This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
File:                     yq12WnMFvBUlSxWyW1vTm2Oow68.mft (raw, json)
Hash identifier:          XqNBFFkkxdoifT4AeDfWtDsBnS7lGE+VqOz6wFpGBWI=
Subject key identifier:   77:6F:C1:29:0F:34:80:DF:41:EF:0E:D7:88:D9:31:AD:67:99:74:62
Authority key identifier: CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
Certificate issuer:       /CN=A911082E/serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
Manifest number:          5D
Signing time:             Sat 17 Jan 2026 06:10:31 +0000
Manifest this update:     Sat 17 Jan 2026 06:10:30 +0000
Manifest next update:     Sat 24 Jan 2026 06:10:30 +0000
Files and hashes:         1: yq12WnMFvBUlSxWyW1vTm2Oow68.crl (hash: mjSPgrk8Sdoj6Ad37reDwU+Uls9bZ7pBCrryoNs4pAE=)
                          2: 2CD74E4E66E311F08F05EC49C4F9AE02.roa (hash: 8+dSzRSc1+OXhRbW6N90YyrDk4oOdvcvAyZdFxbaVw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl
                          rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911082E, serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
        Validity
            Not Before: Jan 17 06:10:30 2026 GMT
            Not After : Jan 24 06:10:30 2026 GMT
        Subject: CN=696b27d7-1209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:61:8f:5a:75:6a:5e:83:fe:0e:ca:fd:10:77:
                    08:41:e3:fa:d9:cf:3a:bb:88:0e:7a:1c:03:a5:e9:
                    04:f5:c1:ef:3e:84:90:97:af:bb:ff:0a:0b:c8:d3:
                    f9:72:d2:99:28:3b:f4:49:95:e5:7d:fd:5b:4c:1b:
                    f8:60:65:b1:cf:52:48:5f:aa:a8:b8:ed:2d:1f:7e:
                    0e:74:80:06:5d:03:53:e9:f0:91:2e:95:aa:de:28:
                    d7:53:49:81:24:6f:17:a1:d8:ed:38:6c:74:f3:40:
                    60:55:77:b3:1e:a1:a3:35:61:97:11:75:ed:7d:e9:
                    5a:28:04:e1:40:b4:92:d7:1a:5b:5d:e7:fd:2a:af:
                    64:ad:6b:ec:33:83:03:9e:d3:af:b9:54:cd:aa:6a:
                    cd:9f:25:b7:5f:a3:86:ef:29:82:a5:d2:9b:7c:99:
                    0e:95:bc:4f:b2:e2:b1:15:72:95:3e:bf:fe:f1:15:
                    73:95:1e:40:b7:48:d4:08:3d:36:da:90:5f:80:37:
                    af:da:d7:62:98:8f:9c:50:93:3d:b5:2f:8b:2c:bc:
                    e6:10:a0:01:4f:ce:64:99:68:47:cf:e5:a0:0b:be:
                    e5:4e:ae:c0:56:68:52:0e:aa:9d:72:80:37:06:c2:
                    1b:be:26:3b:66:c8:4f:7d:41:98:63:0a:8d:63:34:
                    ab:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6F:C1:29:0F:34:80:DF:41:EF:0E:D7:88:D9:31:AD:67:99:74:62
            X509v3 Authority Key Identifier:
                keyid:CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:47:4c:ca:bc:06:02:0f:62:4a:d5:75:c0:06:36:35:8a:7a:
         49:7a:74:bd:62:d2:03:1a:e4:80:c5:66:cf:b8:f2:6e:f3:64:
         8b:9a:d5:56:c2:be:be:f7:e6:2c:e0:ce:18:7a:ac:e0:61:91:
         9b:81:a6:7a:8e:87:83:30:b0:9f:c6:6d:a2:32:6a:70:30:12:
         75:3e:be:6e:56:31:1c:24:8d:0a:b0:da:7d:2e:fa:72:a7:d3:
         61:18:65:44:6b:2e:1a:b4:c1:6b:93:28:22:46:10:fe:f3:69:
         98:e1:ec:67:2e:60:38:cd:0d:60:3f:b8:13:66:fb:39:20:7a:
         f8:50:bc:3d:98:91:5b:d3:f8:d7:10:8e:70:b4:14:db:e4:52:
         3c:3c:ec:a9:2c:9f:f2:48:9d:2c:70:ad:4f:3e:85:b6:f0:7c:
         64:87:a5:3c:b4:1d:df:40:ba:47:ca:d8:3c:46:20:66:cc:63:
         62:e5:62:19:e9:36:33:c5:cd:fc:df:b1:58:35:67:da:82:ca:
         d1:bf:29:b8:44:2f:29:6e:40:cd:d9:4d:74:11:27:a5:b0:62:
         89:54:9f:8e:fc:51:b4:40:d3:54:d6:39:4b:c3:40:e2:c5:ba:
         bc:82:8e:a7:5f:c9:ee:ed:0a:e6:28:5c:64:64:ec:75:59:88:
         fb:ca:4d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 22:09:46 2026 by rpki-client