This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
File:                     gYu-BREIqaYrBvxp5L-jaX5l4w8.mft (raw, json)
Hash identifier:          Wj0SNEp6vEIase8Ww51cmF+hCKLpqFrKqyPu9ZD4G/E=
Subject key identifier:   6D:F2:DE:0E:18:7E:5E:D8:AC:8B:83:43:EE:7C:37:36:EA:86:EE:05
Authority key identifier: 81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F
Certificate issuer:       /CN=A91FCF44/serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
Manifest number:          66
Signing time:             Sun 25 Jan 2026 04:13:20 +0000
Manifest this update:     Sun 25 Jan 2026 04:13:19 +0000
Manifest next update:     Sun 01 Feb 2026 04:13:19 +0000
Files and hashes:         1: gYu-BREIqaYrBvxp5L-jaX5l4w8.crl (hash: 81IjUQTpI+tHA+invto55HwE0HD/QZYuNFyij4JxZ+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl
                          rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCF44, serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
        Validity
            Not Before: Jan 25 04:13:19 2026 GMT
            Not After : Feb  1 04:13:19 2026 GMT
        Subject: CN=69759860-ffd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:62:fc:6a:2b:02:7a:e3:a3:43:a5:66:db:
                    29:d7:47:09:84:14:cb:b4:27:fb:9a:7f:a5:3c:91:
                    2f:c0:49:76:80:16:d6:81:79:4b:43:9c:a7:c1:fe:
                    7e:64:f9:ee:48:c8:c1:66:db:72:68:a5:11:e2:1d:
                    07:a4:00:b3:32:d9:56:12:c3:2e:f3:a8:37:e2:59:
                    11:e8:25:54:43:ab:b4:fc:e5:5f:ca:f0:46:b0:a2:
                    cd:97:66:10:f5:30:38:66:d6:06:a9:95:e4:ea:d4:
                    0b:cb:e0:cd:5d:ad:ea:01:79:a4:1c:35:df:c4:f8:
                    07:58:3b:49:f0:91:99:d6:94:2b:8d:79:3b:0d:e4:
                    87:c2:8d:44:87:4b:2a:25:cb:38:2e:5f:bf:95:82:
                    43:7c:9a:5e:12:98:f6:09:68:18:1e:b3:4c:a6:7f:
                    7a:d4:29:51:f2:78:33:fc:6d:c2:ab:38:62:b0:a3:
                    d7:ea:ba:d2:84:30:a3:eb:6c:b4:52:13:a5:8a:a3:
                    a7:52:33:4b:0c:21:70:5c:85:88:a2:a2:35:8a:a5:
                    e9:b2:cc:fd:08:f5:16:d4:ed:a0:27:64:c2:7b:b8:
                    18:c0:e5:08:e3:0a:c2:65:68:28:f5:b3:e7:bd:ad:
                    39:74:1c:0d:20:d3:58:42:18:1c:cb:86:99:3f:c9:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F2:DE:0E:18:7E:5E:D8:AC:8B:83:43:EE:7C:37:36:EA:86:EE:05
            X509v3 Authority Key Identifier:
                keyid:81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:71:36:03:72:4f:14:00:d8:13:d9:28:45:5f:09:53:05:38:
         11:e1:af:4e:de:ea:a7:5c:34:72:f5:cb:2e:40:84:28:ec:cb:
         0d:0a:89:bb:19:cd:9d:a2:22:7c:09:a5:ac:73:32:eb:39:ed:
         78:89:18:f9:fc:b9:f8:c7:eb:4d:4a:e8:01:20:e3:3e:6e:f3:
         b7:72:fe:3c:c8:07:47:36:b7:0f:52:2f:81:c1:c1:44:62:81:
         7b:00:fe:a7:ed:ba:0d:d5:cf:ea:72:2d:65:e0:07:ea:2d:d9:
         aa:84:44:e9:70:b0:b9:62:d0:01:f3:09:68:18:a8:57:90:08:
         c3:77:bd:d8:fe:ac:4d:50:77:61:d5:79:f4:47:eb:2f:7d:6f:
         20:12:0e:d2:57:a7:23:fd:9d:76:2a:c4:9b:38:04:ee:c9:9d:
         ce:fb:07:e7:28:bf:2b:6d:f5:0a:7a:de:c4:a0:19:7e:04:f1:
         1d:e1:90:01:bb:ad:98:92:3c:55:30:1a:ba:44:f7:64:21:8d:
         e9:01:5a:7d:99:49:58:e5:25:52:80:25:7c:f7:33:09:80:e5:
         48:4a:ac:e5:23:13:68:a9:52:45:b8:ac:9a:7e:bd:30:8d:71:
         0d:c4:82:5e:44:4c:59:8d:db:81:69:59:42:50:03:0d:2a:09:
         d2:bb:a2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:27:37 2026 by rpki-client