This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
File:                     yPzMxL6JiqkgZxNmoP15UynpIB0.mft (raw, json)
Hash identifier:          9dPQvvFW9wqZnxFY2C7zMWgbGmTYgddjNWe8dhWzZhg=
Subject key identifier:   2B:3D:6B:90:B8:22:C5:28:88:EF:65:F6:67:47:96:17:48:D3:32:FE
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Certificate issuer:       /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial:       0C3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
Manifest number:          0C29
Signing time:             Wed 28 Jan 2026 18:23:41 +0000
Manifest this update:     Wed 28 Jan 2026 18:23:41 +0000
Manifest next update:     Wed 04 Feb 2026 18:23:41 +0000
Files and hashes:         1: yPzMxL6JiqkgZxNmoP15UynpIB0.crl (hash: bPFr5fSW007UsUJZO12eKxE+kHrYz2AVJPjly8ROqx0=)
                          2: 20748896236511EABCF20E10C4F9AE02.roa (hash: fsXBl6kkemGNmESiiA52EPocsTds19X+DjtA+JLmvPA=)
                          3: 5407E320236911EA9967DA1CC4F9AE02.roa (hash: 9Lv5bhv0bxsvxFT2f6q/WZoPs5VKMn4j236fJLh21Lo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
                          rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 18:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3132 (0xc3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919040F, serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
        Validity
            Not Before: Jan 28 18:23:41 2026 GMT
            Not After : Feb  4 18:23:41 2026 GMT
        Subject: CN=697a542d-7311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:6d:aa:34:34:98:10:44:c6:11:e2:a7:47:
                    3d:41:6d:09:5a:e5:4f:20:cd:d6:64:35:35:bc:85:
                    57:d9:fd:ae:73:6d:21:d4:b6:3e:8f:9c:c4:d4:14:
                    ed:2c:5b:d3:db:b6:05:69:ee:df:19:6e:d2:6b:2c:
                    81:b8:7f:a8:b5:58:d0:ec:5f:07:c6:cd:b0:8e:34:
                    89:dd:15:9d:c4:d7:3f:8a:a7:b8:bf:23:b6:1e:9c:
                    b8:e7:3a:db:ff:33:5b:4b:43:fc:28:5f:68:5f:c9:
                    bc:96:55:f3:73:e3:d3:13:10:3d:e7:9e:7d:f8:d1:
                    b5:09:f6:97:59:2b:fd:e1:c7:2c:91:34:f6:9c:58:
                    92:ce:e9:2c:aa:4f:65:2d:2f:29:a1:55:c7:61:e3:
                    61:c1:7a:96:da:04:3e:26:c6:98:5d:3a:8d:b1:c6:
                    26:dd:3f:cd:86:15:e2:12:62:33:c2:5f:6c:18:d7:
                    6e:c5:f5:49:05:e1:da:09:40:6b:e6:ec:e0:d8:9c:
                    eb:6a:2f:a1:dc:a2:a6:f5:5b:eb:2b:32:13:fc:b2:
                    3c:2a:63:1a:a1:ee:0c:a3:2f:78:72:7b:76:2f:c6:
                    e8:99:a3:8e:62:61:06:ac:fb:58:da:53:b7:df:ce:
                    53:31:ee:02:4d:8e:31:61:87:4b:bb:e1:28:69:cd:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3D:6B:90:B8:22:C5:28:88:EF:65:F6:67:47:96:17:48:D3:32:FE
            X509v3 Authority Key Identifier:
                keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5c:e3:b0:31:49:85:b2:92:f4:13:9c:ab:4e:68:ee:f4:4e:
         a7:e1:53:f5:55:88:55:22:66:57:e2:8c:1f:ab:14:c8:57:e9:
         a1:f1:e1:f0:64:1e:47:1b:5e:95:5f:24:b3:61:fa:c2:f9:15:
         70:9c:a1:3f:96:49:43:f9:de:08:05:ca:43:71:b9:08:a2:72:
         bb:a5:e4:80:84:0d:66:95:80:46:af:bf:cc:b4:4e:ae:ce:a0:
         34:fb:79:93:9b:3f:da:19:98:c1:72:d5:07:e9:40:7f:2b:d9:
         06:9a:ec:81:ae:de:ce:9f:ce:b0:84:43:13:0d:95:6a:58:da:
         b2:70:54:07:55:d4:47:1d:52:fc:9d:a0:f9:de:3c:64:07:04:
         15:f4:90:56:8d:ec:d6:8c:1d:48:37:40:0e:02:e4:ed:1e:98:
         56:cb:83:93:35:e2:14:a7:a8:98:66:d7:62:67:98:4c:34:7f:
         29:fe:12:49:c6:b8:b0:bf:d0:a6:62:e0:5c:82:f2:52:5c:8c:
         37:ee:1e:68:e6:f9:83:9c:63:ee:45:6f:b8:78:b4:0f:06:c3:
         98:62:13:c1:0b:2f:df:b5:85:d2:74:ea:11:d1:d0:b0:ca:26:
         e1:12:9a:7c:bc:0f:a5:92:32:68:b7:c3:eb:35:7f:89:ec:a2:
         c6:36:f2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 19:33:39 2026 by rpki-client