This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
File:                     YV7YTETmV_cJXgISr-oFLFQqDZE.mft (raw, json)
Hash identifier:          I6gs+pWPB/J7pyH8V3DO4eDHjJx6ENhclZNXuuSqdDU=
Subject key identifier:   F6:36:C5:9B:58:A0:18:10:1C:2B:E7:B9:E5:58:E8:B8:28:48:E6:4B
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       1A40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
Manifest number:          19A1
Signing time:             Tue 20 Jan 2026 16:13:12 +0000
Manifest this update:     Tue 20 Jan 2026 16:13:12 +0000
Manifest next update:     Tue 27 Jan 2026 16:13:12 +0000
Files and hashes:         1: YV7YTETmV_cJXgISr-oFLFQqDZE.crl (hash: 9QAMYkXGKdQlPv1pXDibv+PiCgrOaEunDm8nvKB7JrM=)
                          2: DEB0EB98F74011EE9C9F952CC4F9AE02.roa (hash: 7UKhVbflSPH7uPSo9b6g0HLn2UJyMq6ayaNt7j2hQrg=)
                          3: 596C54DCE83F11EE81772A87C4F9AE02.roa (hash: h9KlnX5iKfau8qxu9XcKByc0GSoNDAl5oQ47MzffEdM=)
                          4: 64F859DA812611EDA597255EC4F9AE02.roa (hash: 4G9pabN3fInR01hB1KJxupTjFiU5cwWupE1x4HBM8Z0=)
                          5: 1071470CF41311EA9FD4EE0FC4F9AE02.roa (hash: EKBZjSQMSPdIIYxlJIqjXikuQWivuzvdJl/2dMA7okE=)
                          6: DF4A9778E56111EBB6ADAC1FC4F9AE02.roa (hash: Yyoino+oee7CjSsG4j8V96K95EyMSk1qfplqpVc5vtk=)
                          7: CF2F506C8A0F11EA9DFF7F19C4F9AE02.roa (hash: quIz4T4yVr2qFDWO8rHZkKK2ikeMSuNEyDrr7sIbSbk=)
                          8: A41A01F2812311ED9367FC43C4F9AE02.roa (hash: mkp0usPjHeL3yppERl+f9rCMjE5Z7lmDf0UQPBQGrbc=)
                          9: DE11F1B4F74011EE9C9F952CC4F9AE02.roa (hash: v7ewDlnHh2ODyUCWWmpizMcwqiBTCpdKV1w/1N2RmQs=)
                          10: 1B97493E7FFF11EF85F9E340C4F9AE02.roa (hash: gwOaTGbTjX6ODkTQgbJLQAA2z4yR1jkHjYAWHWNTKJY=)
                          11: BCA3B016F72811EE8C4CBB51C4F9AE02.roa (hash: bKP3OXB8HXzWQNmzw8HSfjC5FzHFmih7ZWDafeEtizA=)
                          12: 12D80792792E11F0B9B60F74C4F9AE02.roa (hash: wm0jq/5UGb8qdnkj701MaBJwLbMqITh1NF1tHTRl0Y4=)
                          13: AD1655A2DFEF11EB8486545FC4F9AE02.roa (hash: J4A5jUdJTnc5iRNHFo3WsYWKmW4+3U21cZ6rs+f+PSk=)
                          14: 4524F69EF73211EE8BA96C65C4F9AE02.roa (hash: gIT+6sEWqKyJWc5kNdozRIfXa8WY5C7Dl8hRoEYWoso=)
                          15: FBC5FF822EE711EF96610B4EC4F9AE02.roa (hash: KLeIkEc3bCJxX7qfItmj/airahCgC8jTd5yyUogXUdQ=)
                          16: 897785E099AA11EE9E218060C4F9AE02.roa (hash: kTBsp6o4nCKKbsP3ONOB3l2L7ANYm1FEvJ9iABc14lE=)
