This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
File:                     -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json)
Hash identifier:          3+uKpAqTjJIG0wuO7iZFIkhbithEoaiYlsjmo7J9s7k=
Subject key identifier:   EE:33:4D:42:8E:6B:81:1E:38:9D:A3:FD:C9:81:7D:14:08:30:A3:43
Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Certificate issuer:       /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
Manifest number:          0127
Signing time:             Sat 17 Jan 2026 03:46:12 +0000
Manifest this update:     Sat 17 Jan 2026 03:46:12 +0000
Manifest next update:     Sat 24 Jan 2026 03:46:12 +0000
Files and hashes:         1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: 7JdIFEcEgTmvAXts0F+sPrbYmaK4N1NYhz1xGJQJ8Ic=)
                          2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: //CtK2APwvuKqYfNGso7I/JYlqJyjoNEWh980lWprcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
                          rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 03:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
        Validity
            Not Before: Jan 17 03:46:12 2026 GMT
            Not After : Jan 24 03:46:12 2026 GMT
        Subject: CN=696b0604-c21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:d2:aa:56:91:61:16:69:f1:83:01:0f:b5:
                    96:38:b1:d9:a0:56:9f:02:4d:00:a2:b3:02:ab:f5:
                    07:bd:4e:b8:ba:2b:2d:79:50:d4:72:60:d0:91:bc:
                    9b:be:71:6f:c3:3c:f8:5b:fa:e2:12:ea:98:da:6f:
                    9e:83:52:d2:1c:52:de:15:7b:3b:da:1e:fd:1b:a0:
                    d1:1a:09:95:d1:76:07:74:bf:ea:1e:15:2d:0e:08:
                    1f:55:0f:98:72:eb:e2:9a:9d:73:15:10:9a:5c:f6:
                    49:9c:86:94:de:27:96:f2:93:4b:e5:63:b9:c5:77:
                    4b:dc:3a:ca:9a:bb:82:01:0b:d5:c8:39:28:d4:23:
                    32:ba:da:86:83:72:38:d1:f7:0f:56:81:e8:df:1c:
                    12:48:16:22:78:42:12:57:0c:05:a4:23:8f:24:44:
                    d9:b7:42:3f:33:05:a0:fb:bd:6e:a4:b7:52:67:69:
                    35:78:a8:bd:94:c7:48:4f:54:a8:c0:da:5d:ce:07:
                    ec:0b:18:e8:19:37:8f:8d:6b:cb:9a:99:54:f9:85:
                    c5:63:11:54:6c:46:92:46:97:42:52:85:5b:2f:dd:
                    26:45:43:07:06:62:54:7c:c7:90:d2:19:d8:13:f7:
                    60:64:6e:9d:b4:ad:be:0a:cb:70:73:6a:0e:8c:e2:
                    7f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:33:4D:42:8E:6B:81:1E:38:9D:A3:FD:C9:81:7D:14:08:30:A3:43
            X509v3 Authority Key Identifier:
                keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e4:9d:99:86:98:b5:a8:51:b6:f2:db:53:77:d1:af:39:2b:
         4d:bf:2f:1d:76:9c:be:8a:30:b8:8b:71:91:28:9b:dd:9a:3e:
         d6:cf:ba:bf:d0:45:46:73:4b:1d:95:99:1f:1a:d2:b7:d2:07:
         f3:85:26:c6:63:cb:f3:8a:45:db:72:e8:75:34:0f:e8:0b:70:
         62:38:f3:48:1b:2f:58:9c:d4:96:92:23:fb:81:1c:b5:05:52:
         75:02:20:2a:e8:27:49:8a:56:11:4d:81:70:97:46:ec:ae:9c:
         5e:e7:67:35:8e:45:1e:35:41:17:bc:8b:0a:ba:fa:c5:84:57:
         5a:53:78:18:2e:87:39:6c:71:5a:09:d2:e0:5a:b1:a8:c5:05:
         27:18:a6:5e:c3:2d:cd:e1:04:c7:6d:a7:dd:be:45:44:7a:c9:
         14:af:c0:1e:f8:18:82:b7:4b:9f:85:27:d7:ef:83:15:d9:1b:
         87:40:90:67:b5:f7:56:fd:df:7a:47:2a:01:59:86:94:7d:41:
         24:a7:d0:b1:fb:3f:2a:1e:b2:19:a4:9e:4f:78:35:03:1e:7e:
         54:1a:df:be:06:09:64:90:14:6f:ee:bb:c5:bd:8e:05:c9:ab:
         91:75:cd:24:4f:cc:10:9b:f5:a4:b7:ce:5a:5b:9e:0b:db:ac:
         39:fd:6b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:31 2026 by rpki-client