This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
File:                     CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json)
Hash identifier:          dpaxYtShQtAZ4hqTVUZGUG5vCxxSSonfzgx6+OcSBM0=
Subject key identifier:   57:E6:07:8E:A8:59:08:88:EF:55:86:5F:45:9A:D1:8E:FA:9C:24:A2
Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C
Certificate issuer:       /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
Manifest number:          D4
Signing time:             Sun 25 Jan 2026 04:55:35 +0000
Manifest this update:     Sun 25 Jan 2026 04:55:34 +0000
Manifest next update:     Sun 01 Feb 2026 04:55:34 +0000
Files and hashes:         1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: zzPvMnwtsWWAXguwAUQvPZUl1S2j3zJc2+hJX2FRwy4=)
                          2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: SklvV/r396KpGbyeOD/kzVImLrKhYqq0QTsYwkoC6uI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C
        Validity
            Not Before: Jan 25 04:55:34 2026 GMT
            Not After : Feb  1 04:55:34 2026 GMT
        Subject: CN=6975a247-1bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7a:77:8c:a0:ff:c1:ad:bc:e0:05:e1:69:f6:
                    a0:9b:6a:bd:57:68:df:56:37:df:72:63:e7:9f:6c:
                    33:b7:c0:c2:34:60:1d:35:66:2e:1f:33:ea:4b:95:
                    d7:e4:a6:75:ef:6f:17:53:63:25:ca:a7:1a:81:0f:
                    05:71:ea:70:44:fa:de:04:59:fc:54:e1:fe:75:24:
                    d8:8b:64:1c:99:cd:7e:ef:80:ce:8e:f4:5d:90:82:
                    bf:50:e0:12:8f:c8:e6:06:73:69:ff:16:42:1f:bd:
                    4b:7c:37:0b:85:20:1c:11:e0:f5:fa:e3:5d:4e:be:
                    2b:06:7a:40:50:37:6b:81:31:fa:aa:5c:bc:69:a8:
                    72:28:3d:44:26:06:5f:52:7d:fc:73:18:5d:1a:85:
                    b8:e9:ec:92:09:06:bc:d0:52:47:bb:7c:15:92:55:
                    80:4f:ee:08:af:67:da:94:44:9e:ec:dd:85:10:da:
                    68:82:73:9d:f7:80:04:d8:56:e1:3f:5a:06:63:c6:
                    71:cb:03:28:12:d3:1d:b5:cb:b3:59:9d:f2:06:f3:
                    d5:69:2a:e4:38:c4:18:9b:d2:31:54:f1:86:5b:b1:
                    f3:57:6a:0f:fc:70:b3:4c:d3:2d:f8:ac:1b:90:eb:
                    56:8a:f0:2e:62:ba:5a:95:71:a7:3d:36:ae:c5:b5:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E6:07:8E:A8:59:08:88:EF:55:86:5F:45:9A:D1:8E:FA:9C:24:A2
            X509v3 Authority Key Identifier:
                keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:da:5e:8d:6f:31:de:69:ca:fc:8e:8f:85:a7:2a:52:34:dd:
         48:fc:d7:cf:d6:35:21:e7:57:52:bd:c9:bc:0c:d6:82:1a:f2:
         40:7f:6e:ff:8a:e3:01:26:be:22:dd:2c:2e:83:64:1f:27:0e:
         6b:d0:1f:87:4a:71:cb:b0:b6:6e:3d:5d:36:b2:9e:e7:27:f4:
         1d:aa:57:35:ab:40:be:b7:f7:e5:c1:ba:b0:a8:4d:fd:23:37:
         db:86:08:16:70:d7:d5:59:c6:3d:0b:11:19:e6:c7:de:81:97:
         de:15:a0:e7:83:55:4b:04:c9:0f:34:1d:fb:05:39:a3:85:c7:
         f7:ed:b1:2f:3d:e1:39:8f:e6:d1:d5:02:00:45:4c:f6:cb:ae:
         84:36:7a:00:83:e0:f2:71:c5:c0:43:31:9a:dd:3a:98:d9:e0:
         a0:2f:22:5c:0f:9b:07:c8:26:fa:ba:23:d5:cc:b9:a6:0e:7e:
         35:6f:56:be:69:f0:aa:6f:e3:b5:8a:25:b7:50:9e:98:6a:36:
         11:9c:94:37:26:d5:29:60:14:0b:dc:3f:85:95:17:10:d8:8e:
         3c:45:64:aa:e8:91:92:e3:bc:3d:dd:a1:dc:28:dd:38:94:ab:
         d6:e3:3e:19:e2:18:6b:6c:0a:d9:c9:71:65:5d:eb:f6:c1:9d:
         bd:ef:49:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:47:30 2026 by rpki-client