This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
File:                     yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json)
Hash identifier:          B8jeaBzJyaPGCNyIQMBJGSnWS7AFMGFPNDmMGdVzV2Y=
Subject key identifier:   2A:E5:5C:E5:33:5F:D0:78:01:68:64:06:53:A5:85:C8:65:9E:86:14
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Certificate issuer:       /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial:       0254
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
Manifest number:          0250
Signing time:             Fri 09 Jan 2026 00:58:59 +0000
Manifest this update:     Fri 09 Jan 2026 00:58:58 +0000
Manifest next update:     Fri 16 Jan 2026 00:58:58 +0000
Files and hashes:         1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: r7bbjufC2AourSetrxN44qpWY1WVMmCayia0yOD2fwY=)
                          2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: 0dlbreUmhOPpVhne6aJZBNls5GiTDrN1TntwCVFUe0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
                          rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 00:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
        Validity
            Not Before: Jan  9 00:58:58 2026 GMT
            Not After : Jan 16 00:58:58 2026 GMT
        Subject: CN=696052d3-9982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:73:66:46:2f:db:07:36:95:a6:75:76:34:
                    a4:4d:c7:35:df:a6:ef:80:0a:ef:ec:0f:87:c1:e8:
                    1d:93:b7:6b:93:44:4e:9a:8a:af:d3:f4:31:54:d8:
                    bf:6c:30:92:27:d4:af:e8:b4:06:2e:da:82:de:c3:
                    6a:d0:ba:95:60:9b:fd:8d:73:4e:3b:2a:cc:c8:96:
                    ff:1b:54:61:b7:d4:32:d7:9d:06:8d:d1:f5:0c:1d:
                    85:b0:52:13:56:3d:f9:7d:a9:62:92:7b:53:df:56:
                    79:c0:35:d2:9a:7f:77:dc:6d:2a:62:4a:da:24:ad:
                    f4:8b:42:d0:10:3e:02:a7:05:1c:0e:54:dd:80:9f:
                    c0:74:26:10:5c:67:4d:70:82:76:35:2f:b8:38:af:
                    eb:ab:cc:d0:d0:db:1c:ba:a0:e8:71:8c:90:1c:66:
                    7a:bb:22:6f:7a:9c:16:81:80:7d:5f:33:75:57:94:
                    f3:96:d8:69:bb:d1:cd:ed:2a:eb:f5:ed:22:a8:5b:
                    8f:de:de:ff:5f:ed:45:e6:02:0f:e9:08:30:d6:e6:
                    8d:c4:39:71:33:9e:39:cc:a6:5b:bf:cb:80:3b:ed:
                    43:90:5d:18:4a:db:1c:d1:b0:d0:f3:57:21:32:16:
                    e3:fc:d2:8c:5c:ec:82:12:1a:29:20:81:bd:e7:ad:
                    67:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E5:5C:E5:33:5F:D0:78:01:68:64:06:53:A5:85:C8:65:9E:86:14
            X509v3 Authority Key Identifier:
                keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:59:e0:cd:2b:9f:76:39:c5:04:b5:cd:b0:0e:0b:d8:36:35:
         02:28:a6:e3:14:72:75:fb:94:09:c1:84:18:1b:2f:2b:3b:13:
         a9:8c:24:64:cf:d7:23:5a:e6:2d:3f:fd:76:18:ec:84:7f:3e:
         09:c8:99:0e:78:fe:10:d3:c6:fe:11:3c:22:d2:61:13:c5:f8:
         42:ac:ad:49:c7:ed:e9:f3:ad:df:82:70:04:dd:13:67:5a:a4:
         34:d5:fb:2a:fa:c7:bb:5b:dd:aa:9c:95:7b:8a:65:d7:1e:af:
         0a:17:26:87:25:82:08:75:f9:59:61:c6:3e:93:02:46:23:fa:
         f3:39:87:ae:23:a1:94:ac:52:06:5b:4f:68:aa:5b:0d:b6:90:
         f6:c7:34:d5:77:7d:3d:4d:36:16:3f:88:50:bb:5f:46:77:10:
         0b:b3:11:c0:23:81:c0:53:27:ab:5c:19:99:4e:13:a1:7f:f1:
         5d:a5:be:6d:e4:88:41:41:31:27:0a:47:85:2d:ba:bd:d1:10:
         6a:69:f1:bb:06:e7:9d:42:c0:e4:ed:46:64:3c:bf:18:7e:d8:
         05:1b:2c:c6:e3:ff:be:e3:8b:7a:db:43:f0:1a:76:3d:09:73:
         60:3e:64:c4:5f:8f:72:1a:21:69:30:4c:ae:49:7d:36:4a:91:
         64:0a:37:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:41:53 2026 by rpki-client