This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
File:                     ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json)
Hash identifier:          +9upKAfL7sJf4/GqdGpktO0OqnLcjy1rZzljx8gxdco=
Subject key identifier:   FC:68:43:44:41:83:F2:42:2D:02:4B:EC:B8:D5:F8:16:46:BE:5F:23
Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
Certificate issuer:       /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
Manifest number:          25
Signing time:             Sat 17 Jan 2026 06:44:14 +0000
Manifest this update:     Sat 17 Jan 2026 06:44:14 +0000
Manifest next update:     Sat 24 Jan 2026 06:44:14 +0000
Files and hashes:         1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: rh37YWR//N60o4CE0g/GD9SCsyVXFshroRf5Xz9VI/c=)
                          2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: OJEG2iMlHS+dlOzTygzni5AYhZaYZz74JLyfsdZ4HV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
                          rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
        Validity
            Not Before: Jan 17 06:44:14 2026 GMT
            Not After : Jan 24 06:44:14 2026 GMT
        Subject: CN=696b2fbe-b33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:03:32:dc:78:1b:75:89:10:bb:23:53:c8:
                    20:6d:3e:b7:0e:96:4a:a6:25:90:d2:4a:8f:63:d2:
                    53:3e:f4:83:28:b8:5f:7a:e4:14:fd:ed:e3:2b:41:
                    15:93:2c:b2:90:df:6a:16:ec:24:3a:56:51:cb:ff:
                    a6:51:3f:c6:0e:4d:9d:2b:2f:bd:93:1d:b1:7f:f3:
                    24:04:72:de:fc:01:92:bb:9d:a9:9b:c6:04:fa:7a:
                    fd:a2:bd:e9:e2:45:d5:bf:9f:d0:23:58:5f:f9:ec:
                    c8:3f:89:8d:24:63:4f:07:85:83:9a:33:8d:0f:ca:
                    24:3b:db:71:87:32:72:c5:c0:02:08:63:f9:02:1f:
                    74:77:d4:c5:45:79:69:fc:cd:2b:42:92:f2:cc:c1:
                    fa:38:26:be:52:fb:73:93:19:93:f8:94:64:e0:d5:
                    c1:bd:f4:9c:1f:87:fb:8c:12:ea:a4:37:95:55:19:
                    fd:d3:57:d9:e6:bb:03:8d:7d:0a:4c:1a:32:2e:b6:
                    42:09:6d:70:8d:1d:d5:ca:e0:b9:23:d0:2f:fb:e7:
                    18:ba:d7:4a:5a:3b:c4:61:1c:00:b4:b4:55:00:20:
                    c5:0d:09:01:77:c0:4b:15:ba:2d:4e:5f:50:b4:90:
                    7a:ce:bf:7b:32:84:19:9f:a3:4f:6f:37:a3:22:83:
                    e0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:68:43:44:41:83:F2:42:2D:02:4B:EC:B8:D5:F8:16:46:BE:5F:23
            X509v3 Authority Key Identifier:
                keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2b:5d:55:3a:3b:1e:12:d3:3d:1e:4b:0c:ed:43:61:b4:2f:
         e9:a1:94:b9:82:e9:d5:a3:76:b0:93:6b:9c:25:2c:9f:d7:38:
         7c:e1:bd:95:78:09:c1:47:61:8a:71:b1:b4:39:44:b8:df:23:
         d1:08:5b:e2:78:fd:7c:ab:ae:aa:9a:e4:b0:10:4d:8c:ad:cb:
         30:2c:d5:5c:43:d5:3c:72:e7:67:04:e3:de:0b:d7:ef:37:ec:
         a5:b1:28:c5:67:b0:c7:32:73:ef:83:f7:58:f6:a4:0c:ba:fa:
         4c:46:a1:ad:cb:26:bb:e9:68:fd:2b:6b:ed:32:ce:70:3c:79:
         e2:bb:b4:a1:7f:1c:fa:aa:f2:45:b8:67:cd:3c:8c:59:79:3a:
         3a:b7:eb:34:77:bb:d9:1a:d1:c0:5e:d4:bd:81:ac:1a:71:60:
         3b:12:41:a9:63:33:54:95:b0:22:e5:60:16:38:fd:84:e9:52:
         96:da:bf:ec:e4:99:dc:d4:f0:da:2d:88:99:02:9b:cd:11:83:
         df:51:ef:35:1a:f9:22:ef:6f:cb:35:ab:89:93:97:24:8f:d1:
         32:d0:45:ef:82:6f:10:cb:66:38:08:dc:dd:55:53:ee:2f:d8:
         e2:50:d6:06:ad:8e:c8:03:3a:26:0b:5f:71:ad:d0:79:cd:ed:
         1d:7c:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:09:52 2026 by rpki-client