This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
File:                     _yC8N52JoNs75vzykPo91S63-iA.mft (raw, json)
Hash identifier:          MCXFWZXkXYQorwd92PvSREFHBDQwQA3gho8PgSAj2Vw=
Subject key identifier:   ED:C0:9B:C8:B1:EC:26:4C:8F:3F:00:65:00:6E:11:B5:82:30:72:99
Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
Certificate issuer:       /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
Manifest number:          C5
Signing time:             Thu 05 Feb 2026 15:44:22 +0000
Manifest this update:     Thu 05 Feb 2026 15:44:22 +0000
Manifest next update:     Thu 12 Feb 2026 15:44:22 +0000
Files and hashes:         1: _yC8N52JoNs75vzykPo91S63-iA.crl (hash: 0kGbWahM1CfIvIiNMatM3O37VvojKNnVr4jmLBwbYAY=)
                          2: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (hash: nu6vV7I7XftbdgSwTW1KDbV9LGYdQh4qQAZVOqr3uDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl
                          rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 15:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
        Validity
            Not Before: Feb  5 15:44:22 2026 GMT
            Not After : Feb 12 15:44:22 2026 GMT
        Subject: CN=6984bad6-e23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:83:6d:72:78:b1:f4:f8:cb:36:f2:ac:bc:a2:
                    18:9d:03:0d:8f:7e:f7:09:92:41:b4:c0:9f:84:ad:
                    ac:ed:f9:42:25:8a:bd:a8:d0:07:e2:43:64:cd:b4:
                    5c:10:ca:da:08:79:aa:ba:cc:b0:d1:50:20:48:12:
                    05:50:9a:db:a6:58:a8:61:a6:ba:a5:05:70:85:fd:
                    da:24:77:8e:b0:aa:47:3f:11:8b:8a:46:47:f3:ca:
                    3d:18:24:76:85:69:cf:aa:66:e4:32:6c:e2:96:23:
                    75:39:5e:f2:99:f6:82:76:32:3f:ae:ca:36:64:10:
                    86:73:c7:39:31:a4:33:2c:0e:06:a7:0b:14:38:dd:
                    b2:4a:ba:9b:c2:03:0f:fe:d9:f1:8a:3c:94:35:df:
                    d6:df:24:d8:d3:bb:63:4f:c7:c7:be:e5:7d:45:48:
                    a0:2c:7d:5a:c7:58:11:d0:84:55:49:18:81:19:5f:
                    55:aa:27:f7:d3:d8:d5:a2:52:dd:52:51:61:08:30:
                    36:ff:fa:f0:b2:d9:c8:31:85:37:05:fd:e3:0d:98:
                    6c:af:ba:0a:56:e7:99:c5:87:97:d2:ab:e7:91:5f:
                    95:83:3f:e3:8f:d8:da:61:f6:19:36:9e:60:92:8e:
                    bf:c6:f5:2b:f8:fb:3f:43:3b:04:17:c3:fd:4f:8b:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C0:9B:C8:B1:EC:26:4C:8F:3F:00:65:00:6E:11:B5:82:30:72:99
            X509v3 Authority Key Identifier:
                keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:71:aa:1e:f0:87:80:5e:29:d9:72:99:d6:69:52:0d:f7:97:
         04:84:9c:5c:1f:a5:3e:d9:67:8b:87:92:4a:76:dc:b3:28:46:
         08:70:85:d6:89:5e:19:ca:01:be:37:15:4d:c4:22:ca:43:c8:
         2b:33:89:c1:43:8e:88:64:40:74:4a:9f:35:16:9e:1d:31:7f:
         7e:a3:3f:d6:40:fe:94:94:c6:ca:9f:07:fa:36:bd:6a:7d:8f:
         e6:3d:2d:3d:22:d5:d8:ef:b0:9d:70:51:cb:cb:92:81:1f:1a:
         c8:d9:ab:cb:9d:cc:b5:95:73:2c:a9:c3:a1:85:21:c6:16:5f:
         ce:b0:59:15:8a:68:8a:0f:e9:46:57:1e:b7:0d:48:78:bb:8c:
         f2:39:8b:55:2b:57:a0:fa:f5:06:be:e0:91:98:73:45:66:4d:
         5d:42:fc:d9:27:fc:d0:fc:5a:39:23:f5:66:b1:2a:d8:3a:48:
         33:d1:f2:ec:b8:ce:bc:d5:dd:a2:b1:b1:a4:47:2b:d0:56:3f:
         26:e3:15:e3:07:40:4a:db:a7:6c:b5:e8:3c:33:ba:c1:35:a5:
         ed:53:fd:70:7d:38:a7:be:a5:75:d8:97:4d:15:6f:6f:80:a7:
         4a:d1:95:b6:91:c0:ce:59:62:3f:34:dc:95:a8:bd:df:16:32:
         66:31:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 21:13:09 2026 by rpki-client