d5:d3:a1:a8:af:85:c1:f4:62:
         ac:c5:42:f4:4b:1d:63:4f:c2:58:57:5e:a3:fd:b8:98:fc:bd:
         23:b0:5f:bd:6c:b8:07:a7:06:81:e8:34:c0:8a:b7:18:70:f0:
         26:63:1b:04:ec:a5:65:1a:8e:85:20:dd:1a:aa:db:34:cd:20:
         be:dd:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:28:48 2026 by rpki-client