This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft
File:                     sYTDX2rtv7hd2kET8nUuDInKOpA.mft (raw, json)
Hash identifier:          oXtouV2gu9uYhVrgPIUcT0YozXTQq+uYq0FC8jiwcv4=
Subject key identifier:   31:D5:BA:A4:BE:62:7B:E4:18:3A:DB:42:9A:F9:F7:00:07:5A:61:1D
Authority key identifier: B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90
Certificate issuer:       /CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90
Certificate serial:       0B6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft
Manifest number:          0B64
Signing time:             Sat 24 Jan 2026 18:42:55 +0000
Manifest this update:     Sat 24 Jan 2026 18:42:54 +0000
Manifest next update:     Sat 31 Jan 2026 18:42:54 +0000
Files and hashes:         1: sYTDX2rtv7hd2kET8nUuDInKOpA.crl (hash: yk68BQ16M+vb0KYUjnNugVmL6+tRAe3Ytlm+XTIfRAY=)
                          2: F9D16F1CC7D811EDB42DFF20C4F9AE02.roa (hash: +JzejbKc1NZP24NoPrMtMcVkZZ9hm7s276rW0zhe0b0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl
                          rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2924 (0xb6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F88F4, serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90
        Validity
            Not Before: Jan 24 18:42:54 2026 GMT
            Not After : Jan 31 18:42:54 2026 GMT
        Subject: CN=697512af-c049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:b1:20:01:13:81:c8:d2:5b:39:36:94:b2:
                    98:36:fa:01:f3:53:0a:89:79:b3:b5:a8:bf:e9:51:
                    89:bb:8d:15:43:77:2b:9c:92:36:6d:7a:60:a0:8e:
                    13:3f:cd:13:e6:13:a6:59:6e:4d:cc:fb:f6:c3:d8:
                    90:6d:f3:02:32:77:28:98:33:7c:06:56:3b:d0:6b:
                    ef:4b:59:b1:76:b3:88:29:c8:86:f2:8a:0c:00:ed:
                    80:78:e8:0e:3c:d0:51:fe:e8:eb:40:3c:bb:c6:77:
                    ba:0a:80:90:64:33:3d:fe:c5:ce:e6:a9:7c:da:b8:
                    6b:92:f0:e5:7c:20:7f:19:6a:ad:c6:b4:77:61:51:
                    74:c6:b2:01:e1:eb:07:d6:65:27:64:ff:ba:e4:81:
                    0e:b5:60:d5:07:37:c2:98:90:a2:5b:d9:93:08:d4:
                    8c:5d:3d:7a:be:88:eb:79:7d:c5:2c:18:da:c6:1a:
                    3c:ff:15:4e:3e:b4:02:51:99:56:b1:1e:c0:ea:a4:
                    ec:0e:ea:28:d5:b5:e2:94:bf:ff:f5:19:41:6d:93:
                    92:a7:2f:c7:3d:c8:87:23:86:f7:a9:cd:00:db:f9:
                    b8:11:cc:6d:80:d1:f4:9d:7a:aa:c6:a9:f2:f0:96:
                    92:15:ab:03:be:d5:71:a6:ca:e6:ca:1d:6e:78:55:
                    15:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:BA:A4:BE:62:7B:E4:18:3A:DB:42:9A:F9:F7:00:07:5A:61:1D
            X509v3 Authority Key Identifier:
                keyid:B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:08:7c:00:2b:2e:dd:10:2e:1a:3b:93:d1:22:01:3f:7e:f5:
         90:69:cc:e4:4a:b5:0f:b0:df:dc:b6:9b:8b:e6:17:d3:94:a6:
         8e:a6:2d:f0:9f:08:56:70:66:d0:5a:5f:1f:31:f7:b7:90:31:
         7c:de:9c:e0:b3:8b:1c:0b:50:66:8c:fb:c6:8e:37:10:e3:44:
         e2:ee:9f:c3:43:c3:b3:55:ad:66:5a:04:af:dc:ee:4f:2e:ba:
         a8:5f:63:dd:e8:db:3c:7d:13:a2:8e:4f:0f:4e:87:2b:fb:42:
         4b:72:7d:af:30:c1:55:83:58:cf:4a:b5:a6:54:2b:57:33:09:
         0c:fd:8c:d9:6e:d2:bc:df:0a:1b:97:94:13:b3:7c:7c:c0:bc:
         4a:89:2b:a5:a7:a8:77:fa:b4:a4:95:1b:d6:ab:90:5d:09:e1:
         16:26:bb:47:e2:06:3f:a4:e5:90:68:bd:6d:1f:e1:3b:00:a7:
         54:99:d1:2f:b8:3b:35:0c:de:bb:93:18:e7:cb:e0:35:d5:53:
         f6:92:96:e3:42:28:18:a5:6b:d1:88:6d:bd:ac:05:32:83:11:
         b5:d8:a7:49:67:a0:6b:e6:31:32:67:e2:20:68:af:5b:1b:7b:
         d1:54:06:0a:e8:3e:c3:02:77:5d:b3:0e:8c:ee:84:03:fe:fb:
         e7:6c:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:29 2026 by rpki-client