This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
File:                     YG6ylYJUrJi2M26qQayAstyxnG4.mft (raw, json)
Hash identifier:          JFg5wlax+CJm5NfY2QXHiTxWmL/GMGcD/4ASuWDA2xU=
Subject key identifier:   C5:22:75:E6:8C:2A:10:FC:B0:51:CA:77:B9:5C:60:E5:D7:D5:4B:D3
Authority key identifier: 60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E
Certificate issuer:       /CN=A9170D3E/serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
Manifest number:          DE
Signing time:             Sat 17 Jan 2026 04:41:10 +0000
Manifest this update:     Sat 17 Jan 2026 04:41:10 +0000
Manifest next update:     Sat 24 Jan 2026 04:41:10 +0000
Files and hashes:         1: YG6ylYJUrJi2M26qQayAstyxnG4.crl (hash: 0zvO9v6VUA9bd9oZHmdHe1vHhuN6h4lzTr127h82v80=)
                          2: 181772049FD811EF8680B438C4F9AE02.roa (hash: FFWUbGnms+i/c0gm1QQvD9Feo8hsjiALxIcD96+R4sA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl
                          rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170D3E, serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E
        Validity
            Not Before: Jan 17 04:41:10 2026 GMT
            Not After : Jan 24 04:41:10 2026 GMT
        Subject: CN=696b12e6-f88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:81:dd:9d:83:bf:9a:b2:0c:ad:7d:2e:6a:
                    a1:52:d1:77:ae:2e:02:a1:d1:bc:63:2f:4c:18:d1:
                    c2:4b:b0:14:61:d9:0f:e1:49:ad:32:72:f3:a2:89:
                    2b:76:0f:e6:0f:cc:ec:97:63:c7:f5:8e:8c:c9:36:
                    61:56:5b:57:a8:e2:8e:66:c3:8d:98:54:24:b7:3f:
                    60:39:77:eb:c4:ea:c6:b0:3a:84:14:77:82:54:e9:
                    c8:3f:5e:99:9e:d7:16:b8:97:bf:8c:aa:18:25:0a:
                    fa:03:52:87:02:9e:aa:4b:e4:8b:53:2a:99:13:83:
                    08:e0:24:07:c7:4e:6c:2c:ee:3b:6c:f3:8f:ef:8a:
                    53:23:f2:79:6d:18:4b:2f:63:40:40:9e:dc:b8:bd:
                    1f:bc:75:e2:2e:3f:55:ac:1c:f9:7e:3d:6d:3c:25:
                    ac:f5:c8:d2:f5:7c:37:99:7c:db:87:b0:24:bc:f0:
                    1c:22:8b:db:b4:73:cc:b4:73:14:c1:3c:5c:56:76:
                    3f:e4:19:e0:63:07:5c:e8:4c:b8:6f:0a:84:76:1c:
                    30:90:77:90:e2:1a:6e:3c:0e:99:0a:80:40:9b:c8:
                    91:6a:06:00:1d:71:55:6c:63:ab:71:a7:26:9f:35:
                    c4:fa:c5:5f:47:a6:f0:b2:44:c2:40:60:79:23:ef:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:22:75:E6:8C:2A:10:FC:B0:51:CA:77:B9:5C:60:E5:D7:D5:4B:D3
            X509v3 Authority Key Identifier:
                keyid:60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:04:b0:fd:61:d0:0a:fb:e8:61:ba:bb:be:6c:fa:01:cd:4b:
         75:2a:bf:e0:ce:9a:c4:08:da:c0:36:37:1a:26:ec:f8:e8:37:
         5d:e8:46:98:49:66:3d:28:4a:8d:0d:d6:68:17:18:13:78:e1:
         38:f4:a4:c2:c1:4e:de:b0:27:5e:a1:8b:e5:8c:98:31:e5:19:
         5b:bb:37:be:f1:56:e8:b0:e7:ae:9d:82:40:66:00:53:9a:21:
         ed:90:d7:f9:dc:5d:21:6b:e9:37:91:84:89:4b:d7:89:f4:34:
         37:a1:09:20:bb:71:84:6c:0d:07:be:30:6e:9d:38:1f:07:b6:
         88:c6:c4:4e:79:c1:a2:52:9d:b5:be:60:ff:4b:f0:ba:0d:24:
         56:96:a0:b0:72:92:3a:8c:36:72:6a:ba:38:4f:43:53:5f:0d:
         98:86:43:7c:4b:e5:9e:74:5c:52:d8:77:19:fe:c6:45:b7:21:
         4d:32:c0:a7:9d:b9:50:95:1e:03:f2:e6:36:c8:b1:5b:c1:93:
         a3:d7:22:b1:fc:9d:61:4c:74:56:13:28:87:3a:a8:1a:7f:7d:
         04:34:92:62:74:4a:5d:65:f5:2d:05:5f:0e:05:de:ee:b9:f3:
         9b:44:42:04:a1:ba:f3:a8:93:f2:16:20:92:88:07:10:11:d9:
         f7:f5:3b:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NzBEM0UxMTAvBgNVBAUTKDYwNkVCMjk1ODI1NEFDOThCNjMzNkVBQTQxQUM4MEIy
RENCMTlDNkUwHhcNMjYwMTE3MDQ0MTEwWhcNMjYwMTI0MDQ0MTEwWjAYMRYwFAYD
VQQDDA02OTZiMTJlNi1mODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx1CB3Z2Dv5qyDK19LmqhUtF3ri4CodG8Yy9MGNHCS7AUYdkP4UmtMnLzookr
dg/mD8zsl2PH9Y6MyTZhVltXqOKOZsONmFQktz9gOXfrxOrGsDqEFHeCVOnIP16Z
ntcWuJe/jKoYJQr6A1KHAp6qS+SLUyqZE4MI4CQHx05sLO47bPOP74pTI/J5bRhL
L2NAQJ7cuL0fvHXiLj9VrBz5fj1tPCWs9cjS9Xw3mXzbh7AkvPAcIovbtHPMtHMU
wTxcVnY/5BngYwdc6Ey4bwqEdhwwkHeQ4hpuPA6ZCoBAm8iRagYAHXFVbGOrcacm
nzXE+sVfR6bwskTCQGB5I+91DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUideaM
KhD8sFHKd7lcYOXX1UvTMB8GA1UdIwQYMBaAFGBuspWCVKyYtjNuqkGsgLLcsZxu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CNURGQzhDMDlG
RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9ZRzZ5bFlKVXJKaTJNMjZxUWF5QXN0eXhu
RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1lHNnlsWUpVckppMk0yNnFRYXlBc3R5eG5HNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEQzRS9CNURGQzhDMDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9ZRzZ5bFlKVXJK
aTJNMjZxUWF5QXN0eXhuRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAxBLD9YdAK++hhuru+bPoBzUt1Kr/gzprECNrANjcaJuz46Ddd6EaY
SWY9KEqNDdZoFxgTeOE49KTCwU7esCdeoYvljJgx5Rlbuze+8VbosOeunYJAZgBT
miHtkNf53F0ha+k3kYSJS9eJ9DQ3oQkgu3GEbA0HvjBunTgfB7aIxsROecGiUp21
vmD/S/C6DSRWlqCwcpI6jDZyaro4T0NTXw2YhkN8S+WedFxS2HcZ/sZFtyFNMsCn
nblQlR4D8uY2yLFbwZOj1yKx/J1hTHRWEyiHOqgaf30ENJJidEpdZfUtBV8OBd7u
ufObREIEobrzqJPyFiCSiAcQEdn39Tuy
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:15 2026 by rpki-client