This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
File:                     yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json)
Hash identifier:          NA0WB+GQGioyQz/V+Sd559r7vTbU3y/OU3ftZuidzVI=
Subject key identifier:   B1:65:FA:11:D3:FC:4A:D1:AE:28:28:B1:9F:01:BC:6B:AD:26:71:36
Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
Certificate issuer:       /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Certificate serial:       0DD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
Manifest number:          0DC3
Signing time:             Sat 10 Jan 2026 17:33:05 +0000
Manifest this update:     Sat 10 Jan 2026 17:33:04 +0000
Manifest next update:     Sat 17 Jan 2026 17:33:04 +0000
Files and hashes:         1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: wcsLmlrOaURQScYOCy8T3IFeTgHmv1uuwUAxE8AUdd0=)
                          2: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: h9Ek+uVHJkd43jpvXLhIeId4TZWOhn+0W2MAspUZuOw=)
                          3: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: +QLq15+GCrbTMv3T/U18UwN/WHFJnfWgXMxuf5yq0ts=)
                          4: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: sy4Su4ASjc+OqwWE5jPxA/U7NJeDsxDapY34Q7SzDAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3544 (0xdd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
        Validity
            Not Before: Jan 10 17:33:04 2026 GMT
            Not After : Jan 17 17:33:04 2026 GMT
        Subject: CN=69628d50-6a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:74:37:58:8a:07:57:6b:99:78:c2:29:63:
                    a7:d5:09:d8:9b:56:fa:bb:18:28:e5:cf:ab:ac:4f:
                    8e:52:4d:69:0b:2a:9f:ef:65:21:d0:30:c1:72:53:
                    52:5e:7c:3c:68:bd:f6:15:42:44:05:c5:59:52:c3:
                    32:a9:4a:64:6e:5d:fe:71:bb:da:ab:65:26:de:f0:
                    ba:e8:29:a5:1b:de:8a:3f:b8:77:f8:43:19:5e:37:
                    32:0e:86:64:40:41:cd:4f:fa:b8:b0:ff:3d:70:3d:
                    33:e4:e9:62:7f:0b:84:cb:26:a9:cc:31:71:96:f5:
                    22:2f:d8:fb:97:d7:cd:e3:fb:50:18:03:93:db:0f:
                    67:14:33:43:1d:08:6f:41:96:86:a3:d9:a7:18:9b:
                    a0:2b:27:33:73:9f:5a:87:3b:8c:72:22:5f:d1:d1:
                    dd:79:cb:46:65:f2:39:5b:a3:6d:6d:5b:a9:66:5f:
                    fc:06:59:fb:ca:02:40:65:1b:47:4a:82:25:a3:f8:
                    e4:34:1d:5e:bc:bb:10:ee:cf:94:e3:17:03:74:a3:
                    b0:dc:bb:56:3d:bb:09:fc:08:a8:6a:29:9f:6d:a2:
                    22:4e:40:57:92:2d:12:0c:fa:ef:71:56:5d:72:6b:
                    6c:f4:98:fe:ba:29:02:ac:75:58:18:64:2d:99:86:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:65:FA:11:D3:FC:4A:D1:AE:28:28:B1:9F:01:BC:6B:AD:26:71:36
            X509v3 Authority Key Identifier:
                keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ff:1c:22:b3:c7:4f:53:8b:6f:f8:5a:18:2a:ec:da:bf:86:
         a3:42:4d:e6:1c:e1:b3:d9:98:47:07:d3:d5:89:3a:d6:da:24:
         92:5d:7b:f4:90:20:3e:78:52:0d:a3:76:0b:02:6e:43:70:23:
         3f:7f:7f:10:eb:50:ed:fa:ae:0c:83:49:13:46:98:55:37:49:
         fa:0e:55:87:f6:eb:ce:33:8d:35:b9:10:9b:c1:e6:e3:60:bd:
         0b:18:bb:19:a2:dc:3c:7d:b8:74:ef:7e:4e:fb:cf:a7:53:94:
         a3:2b:1f:76:0c:37:14:a2:c2:04:8d:c6:40:49:5f:b2:01:53:
         1e:67:2f:ee:3b:bd:b8:f4:38:9b:39:5a:8e:59:0f:58:56:f3:
         e8:18:30:80:98:6c:5c:f1:9c:1c:8d:c7:c3:05:48:38:38:f6:
         67:ea:59:78:ed:4e:5d:c7:34:df:82:61:41:15:4b:f5:ee:3b:
         0f:12:d3:04:cd:79:22:54:39:fb:34:7d:b1:04:6e:07:b1:5e:
         64:f4:01:68:94:b8:7e:de:48:ee:6b:e4:f9:a2:49:bc:2e:5c:
         b0:62:4f:a8:b7:69:1d:e3:f1:b6:32:94:3c:03:e2:4f:ce:36:
         f7:0d:e4:b3:47:cb:f8:59:e6:84:23:b7:c4:0e:69:04:24:92:
         46:14:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:55:47 2026 by rpki-client