This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
File:                     pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json)
Hash identifier:          HWmidgIYN3W52E2CGv6LNsHP8vyjDIHQjXVYBHhi4AE=
Subject key identifier:   93:69:71:D1:17:96:98:80:87:99:2B:2D:EC:1C:8A:27:29:1B:C6:3A
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Certificate issuer:       /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
Manifest number:          76
Signing time:             Sat 17 Jan 2026 05:53:03 +0000
Manifest this update:     Sat 17 Jan 2026 05:53:03 +0000
Manifest next update:     Sat 24 Jan 2026 05:53:03 +0000
Files and hashes:         1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: 9q2IvY2P16DqoRdvD00vB6NhvjFtxMUvF0gEKRdx7QI=)
                          2: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: WkC734Z9YLqp46ED9zzrP9DX1ES2VdVVIimzvDKW6/8=)
                          3: 5B118C12986011F0A5423187C4F9AE02.roa (hash: OXXb1y44b21RuXCm0yOOerFNyOFngqcHwK/xrGzNLmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
                          rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 05:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
        Validity
            Not Before: Jan 17 05:53:03 2026 GMT
            Not After : Jan 24 05:53:03 2026 GMT
        Subject: CN=696b23bf-7448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:96:e3:b6:30:d1:55:7e:fe:98:0a:14:cb:
                    bb:e4:be:cb:83:ec:6b:4d:6c:3e:74:68:ad:df:d8:
                    51:a4:b2:d4:36:02:23:80:6f:90:82:0e:2c:50:84:
                    7e:f5:f3:48:71:33:09:83:9b:b3:98:6f:97:90:4e:
                    23:c7:ee:5a:fe:54:5a:76:ea:fc:d1:62:4c:24:76:
                    c7:bb:4c:f7:c7:a3:a6:47:b7:db:bd:7f:c1:da:9d:
                    61:b6:db:77:07:1e:e4:6b:83:62:ca:e6:12:b4:5b:
                    21:3d:fd:dc:c9:d6:6c:d7:31:ce:93:8c:21:bc:78:
                    c7:3f:f4:5b:ec:f7:aa:54:b3:a4:48:af:85:e7:e9:
                    f2:00:45:b1:74:50:27:72:c7:bb:06:c0:93:ec:33:
                    11:8f:0b:55:3e:55:49:cd:ac:21:e2:33:88:73:fc:
                    7f:fb:70:7f:78:ec:35:3e:3b:ab:ce:36:ef:0d:31:
                    5f:ee:24:8d:4b:1f:b0:9f:83:1e:26:2a:6a:2b:b4:
                    cb:89:51:42:bf:c4:3b:3a:48:23:df:91:a4:2e:25:
                    70:f1:1c:40:47:07:2b:95:14:b9:b0:a3:97:1a:86:
                    f0:f0:6e:3d:4b:b1:ee:4c:dd:78:75:dd:f0:70:ee:
                    12:b9:58:c9:16:94:1e:12:0f:ff:ff:78:a9:2a:c6:
                    50:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:69:71:D1:17:96:98:80:87:99:2B:2D:EC:1C:8A:27:29:1B:C6:3A
            X509v3 Authority Key Identifier:
                keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:06:e9:3c:2d:23:0f:35:d8:1a:42:ed:62:66:1f:6d:b0:b4:
         9a:f5:83:15:60:c6:ee:c5:28:9b:dc:b7:da:72:7d:2f:c2:f8:
         43:12:61:c5:83:ab:d3:28:80:bd:04:72:30:16:8a:d0:5d:a4:
         2d:d2:f2:29:a3:b6:b9:29:5b:d9:12:3b:3b:64:64:0e:ac:c2:
         aa:53:32:48:46:eb:0f:b7:f9:3b:5a:32:c4:c7:8b:85:ea:0c:
         fb:37:73:51:6d:ab:47:f9:49:21:db:99:d2:70:78:02:ae:0e:
         4e:0e:d4:21:2a:99:00:b1:bb:30:00:b2:36:05:cb:6d:de:e0:
         c3:af:9b:25:a3:5c:0d:8a:11:45:03:1a:c3:8e:c4:23:80:3b:
         44:18:36:c1:3e:5a:4c:f1:c6:2e:f9:cc:9d:08:81:dd:70:23:
         cf:ec:24:ce:6d:1a:d6:0e:65:a7:74:d6:f8:04:01:b3:48:61:
         8f:62:1e:dc:1f:52:43:8f:b4:cf:f5:7a:bf:39:a0:39:19:f7:
         6a:d8:19:41:dc:44:aa:65:63:31:bf:53:f8:d0:4d:83:27:af:
         d0:1f:af:c7:5c:3a:e2:87:cc:b3:82:3c:a8:a5:5b:54:b0:d8:
         6e:28:fa:c6:80:8d:29:e8:a2:94:2c:5b:21:bc:77:77:2e:fe:
         cc:fc:15:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 22:09:15 2026 by rpki-client