This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
File:                     YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json)
Hash identifier:          9SSxNR8o72/JF34FZrrh7Ixoc7Frz4ydAKgLsXYMvc4=
Subject key identifier:   66:0E:3D:5C:EE:7A:72:6D:57:35:E5:9C:C9:81:52:50:7F:AD:DC:33
Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
Certificate issuer:       /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Certificate serial:       3508
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
Manifest number:          3503
Signing time:             Sat 24 Jan 2026 14:57:41 +0000
Manifest this update:     Sat 24 Jan 2026 14:57:40 +0000
Manifest next update:     Sat 31 Jan 2026 14:57:40 +0000
Files and hashes:         1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: 5G5rOhvr83mxyzQcB+Nx/v/EZqSSviS2Q5l7PnveATQ=)
                          2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: 3hsbI0PrBL5LI5VaCiCNQ0sMN2EIkZA6LenSvD9t9yA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13576 (0x3508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
        Validity
            Not Before: Jan 24 14:57:40 2026 GMT
            Not After : Jan 31 14:57:40 2026 GMT
        Subject: CN=6974dde4-1dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:b6:c6:8c:bc:35:9c:8c:77:e4:4a:c2:23:
                    49:45:c8:32:70:9f:bc:f7:44:2d:db:a7:08:e3:22:
                    9e:a2:98:66:f9:03:2e:7a:15:86:22:36:ce:16:4a:
                    90:5d:26:23:c5:80:75:2f:12:c1:b5:97:89:dc:70:
                    9d:84:ea:1b:f7:84:00:11:1f:9b:71:78:7f:8a:67:
                    40:6e:c0:6a:01:05:34:40:8d:84:b4:16:7b:53:49:
                    d6:ac:9f:72:dd:90:40:39:68:39:db:3a:4a:26:11:
                    ac:fa:13:68:01:8e:6f:7d:10:90:c1:90:e9:b1:80:
                    c8:a9:43:91:c4:d5:d6:85:8f:02:a7:f7:2b:e9:cf:
                    cc:16:2f:6d:c8:7a:7c:3e:7a:31:25:ee:5f:49:81:
                    79:7b:b6:53:d9:d0:11:87:58:bd:b5:ec:b1:4a:c3:
                    50:a4:c6:67:7b:9a:01:f4:13:72:2f:74:c8:53:df:
                    6b:19:7a:c2:ec:ed:86:45:cf:c1:54:56:db:62:c6:
                    5a:bc:27:0d:dc:9d:b3:24:c4:52:19:43:8c:e4:0a:
                    9a:c6:66:46:55:ee:7b:f9:2a:ca:60:cb:50:b0:98:
                    e0:55:a4:b3:a2:75:2c:13:87:3f:23:63:e9:dc:58:
                    07:f2:df:93:6a:61:7a:25:07:db:6f:85:51:59:42:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0E:3D:5C:EE:7A:72:6D:57:35:E5:9C:C9:81:52:50:7F:AD:DC:33
            X509v3 Authority Key Identifier:
                keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9f:34:a1:54:88:86:b5:62:e9:8f:c2:9a:eb:63:ff:9e:4b:
         33:42:06:d9:25:e8:8e:13:66:81:39:7c:f0:6b:37:00:b4:af:
         48:bb:0f:08:2a:f2:f4:a3:5f:86:a5:6f:16:c7:cb:5a:23:d2:
         95:79:60:22:6a:87:0b:9b:92:ee:33:af:46:b5:9d:8b:d4:33:
         0c:9e:c4:0c:4d:09:58:ba:33:3c:e5:cc:54:f8:b8:dd:2c:7e:
         36:58:7c:fb:d0:b7:be:04:31:c9:c4:9b:ee:c1:46:cb:8e:27:
         97:3f:c2:cf:9a:50:cb:54:df:d9:fc:3d:df:02:3c:96:a4:9d:
         11:82:83:72:b8:ad:65:37:ea:e8:1d:33:69:00:49:28:29:8b:
         ee:48:4d:2e:d4:2c:b3:67:49:09:97:5b:90:a8:63:a4:d0:08:
         2b:ff:f6:5e:87:10:86:f5:7b:e7:ba:b7:9c:1d:85:11:7a:47:
         88:66:33:e9:30:f6:62:25:42:db:e3:75:ac:52:7d:d5:05:98:
         b1:e3:6b:d9:27:68:f4:62:72:18:3a:d8:d1:bc:41:b9:38:da:
         60:cf:c2:82:47:43:62:c9:55:0a:03:7e:ac:e3:29:24:b5:ec:
         c6:e5:6b:84:4a:3c:a3:bb:f2:58:b7:93:b2:7b:d8:bc:7e:ab:
         09:be:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:31:38 2026 by rpki-client