This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
File:                     YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json)
Hash identifier:          Bv26+BE4nJbVMO1rRfGkfWO6JvHNkYC0azxIP2EbptY=
Subject key identifier:   81:4B:80:E7:64:D4:42:98:D3:A0:EB:B1:D5:1E:CD:A6:68:B0:7C:C8
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Certificate issuer:       /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
Manifest number:          0151
Signing time:             Wed 21 Jan 2026 03:30:56 +0000
Manifest this update:     Wed 21 Jan 2026 03:30:56 +0000
Manifest next update:     Wed 28 Jan 2026 03:30:56 +0000
Files and hashes:         1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: hMXqm7c8wPEdTiLE1/c0/2vfp0ZFzr9Empu+r8vNib8=)
                          2: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=)
                          3: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
                          rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 03:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
        Validity
            Not Before: Jan 21 03:30:56 2026 GMT
            Not After : Jan 28 03:30:56 2026 GMT
        Subject: CN=69704870-09b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:4c:80:57:e8:b0:3a:fe:c5:9c:36:3c:21:
                    2c:4b:63:45:ae:34:dd:e8:90:d0:99:25:bf:15:0b:
                    77:4a:58:3d:e7:0c:44:76:42:51:32:63:8c:10:3c:
                    0f:7a:d7:2a:f5:d0:af:39:58:74:be:0b:6e:2e:dd:
                    95:e7:1e:32:94:e8:20:7d:02:53:02:97:c1:35:92:
                    fb:42:0b:97:55:bd:81:09:d4:ec:fd:2f:8e:45:68:
                    6c:a7:09:4a:88:61:88:c4:48:ea:3e:1b:14:0c:4a:
                    d5:29:65:21:33:a0:43:78:bd:c0:84:eb:f9:2a:d7:
                    0f:b6:5f:b3:d7:17:1a:36:78:54:98:6e:89:60:9f:
                    c6:e2:92:1b:64:59:6e:4b:4d:58:70:b0:56:b5:8e:
                    1d:20:ca:cd:ea:e7:91:3a:13:fb:44:cb:cd:fd:83:
                    a7:47:49:a9:64:f5:a3:4c:d2:7e:30:f8:42:38:00:
                    85:8f:83:b5:4b:bd:e7:6b:da:06:06:e4:80:c1:6f:
                    9d:8d:82:f7:15:4d:c0:00:ce:dc:81:2f:6e:d2:ec:
                    84:87:8a:21:5c:d8:90:04:67:44:9f:a0:de:47:f4:
                    57:74:40:a8:80:19:5d:0a:bb:06:d4:85:7a:78:df:
                    af:92:60:1f:da:2a:84:68:27:ab:db:bb:3d:71:18:
                    1d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4B:80:E7:64:D4:42:98:D3:A0:EB:B1:D5:1E:CD:A6:68:B0:7C:C8
            X509v3 Authority Key Identifier:
                keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1e:44:c6:a4:09:7a:06:b1:b0:d4:8f:30:0a:65:bb:31:00:
         1c:f4:c6:8d:20:1a:8f:73:71:fc:00:5a:59:97:8e:bc:25:63:
         63:bf:73:fa:6b:56:6b:90:fb:e5:95:e4:57:a9:43:6a:88:d5:
         07:c9:e3:98:e4:b0:2a:60:c2:6c:37:d1:cd:e5:28:ef:0c:04:
         87:70:9a:cb:ff:a0:0d:1e:80:7c:df:7d:6f:ac:63:5d:79:14:
         c9:b9:6b:2f:16:b7:39:f2:03:0e:0f:82:a4:60:b2:98:1e:17:
         ba:46:c8:a0:ca:eb:33:dd:2f:ec:eb:e6:d1:9c:ff:a7:2e:d3:
         00:e5:43:60:28:57:c0:15:7e:f6:bf:1f:b6:b5:e0:5a:9e:89:
         66:1c:52:f0:63:01:71:a8:0a:7d:75:d9:cd:48:de:27:49:66:
         ee:cb:14:b0:f2:a5:7f:66:b8:67:2b:35:b3:25:1d:b7:25:a8:
         4a:41:f4:7f:4f:62:a7:e5:8b:dd:08:b2:8e:34:5b:19:88:a0:
         a3:a3:fb:65:17:5e:98:26:f9:28:c1:39:e3:9d:02:d3:ea:4a:
         52:6a:41:ab:a0:97:37:e4:de:c2:c6:b7:cc:82:5e:95:59:9d:
         77:4b:0a:d4:96:2e:62:de:5e:64:72:07:1e:d5:44:ce:93:cf:
         72:93:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 17:03:19 2026 by rpki-client