This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
File:                     hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json)
Hash identifier:          UeJu38gp93alQqfX3RGNDloFaCuyTxPgl5h0lGvWr0Q=
Subject key identifier:   E0:BB:B7:56:B5:4D:83:93:21:D2:67:6A:C5:A1:7D:A8:3E:4C:2E:93
Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
Certificate issuer:       /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
Manifest number:          016A
Signing time:             Sat 17 Jan 2026 03:11:29 +0000
Manifest this update:     Sat 17 Jan 2026 03:11:28 +0000
Manifest next update:     Sat 24 Jan 2026 03:11:28 +0000
Files and hashes:         1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: YenERhyZ6Oy7OaERAar4QeQOsO9wbeN9SH8KiG9I0yo=)
                          2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: KDA4X80ZIhEfaXOrwxnaIcV2R9R3Y6caR0rkBLVbSuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
                          rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 03:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
        Validity
            Not Before: Jan 17 03:11:28 2026 GMT
            Not After : Jan 24 03:11:28 2026 GMT
        Subject: CN=696afde1-4f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:3c:9e:bf:30:5b:f6:55:3d:9b:73:7f:2e:
                    19:a9:8f:5c:cc:5a:8f:ce:e3:ce:3b:f7:4d:6e:6f:
                    65:bd:d6:e2:4e:6a:43:76:aa:45:47:20:4f:33:76:
                    bb:c9:78:19:fc:cd:5b:b5:49:e3:68:da:4b:aa:31:
                    95:9a:62:7b:58:af:fa:5d:40:63:6c:b6:c8:9f:92:
                    e3:97:2a:5b:85:f1:82:66:6a:dc:c9:02:08:56:25:
                    36:c1:25:1d:a8:3c:30:78:06:57:0d:8d:ce:51:94:
                    93:00:e5:c5:b3:71:45:32:7f:85:1c:9e:88:cc:3f:
                    3a:2b:44:e5:ad:99:3f:9f:81:d3:e1:f7:e0:69:f1:
                    0b:f4:ff:32:fb:0f:81:ce:d4:ca:04:bb:6c:53:7e:
                    55:9a:de:74:10:c2:2c:f1:bf:aa:8d:26:89:f4:22:
                    13:df:94:d9:72:91:73:8e:9c:4b:a8:e0:bf:20:ea:
                    5a:38:12:76:72:fd:61:17:09:6b:1d:b3:ec:6e:7b:
                    f7:30:38:e5:a6:9b:e5:56:69:66:b7:d9:00:f1:7f:
                    c1:b5:3b:c7:26:c5:d2:10:65:78:ef:28:6a:22:47:
                    b2:b6:c0:6f:8e:d3:df:6a:68:0f:b8:d6:3e:96:86:
                    f3:cb:31:c4:00:09:01:a1:ea:8c:55:23:96:b2:57:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BB:B7:56:B5:4D:83:93:21:D2:67:6A:C5:A1:7D:A8:3E:4C:2E:93
            X509v3 Authority Key Identifier:
                keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:11:c5:46:74:6c:5b:c6:e2:cb:28:f6:08:6b:f4:65:39:9f:
         3d:9a:0a:fb:e9:85:52:e0:f7:49:32:a8:ba:07:6f:d3:b1:79:
         a8:6f:b7:86:f9:8d:dd:e1:6d:ce:16:4f:b5:9d:e9:48:19:b0:
         39:ce:7e:10:0e:02:46:92:b2:5d:81:93:fb:99:63:85:7e:93:
         38:8c:fe:6a:91:3d:9e:41:7b:8a:5e:c7:2e:34:4a:f2:be:a6:
         ea:bb:58:52:0c:eb:6c:f0:bd:a9:7b:29:db:1e:87:e8:d9:87:
         9f:79:fd:74:21:26:fb:2d:63:73:65:ff:48:26:5c:f8:8b:7b:
         05:15:5f:b3:e3:e6:88:f9:d7:34:2a:8a:0e:11:0c:03:47:89:
         86:c1:e7:28:e8:7e:e8:58:19:27:3a:48:48:99:45:b8:fb:0d:
         09:72:81:8f:26:58:44:a0:64:6c:dc:c3:b1:27:b9:ab:56:9c:
         95:2a:1b:6c:40:6a:c4:ac:60:51:f3:e6:fa:a2:6b:d9:b7:5d:
         e2:c3:e1:75:35:87:11:ad:fa:a9:e2:ac:bc:f3:e1:5f:66:ea:
         a9:49:a5:bc:b0:8c:cd:7e:2e:56:9c:4e:aa:11:4e:50:c1:9f:
         13:93:76:46:e7:df:54:83:3e:0d:3a:88:7b:3a:be:2b:68:cb:
         ca:d9:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:35 2026 by rpki-client