This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
File:                     YhmdhUkwna_yWfpPdr5svUb3VDA.mft (raw, json)
Hash identifier:          zojHTX3kcb/kyTqlUgvGQ7oKQRt1TKgmM9uGD40UrHE=
Subject key identifier:   21:E4:33:7B:BC:A5:2B:D1:5D:59:E2:DF:29:E0:F5:E7:7E:14:B2:60
Authority key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
Certificate issuer:       /CN=A9147A12/serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
Manifest number:          06
Signing time:             Thu 15 Jan 2026 07:58:58 +0000
Manifest this update:     Thu 15 Jan 2026 07:58:58 +0000
Manifest next update:     Thu 22 Jan 2026 07:58:58 +0000
Files and hashes:         1: YhmdhUkwna_yWfpPdr5svUb3VDA.crl (hash: PXH8xGPPbsnLcxpg7jaAtxodFnSbxbbn7Cf+CBhspEA=)
                          2: 8CCD4284ECEB11F08F189C11746F56BC.roa (hash: rkvtwz4jQvka4siKBDvCO5UdOxOA6EFkiVcFLw5MxVo=)
                          3: 7C0561D8F10111F088AEA117476F56BC.roa (hash: 52UhIkv6hhME+D4lgOetYoFZhLT+usiRxSPsUZOFcmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
                          rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Jan 2026 07:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
        Validity
            Not Before: Jan 15 07:58:58 2026 GMT
            Not After : Jan 22 07:58:58 2026 GMT
        Subject: CN=69689e42-3d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:c0:c7:49:17:12:74:cb:63:4a:d6:40:8a:
                    f8:97:32:0d:66:32:54:30:bb:d3:ff:36:5c:1b:4c:
                    b4:27:45:af:25:10:2f:1a:64:18:96:64:b5:30:2a:
                    83:f6:77:70:fe:b3:41:38:1f:0b:d3:cd:3f:35:d7:
                    67:79:bd:2f:9e:bb:0e:3a:37:73:13:f4:a7:79:a8:
                    12:77:74:cf:6b:cf:a0:75:54:de:89:d2:33:71:2d:
                    7d:ed:8a:d0:a4:72:ed:e6:82:21:58:9c:c2:02:d6:
                    d2:4e:9c:08:d6:e7:e4:be:00:b5:7d:d9:91:f0:37:
                    2e:04:96:07:89:6f:a1:ba:69:82:7f:b3:a0:3f:32:
                    fb:d6:6d:84:85:a2:ac:f3:9b:6f:b7:97:1b:81:2a:
                    af:db:2a:5d:e5:e2:02:b4:5f:1e:79:31:16:ea:4a:
                    d5:63:70:7a:d4:45:33:80:10:df:fd:a6:fd:13:dc:
                    3e:2a:ae:4b:1f:6d:b6:25:3d:42:37:3e:c3:c7:b0:
                    52:1f:16:13:e7:79:74:a0:cb:da:65:4b:25:17:e6:
                    58:a2:fd:90:f7:36:be:16:fd:0c:f2:ae:5f:10:0e:
                    f7:f6:7f:ea:90:24:b1:a4:13:54:36:0c:74:c1:7f:
                    b5:cf:31:49:3a:9f:d0:e4:ac:87:97:9f:99:29:7d:
                    36:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E4:33:7B:BC:A5:2B:D1:5D:59:E2:DF:29:E0:F5:E7:7E:14:B2:60
            X509v3 Authority Key Identifier:
                keyid:62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:39:33:40:3e:12:d7:e8:f0:1d:1a:94:59:c8:c7:20:6c:43:
         04:c6:26:85:64:e3:a6:6d:e2:6e:fa:d3:4f:c1:c9:e1:24:f8:
         5a:bd:d9:f6:9f:37:94:4c:2e:c6:45:45:b8:0e:98:89:fc:f0:
         5f:b9:c0:cb:4c:07:10:de:0d:ca:89:64:19:be:20:c2:7c:4e:
         ba:5c:2e:2a:05:64:ee:08:48:55:93:7e:73:18:bd:e4:cf:b6:
         cf:a7:14:dd:48:23:45:78:e7:d0:58:b1:69:0e:d6:f2:61:59:
         ba:1c:cb:cd:09:71:83:5a:20:af:15:cc:44:5c:ce:bf:c6:85:
         52:b1:1d:dc:10:0b:d8:cc:2c:ed:c8:89:a4:a8:69:a4:78:5c:
         e1:1f:03:06:23:71:78:d8:cd:bb:39:61:85:b6:40:f4:61:b6:
         6c:76:be:bb:c3:3b:10:80:32:46:ca:59:88:2f:35:df:3e:d7:
         2f:37:03:a9:2e:98:8d:f5:26:9f:ba:91:0a:c8:24:16:23:3c:
         9c:4e:29:3c:00:52:3b:e1:0c:af:80:83:46:d0:a3:c7:70:6a:
         23:58:ad:32:31:5d:de:c5:89:22:d0:a0:9d:3f:26:f9:d9:33:
         a3:64:74:b8:9c:29:aa:36:2d:97:42:69:c6:b0:6c:22:02:ca:
         64:ca:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 08:38:26 2026 by rpki-client