This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
File:                     Y7ooHVb6T-blNbEl4W34AdEvgJk.mft (raw, json)
Hash identifier:          4COMHZ9V+mwNk9kzDFFtLueb/4qsCoINl7vroTwCzAQ=
Subject key identifier:   10:96:62:EC:A4:72:2C:55:E6:DC:46:6A:93:8B:79:5C:C5:45:CE:00
Authority key identifier: 63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99
Certificate issuer:       /CN=A91ECBD9/serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
Manifest number:          0106
Signing time:             Sun 25 Jan 2026 04:16:36 +0000
Manifest this update:     Sun 25 Jan 2026 04:16:36 +0000
Manifest next update:     Sun 01 Feb 2026 04:16:36 +0000
Files and hashes:         1: Y7ooHVb6T-blNbEl4W34AdEvgJk.crl (hash: HZ7cf2z2NLxK5xui1BD7F4l5hXwLEWs02FuTmWfDQC4=)
                          2: 4E67247C681911EFA2640B43C4F9AE02.roa (hash: ucm8jiY7/TEfoe7vYt6Xy9WiiLrmTGt3Yko/V2TTwzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECBD9, serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099
        Validity
            Not Before: Jan 25 04:16:36 2026 GMT
            Not After : Feb  1 04:16:36 2026 GMT
        Subject: CN=69759924-0f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:50:33:c2:2f:ad:df:95:0e:b7:a3:77:09:
                    ea:1d:18:4f:e0:d7:28:ff:40:68:42:5a:27:d4:53:
                    b9:7f:53:94:70:60:c9:66:1f:44:2d:5c:0d:29:34:
                    ff:74:26:91:96:02:80:a6:1d:03:67:92:7f:a6:87:
                    35:c0:c7:ef:d3:f0:36:21:6a:72:97:9c:f6:58:eb:
                    46:ba:fa:81:9d:0d:d1:cd:b5:73:48:ed:e3:f4:0c:
                    f3:20:86:1b:cf:90:e1:d1:3e:e0:4e:68:8b:c3:17:
                    01:22:28:76:72:25:8e:b6:14:1a:1d:9f:aa:9b:df:
                    29:8b:b3:63:9e:5a:8f:19:2b:eb:e1:33:7e:cd:82:
                    96:58:97:0f:1b:27:51:f2:3e:da:c0:cb:f7:77:11:
                    73:8c:7b:a3:ca:89:e0:fd:ab:ee:7d:aa:81:90:cd:
                    6f:f8:8a:3f:fd:97:f4:2b:b8:9a:06:61:e4:24:ef:
                    ec:24:b9:62:c5:0b:81:b1:cd:55:96:a2:43:ae:c9:
                    57:92:3f:cd:9b:e5:fe:6c:7e:0a:d8:f3:28:31:b3:
                    f5:dd:96:88:26:3e:1a:11:49:4c:85:b8:44:96:a4:
                    77:80:a7:93:d6:6b:6c:2c:5e:e7:8b:9d:4c:52:dd:
                    bf:08:64:95:fa:53:90:a8:7e:75:90:a2:49:44:6c:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:96:62:EC:A4:72:2C:55:E6:DC:46:6A:93:8B:79:5C:C5:45:CE:00
            X509v3 Authority Key Identifier:
                keyid:63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:1f:40:69:7f:09:3b:a1:18:a6:21:74:0e:03:ce:fe:20:
         b7:cf:a9:e5:9d:02:e6:e0:39:5a:17:b9:5c:9f:76:d0:be:ad:
         0b:e7:da:1f:29:c8:6c:a4:56:11:98:59:fa:05:ed:f8:de:b7:
         a6:01:d2:3c:e1:df:8b:ba:dd:72:a4:54:89:7e:a6:63:e6:a9:
         ea:1c:d7:dc:14:8b:a1:5c:70:1d:c6:49:e4:a2:92:28:8b:70:
         a5:80:6c:66:38:c5:f9:5e:78:73:cf:69:d8:45:fb:4f:6a:b5:
         65:58:85:55:d3:bf:06:33:d6:78:69:2f:32:ae:0f:d0:d7:c4:
         26:b6:2f:64:87:dc:7c:bc:4f:aa:96:28:96:a4:3a:d1:b6:d3:
         81:af:88:e1:ef:6f:7d:b4:ef:4b:9f:d4:d0:c7:46:04:ee:2a:
         99:a8:9b:2c:9f:63:2e:bf:21:50:4e:25:8c:6f:19:e0:2c:ef:
         dd:17:fa:95:dd:30:2e:9c:54:54:26:9b:6f:33:71:8f:f4:c1:
         1f:54:21:59:82:91:44:10:f2:22:27:fd:4a:45:10:97:47:19:
         d5:5e:10:a9:ee:1f:7d:37:11:8a:7e:12:8d:ef:48:fc:c1:fe:
         76:9f:ac:3a:e6:80:a5:50:f8:fa:0b:ba:dd:d5:46:d8:df:b8:
         8d:31:7c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:59:25 2026 by rpki-client