This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
File:                     k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json)
Hash identifier:          yU3Zif52KvZmYAsyOsPh65UVIEJqbdAmS0X801Ppw/s=
Subject key identifier:   04:59:43:90:73:99:B0:33:8C:E5:7D:B1:D6:92:F8:AF:99:AB:DF:CC
Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD
Certificate issuer:       /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
Certificate serial:       04E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
Manifest number:          04E3
Signing time:             Sat 10 Jan 2026 22:59:27 +0000
Manifest this update:     Sat 10 Jan 2026 22:59:26 +0000
Manifest next update:     Sat 17 Jan 2026 22:59:26 +0000
Files and hashes:         1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: ngevU2wTucOHqUtNfcbIylYTb0Uw6w31CsbLp5jiK+Y=)
                          2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: QSS01Cht+60Ca3lCH+aUYEQ83cHrjHOe9Xz/oSR4PIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl
                          rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 22:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1256 (0x4e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
        Validity
            Not Before: Jan 10 22:59:26 2026 GMT
            Not After : Jan 17 22:59:26 2026 GMT
        Subject: CN=6962d9cf-fb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:28:f2:fe:be:6f:5a:64:0e:b3:4f:f1:31:
                    93:a6:52:61:94:4c:a3:01:0e:dd:3d:bf:50:e0:41:
                    2e:0b:f6:04:1f:18:65:09:e2:2d:63:d6:2b:90:62:
                    6f:1b:9d:ca:8c:29:ca:68:f2:73:18:a3:ea:da:95:
                    13:bd:fd:ec:50:c2:77:34:28:d2:d8:30:86:a2:b6:
                    7d:ab:4e:94:54:5d:20:64:c2:87:cd:9c:9b:54:3e:
                    73:18:c4:d9:4c:1f:84:69:35:d2:a9:24:9b:2f:a0:
                    a3:a8:dd:37:c6:92:d6:08:58:64:70:39:a9:7c:df:
                    e3:f6:f4:f5:52:6e:c6:23:3e:82:c4:f9:43:98:a9:
                    7e:47:32:51:51:35:a7:28:f3:cd:c1:41:65:14:a8:
                    d1:28:49:72:49:66:32:a8:1d:5f:0e:52:7d:a8:56:
                    a2:63:12:e6:c6:51:69:44:48:18:d3:e5:da:ef:cb:
                    12:4a:55:08:96:98:89:6c:32:a2:6f:09:a2:63:f8:
                    0c:62:c7:2c:54:a0:14:75:2d:50:1f:c0:39:44:97:
                    f0:fa:34:bf:3d:52:2b:6f:f2:6e:4c:c9:1c:39:90:
                    88:33:7d:0b:75:46:57:10:84:cf:ed:5a:89:bf:df:
                    de:4c:3f:3e:5e:c4:6a:83:e6:e7:d8:a3:9e:ec:34:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:59:43:90:73:99:B0:33:8C:E5:7D:B1:D6:92:F8:AF:99:AB:DF:CC
            X509v3 Authority Key Identifier:
                keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c8:d7:4f:46:89:95:4a:97:04:f5:b2:81:4a:8e:53:16:6b:
         bd:3b:15:d8:f1:3d:f3:b8:d7:de:bb:03:b0:91:4a:7b:bf:6a:
         aa:fa:f4:81:47:3c:29:2b:fe:5e:01:71:ab:b4:61:82:71:74:
         3d:ce:61:82:6e:63:ee:e3:4b:a1:f5:80:30:37:88:d4:c0:af:
         9d:a8:8e:a6:11:aa:d6:fb:14:29:16:27:f0:9c:0c:59:84:4f:
         20:39:65:62:9a:4c:5e:8c:31:90:91:c2:b1:2d:65:f0:17:44:
         a2:59:14:f0:41:81:e0:59:18:f9:49:0a:09:b6:40:36:a9:c4:
         6d:a5:71:3f:cd:6f:a0:46:61:8e:dc:fc:ff:7c:6b:0f:fd:e5:
         fe:c5:2f:62:cd:4f:e4:ed:97:6a:41:0c:4e:5d:1d:7f:f4:0a:
         23:49:dd:9f:41:5d:5b:5d:c8:93:4d:4c:ee:5d:12:ac:32:41:
         7b:cf:19:82:7c:c6:8d:2d:59:a3:54:80:80:11:96:9a:7e:97:
         ad:b2:55:11:a5:1a:24:ff:2f:36:a4:78:95:6e:ae:78:63:fd:
         39:03:92:87:eb:e9:00:f7:bb:9a:68:14:a5:1c:9e:eb:87:66:
         3d:1b:cc:e5:a8:3b:66:fe:dd:f4:f6:6d:a2:77:10:17:ef:d4:
         1d:26:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:03:50 2026 by rpki-client