This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
File:                     YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json)
Hash identifier:          B6SNmL1cZXggsW7wb3+mWSjOCSH5CVpkM1uTDBw80xE=
Subject key identifier:   5A:FB:90:7A:F5:0F:C1:D8:7D:5A:ED:13:04:45:E7:F2:A7:ED:73:C2
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Certificate issuer:       /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
Manifest number:          01D4
Signing time:             Sat 31 Jan 2026 02:34:38 +0000
Manifest this update:     Sat 31 Jan 2026 02:34:37 +0000
Manifest next update:     Sat 07 Feb 2026 02:34:37 +0000
Files and hashes:         1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: dgTWkHjT2LYnZ1Ompm0YUb/Vu0TJLRRvoT7AMH53Q+0=)
                          2: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: N6Bn0tjkAYOIirhCnX+L9qAa4FcrjkrvnPohqveujZw=)
                          3: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: TcFb5btGGuGcCTENXu84bKs3B+lnqciAGdu0W4Z7mP0=)
                          4: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: V8EYXGGM5ehfMXNVHQoJfhAKwYo57AeE/3ynyZdkMrY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Feb 2026 02:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247
        Validity
            Not Before: Jan 31 02:34:37 2026 GMT
            Not After : Feb  7 02:34:37 2026 GMT
        Subject: CN=697d6a3d-f712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5a:99:b2:6d:7e:7c:37:33:27:4a:0e:5a:77:
                    5f:8c:d9:f3:20:a4:2b:64:9d:ee:70:ea:8d:bd:ee:
                    a8:28:75:92:6e:d1:6b:01:db:9c:90:7b:ac:90:3f:
                    8f:0d:04:43:c6:01:38:4f:3f:e5:57:88:7e:bb:28:
                    ca:d5:57:2c:db:31:6c:cb:01:c4:d5:23:9a:e3:9f:
                    57:6a:14:17:53:48:4d:16:3a:db:fe:13:52:99:3a:
                    02:d6:d1:88:14:e4:d6:b7:2a:cc:5d:6b:1c:6d:49:
                    be:82:4e:44:64:43:24:6e:d8:71:e5:1c:53:2e:1e:
                    ac:17:c2:4b:38:cc:5b:b9:1c:cb:a3:d6:af:6f:4a:
                    e9:2e:5e:df:f6:c7:70:72:5a:6e:5a:c5:af:cf:7c:
                    6c:d1:c8:fd:51:3e:1e:20:62:9b:6b:2e:9a:70:f4:
                    31:fa:76:05:43:41:b4:d5:ff:87:7e:4a:ac:a6:3e:
                    fb:4c:2d:04:e1:06:23:62:4d:c3:52:3c:f1:c7:38:
                    32:e6:b7:d7:7d:ae:dc:06:aa:ba:fa:bd:03:ef:b6:
                    4e:92:68:6b:39:e5:17:10:86:8d:56:79:bb:28:5b:
                    1a:18:78:e4:dd:96:4e:b3:87:f9:c7:0e:c4:23:dd:
                    6b:63:a7:3d:50:4c:11:7b:f4:f1:55:a2:2c:68:a3:
                    2d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FB:90:7A:F5:0F:C1:D8:7D:5A:ED:13:04:45:E7:F2:A7:ED:73:C2
            X509v3 Authority Key Identifier:
                keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:3b:7d:02:4f:96:47:6d:1a:67:d2:f8:af:4f:54:86:ed:cc:
         09:a0:23:f9:6a:4f:50:72:21:ff:ce:85:41:df:de:01:60:89:
         92:73:65:ac:90:99:2d:fc:2e:a9:39:ce:8e:27:91:a7:c9:a1:
         74:3e:bf:97:fa:85:b4:d0:b7:cf:40:45:62:80:00:61:f9:95:
         62:ff:d9:c5:33:36:4e:fa:27:97:3d:f3:e6:90:8d:6d:eb:cc:
         99:d1:de:3f:2e:13:da:82:0c:35:97:97:fc:56:82:71:3d:3a:
         28:24:0d:d8:9c:14:e7:21:d8:41:57:1f:2d:01:d0:06:02:7d:
         8e:62:35:39:e0:7e:8a:8e:89:54:e9:f2:a8:5a:b9:3a:0b:a4:
         ea:a1:cd:94:e4:68:ba:38:57:3c:7b:f9:9b:f4:40:a8:29:70:
         d8:e9:27:87:9b:b7:c0:6b:e6:b6:73:96:c4:2f:44:52:1f:bd:
         07:a1:81:0b:28:83:44:73:da:40:59:25:1d:b7:35:7a:1a:c4:
         1f:67:04:13:34:b6:e8:b4:0d:a3:55:51:00:20:f5:ae:4d:a0:
         35:7f:6c:2d:d8:c8:bc:ee:50:eb:3a:58:a0:dd:c9:90:54:90:
         24:85:c9:b1:04:1b:e3:cf:77:65:14:6e:1d:6f:2a:b3:12:83:
         24:ec:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 12:22:10 2026 by rpki-client