This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File:                     hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier:          acyNj/SrGgmmf4Qm1aB+D2Ng9n7EzBtrNZDM4Df1veo=
Subject key identifier:   3E:84:06:D3:51:9E:64:D9:80:70:25:57:92:49:AA:42:BB:17:84:CD
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer:       /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number:          018B
Signing time:             Wed 21 Jan 2026 02:50:37 +0000
Manifest this update:     Wed 21 Jan 2026 02:50:37 +0000
Manifest next update:     Wed 28 Jan 2026 02:50:37 +0000
Files and hashes:         1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: I6wq8KHVu9E8gyPRoYzirWr6ljbRYJmmdE55TWb4R3E=)
                          2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: yPYfEAglEFMTRsLgPsxCH1JdVrrNynf96haAqk8oe5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
                          rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 02:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
        Validity
            Not Before: Jan 21 02:50:37 2026 GMT
            Not After : Jan 28 02:50:37 2026 GMT
        Subject: CN=69703efd-336d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:6f:06:bd:be:fa:2d:8a:60:45:ac:7b:04:
                    36:e3:44:06:f1:a6:34:8a:5f:78:a3:10:75:ee:3f:
                    cc:ae:27:18:b3:c8:d1:8b:4b:77:51:09:00:ee:7d:
                    1c:92:df:16:b3:21:f0:d4:b9:c5:4d:3c:1a:eb:24:
                    d2:cf:a4:d3:9c:d0:06:e1:2d:6f:8f:07:3f:79:f9:
                    7c:46:bc:5f:ba:93:b3:05:5a:28:db:a2:42:20:1a:
                    dc:f7:5c:d6:1e:20:14:2a:fd:d7:3e:67:7f:22:3c:
                    28:0a:91:ee:2b:4f:d7:28:19:ac:6a:2d:95:b8:90:
                    f2:d5:79:62:e8:66:4e:66:06:92:ae:64:cc:20:c9:
                    ec:3e:3c:55:f9:83:87:c2:05:30:75:5d:ac:d2:e1:
                    69:10:ce:63:b4:9b:0a:f5:91:24:5d:87:89:a9:a3:
                    ac:0f:4e:0f:4d:bd:40:26:84:41:42:b7:82:0d:7e:
                    d9:ff:21:79:11:c2:2e:c4:bb:04:32:ec:be:d9:0c:
                    44:8b:b3:f0:b7:6b:37:9a:08:a6:ed:cf:b8:7b:54:
                    44:bc:ac:13:07:d8:16:ab:43:79:01:99:a9:3c:f1:
                    bd:f9:a6:83:fd:e7:40:9f:29:e7:46:f8:ba:0c:f8:
                    11:bf:6d:77:fa:fd:24:ef:39:c1:8e:59:62:5a:10:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:84:06:D3:51:9E:64:D9:80:70:25:57:92:49:AA:42:BB:17:84:CD
            X509v3 Authority Key Identifier:
                keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a3:13:02:fd:a8:fd:f9:a1:16:d1:08:ef:c0:3b:81:f2:6b:
         9f:e3:1f:5a:03:c0:1f:a0:94:fc:1f:5e:ad:09:73:51:84:b4:
         5e:4b:f6:1c:a4:3c:78:8a:c5:f2:f2:22:5e:3a:60:5a:a9:18:
         59:c7:bb:12:55:21:a7:ab:0b:af:61:98:65:8c:3d:79:f2:3b:
         51:e2:bd:9e:cc:9d:da:6e:08:0f:c3:b7:30:d1:48:df:de:81:
         9c:00:b3:37:bf:ac:c6:e9:d5:43:17:e6:81:66:12:81:1a:7f:
         97:1f:4d:b5:63:19:54:1e:0d:e0:e8:65:5b:d5:ff:36:b9:93:
         12:6e:84:cb:60:2e:c2:69:3a:58:1b:89:86:74:d5:3e:47:b8:
         ac:4c:47:cd:76:b7:06:c0:4e:c4:cc:11:de:4b:35:1a:70:c8:
         e0:8d:c8:0c:89:9b:cf:bb:19:24:82:c8:53:e7:f8:f6:45:18:
         c2:ba:99:99:92:c3:06:69:6b:f8:cc:d7:9e:b9:02:98:02:a9:
         1e:03:d0:ec:9a:ca:3f:cb:f1:09:f4:cd:ef:ec:b1:c9:e2:4b:
         fd:80:9a:a8:f3:85:a3:4a:b7:02:cc:75:dd:22:21:5f:ea:95:
         d8:e1:89:6c:85:b0:79:83:58:39:63:80:9e:34:59:fa:36:3d:
         ed:df:6b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 21:10:45 2026 by rpki-client