This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
File:                     fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json)
Hash identifier:          t4kjdoVEp0UGwmBO8lZ4TAq7IeVViT95QU28lhfIjik=
Subject key identifier:   6B:16:A2:C5:A3:41:4A:FA:C7:4C:1D:C2:E8:3A:D1:EB:F5:44:07:4E
Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Certificate issuer:       /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
Manifest number:          61
Signing time:             Sat 17 Jan 2026 06:07:31 +0000
Manifest this update:     Sat 17 Jan 2026 06:07:30 +0000
Manifest next update:     Sat 24 Jan 2026 06:07:30 +0000
Files and hashes:         1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: SmMnIVKMNGNFX3chDXxmC8GA+dTL89I1tD/HDMKOl/8=)
                          2: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: OVSbJE+Pd0/Klp/U7r6paIfqVvKQjdcHWMz7l5HkgE0=)
                          3: 21C5B04263A311F096468248C4F9AE02.roa (hash: Xzb62xLJbAMEkevYXMmuNbI1IlT4POMgC4Yy3OA8C7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
                          rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
        Validity
            Not Before: Jan 17 06:07:30 2026 GMT
            Not After : Jan 24 06:07:30 2026 GMT
        Subject: CN=696b2723-9e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:97:40:63:4d:24:17:dd:9c:08:ab:a0:75:
                    1d:47:2b:48:4f:ca:ee:f2:52:6a:eb:09:03:40:71:
                    86:d1:6d:bf:65:b7:3e:79:5d:98:2a:9b:0d:cc:50:
                    6f:ee:8a:91:5c:bb:b4:1c:28:6f:9b:cf:e0:41:67:
                    1b:de:44:f2:d8:08:98:b5:60:75:3e:33:48:06:6f:
                    5f:a1:5f:3d:bf:9d:a5:50:ea:cd:6e:0e:bd:a0:fd:
                    38:78:7a:c3:b7:74:93:57:2d:12:5c:6b:43:77:3f:
                    11:bd:f4:1f:26:12:48:fa:c8:6d:4f:09:51:af:81:
                    fe:0d:a8:b0:6b:87:28:07:fd:7f:90:e9:a2:b3:22:
                    fd:88:c4:f6:c3:43:e1:9b:df:a3:34:d7:80:a3:5d:
                    57:9f:30:52:70:82:5c:ef:05:f7:17:9e:65:8e:62:
                    fe:a9:59:d6:f1:c6:17:c8:35:22:8b:fb:29:b4:85:
                    ca:d9:55:49:18:32:87:7f:6a:a6:9b:95:83:6a:5b:
                    29:b2:28:54:94:c2:55:c9:4d:9a:a6:b6:ee:c5:1b:
                    67:09:d8:92:2d:65:2f:84:f4:d8:b7:52:e4:e0:0b:
                    1d:77:67:ed:8e:5a:a2:4a:eb:a8:5b:c9:96:ca:11:
                    b1:b1:5d:5d:9a:59:d2:48:c9:93:05:38:34:86:6f:
                    20:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:16:A2:C5:A3:41:4A:FA:C7:4C:1D:C2:E8:3A:D1:EB:F5:44:07:4E
            X509v3 Authority Key Identifier:
                keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:26:48:53:d1:f5:89:7a:6a:24:76:a1:66:81:4c:50:a1:c6:
         ff:9c:e5:29:aa:d8:42:cd:05:a8:46:bc:67:36:1f:49:20:6e:
         5a:83:10:db:08:56:49:72:46:e5:2b:ec:27:be:16:e3:10:0f:
         8d:2c:88:b7:44:fd:27:f9:f3:21:97:f4:f7:b9:cb:33:c7:83:
         14:74:74:0b:89:c8:c3:af:e8:5c:0d:44:3a:fd:56:60:b8:71:
         c0:85:25:92:8f:3a:3b:2d:a9:32:8b:bc:cd:0b:03:31:b2:eb:
         87:56:09:df:b1:fc:e2:bb:a3:c9:d3:53:ff:fd:fd:fb:04:57:
         ab:fe:cf:33:e6:32:34:22:c0:54:c4:b4:10:f0:db:30:10:76:
         0a:59:87:e0:35:f1:44:db:67:8f:ad:60:6b:67:10:b0:70:ca:
         b4:2c:a0:e7:1e:a0:97:8d:2a:d8:cc:b0:44:8f:07:f6:62:d7:
         0f:71:d5:26:68:5b:ec:10:15:16:a7:5d:9a:a6:3b:4f:2a:1c:
         8a:9e:2c:3d:6b:de:b8:d5:27:69:1c:72:44:93:17:3e:0a:f6:
         b6:bf:7f:dd:57:df:b9:af:54:06:23:08:ff:44:40:95:86:63:
         ee:ab:56:a3:5f:61:72:92:60:0f:84:0c:a9:85:ee:13:a8:01:
         39:db:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:25 2026 by rpki-client