                          17: EC0E245CF74211EEA182A952C4F9AE02.roa (hash: la7Z7gb79x/WPpDBpQlTfdraImLy824v/LxxnKpXS7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 16:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6720 (0x1a40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Jan 20 16:13:12 2026 GMT
            Not After : Jan 27 16:13:12 2026 GMT
        Subject: CN=696fa998-9082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:42:d8:36:9b:ae:f6:c9:af:22:c2:4f:ff:
                    99:f7:f1:7d:50:c4:09:95:30:54:98:26:b8:90:04:
                    3e:af:36:23:2e:aa:db:0c:f4:52:2e:ce:6f:03:be:
                    4a:7a:6d:3f:9b:92:7c:0e:b9:47:95:88:52:cc:1c:
                    ba:25:f5:5f:ae:81:84:64:3c:86:92:df:fe:f2:94:
                    22:b3:a0:18:6b:61:cc:e7:a5:ca:5e:9a:0b:b1:e2:
                    71:01:fe:9c:25:7d:c6:af:24:1c:ed:ff:9a:6c:7c:
                    88:30:4c:2f:91:b2:f8:a2:36:09:78:95:5a:ca:31:
                    58:60:99:a1:ad:fb:6d:57:45:e1:21:81:9c:de:33:
                    2d:f2:0a:7e:34:e5:d2:b1:f4:9e:00:b2:bc:8b:28:
                    2c:40:50:e3:02:8a:8d:c4:78:dc:01:42:3b:1f:fe:
                    5f:83:5e:3b:6d:8d:7e:28:99:a1:04:e7:36:b2:cc:
                    03:82:01:cb:63:17:19:c1:ff:9a:15:72:6a:22:2c:
                    04:a7:32:55:da:79:65:18:d7:0f:f2:8f:3c:b9:2d:
                    5f:d5:d6:6c:1e:55:23:a6:43:37:e8:2c:c9:bb:85:
                    32:f4:43:43:47:eb:02:4c:a5:00:93:5e:d1:2c:de:
                    f4:d9:85:be:bb:ea:7b:f1:34:2a:d9:ea:b6:ae:a3:
                    5a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:36:C5:9B:58:A0:18:10:1C:2B:E7:B9:E5:58:E8:B8:28:48:E6:4B
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ab:2d:2c:82:e5:30:45:58:c0:f4:3a:74:b9:03:10:eb:b3:
         f2:d2:5d:47:07:bb:6c:57:dd:51:4d:00:00:92:66:9f:fc:50:
         8a:76:71:7c:35:d0:4e:64:1f:e0:9b:c3:fa:0b:a2:7c:03:1c:
         f5:78:34:81:88:d3:12:c8:6f:f4:9f:31:dc:02:d1:b9:ad:5a:
         dc:f9:1f:46:3d:65:5c:93:8c:38:7b:56:63:a1:86:a9:49:44:
         09:7f:67:dc:99:ff:71:3f:70:f5:f6:03:56:e4:83:ec:f0:bc:
         2d:73:86:c7:79:df:29:52:dd:9e:f8:cf:68:c1:e7:71:dd:95:
         de:a6:b0:39:c3:66:1c:56:03:8e:e8:6b:9b:bf:86:01:11:70:
         7c:61:55:53:55:32:4c:70:49:a5:6b:90:69:d8:bd:42:4e:23:
         9b:a0:68:37:32:24:0a:ac:30:c8:ef:4b:e5:ba:eb:1c:aa:f1:
         e5:65:bb:89:e4:66:a5:6c:02:5a:92:e4:37:37:d4:33:5a:41:
         d5:ed:16:c6:1c:f6:7d:52:3f:57:1e:20:b9:35:87:71:28:e5:
         c1:fc:ce:10:14:d8:65:16:d3:57:74:4b:ba:81:dd:8e:5f:0d:
         b1:a3:30:cc:cf:b1:7a:a8:e6:48:02:56:a3:04:7f:b3:e3:97:
         27:26:92:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:56 2026 by rpki-client