This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
File:                     1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json)
Hash identifier:          7y5YPxK+/PTJTi2cI8FrcXHwUiPIkxTQmTiCMQBNvbQ=
Subject key identifier:   7C:D3:2E:91:1C:EE:D4:4E:F0:2A:C4:0D:73:2E:6A:FA:8F:2E:1A:A6
Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85
Certificate issuer:       /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
Manifest number:          01C8
Signing time:             Sun 25 Jan 2026 02:17:11 +0000
Manifest this update:     Sun 25 Jan 2026 02:17:10 +0000
Manifest next update:     Sun 01 Feb 2026 02:17:10 +0000
Files and hashes:         1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: NhGBOE5xTf628/TbRxxk+QNqSefLuN/+c6dZttyvajM=)
                          2: B78CCA4E4C5711EE9FE2EA35C4F9AE02.roa (hash: yOezlN4+53IwwnSsCKNCBTmWXo8aQEvNaQEYhS9yato=)
                          3: A355C1A8B6D511F089793D6DC4F9AE02.roa (hash: 0SnBjCkd1/QSiUJjvI651mo+kVttGehwO0xz/nqsNeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl
                          rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85
        Validity
            Not Before: Jan 25 02:17:10 2026 GMT
            Not After : Feb  1 02:17:10 2026 GMT
        Subject: CN=69757d27-9f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a5:1d:2a:f5:86:25:5e:28:51:de:e4:48:ba:
                    c4:26:1e:22:b7:0d:87:00:8a:8a:e6:ca:be:96:b3:
                    7b:b3:f0:05:14:fb:7f:07:bb:12:01:f8:28:41:36:
                    8e:75:5b:e0:a5:3f:e7:a4:22:ba:81:cc:4a:71:99:
                    25:bd:c2:2c:e3:ac:6c:c2:05:86:27:22:94:a4:f5:
                    4f:7d:cb:15:ef:bc:6b:ee:10:d5:40:e4:9e:c9:f0:
                    72:8f:bf:d7:e9:bc:2b:a8:b5:43:6e:a5:4c:af:95:
                    e4:ba:eb:f8:5f:56:97:27:ef:35:8f:18:72:46:e8:
                    d1:ff:99:f9:b8:63:6e:17:e7:30:27:23:87:00:62:
                    c5:d2:53:56:a5:46:35:8f:e0:3d:b3:0c:0c:5f:88:
                    8b:f8:31:b6:99:bb:88:6b:f0:a7:5b:10:aa:4f:79:
                    00:1a:b3:31:50:38:fd:a7:59:1e:1d:5f:96:d9:f8:
                    a9:a7:6d:08:80:c7:e0:89:cc:3c:62:eb:48:e1:ef:
                    f6:c3:ee:b5:23:a5:de:de:fa:e6:cc:04:dc:2a:e5:
                    78:34:ce:0f:82:22:f6:6b:74:58:7e:67:a5:ad:9f:
                    9f:d9:c5:c2:08:58:3c:c7:61:39:9b:0e:07:13:cc:
                    ce:db:81:c9:41:1d:a0:81:ea:a8:09:d9:f0:5f:73:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D3:2E:91:1C:EE:D4:4E:F0:2A:C4:0D:73:2E:6A:FA:8F:2E:1A:A6
            X509v3 Authority Key Identifier:
                keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c1:b0:31:cb:3a:9c:4d:4f:4f:ad:5d:f4:ce:e2:35:fa:18:
         37:26:18:07:23:5b:af:3d:f0:85:00:b2:d7:51:91:eb:e2:ea:
         0b:96:b7:47:11:fb:c3:c7:4d:d5:77:63:ca:65:8d:c7:97:b8:
         d6:78:04:c9:78:b4:20:7d:86:7a:9f:91:29:b3:5d:ac:37:85:
         70:67:b9:c6:32:0a:93:45:2c:4a:3d:52:15:20:b5:6b:a0:ea:
         97:06:4c:7f:47:72:a2:68:fd:78:00:7f:c8:c1:1c:96:18:f2:
         9e:fd:9f:a2:1f:1b:87:11:23:23:8f:aa:f1:7f:d3:e0:07:62:
         9b:00:2f:6f:a3:59:a6:90:9c:6b:b2:d1:e2:78:d6:b3:f4:e2:
         48:57:59:f5:8b:f4:5e:8e:64:04:73:8d:4f:9e:1d:bc:17:fb:
         53:75:68:00:82:71:89:10:c7:b1:c5:0d:20:2b:8e:15:b3:04:
         3a:51:15:6b:b9:d9:d5:74:bb:47:6c:e1:dc:04:5c:2a:c0:e2:
         e1:d5:32:5f:bd:2e:3c:45:82:13:9c:db:c6:3c:d4:6d:26:f1:
         1d:3f:91:52:4e:94:17:30:3b:3e:f4:16:2b:8f:75:c1:c7:21:
         ee:c7:66:a9:ca:0a:f8:17:eb:35:48:0c:17:f2:bd:4b:b2:a1:
         b1:52:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:00:18 2026 by rpki-client