This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
File:                     ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json)
Hash identifier:          hfna0oKoVp2++PW94imHDXo/d0lmyAzRfYK9jA9C3S0=
Subject key identifier:   D7:46:BB:AB:DB:95:D2:2C:EF:EE:F8:4D:37:87:81:12:5F:B2:7D:21
Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
Certificate issuer:       /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
Manifest number:          AC
Signing time:             Fri 09 Jan 2026 05:29:34 +0000
Manifest this update:     Fri 09 Jan 2026 05:29:34 +0000
Manifest next update:     Fri 16 Jan 2026 05:29:34 +0000
Files and hashes:         1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: g3HkrkmtARbUDQWSdiv0zIH0px0kdzTpcaLY66rkpmg=)
                          2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: b2BcNMesZ27DQqzlZd7MPdoju4HvYEGHIF6wjO+48TQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl
                          rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 05:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
        Validity
            Not Before: Jan  9 05:29:34 2026 GMT
            Not After : Jan 16 05:29:34 2026 GMT
        Subject: CN=6960923e-a474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:bc:99:7b:bf:67:7e:0b:e7:42:79:8b:d4:
                    48:af:42:f6:ee:cf:90:04:48:6d:54:72:28:39:ef:
                    c2:4d:33:14:b3:d8:6a:62:4f:38:61:ba:9e:b0:20:
                    39:5f:12:fe:40:22:5b:f4:4f:2b:3c:f9:21:33:db:
                    70:7b:c0:59:6c:70:b0:67:07:80:01:d9:d6:a9:71:
                    aa:31:59:ad:0f:76:cb:c6:22:46:e1:91:32:d5:ae:
                    9a:8e:0e:e5:75:a7:34:21:09:67:36:d0:29:56:6c:
                    2a:fc:10:d8:cb:51:a6:d3:9c:9c:04:d0:9b:fd:17:
                    b5:70:b3:f0:ce:65:3a:ad:cb:3b:7c:19:13:c6:53:
                    cc:51:d5:a5:92:c9:a9:8a:d8:77:14:8b:66:33:c3:
                    23:97:4f:f9:b0:01:d3:ed:c3:dc:0e:a2:86:78:f3:
                    05:6d:06:6d:48:37:87:5d:68:76:22:11:79:3f:a9:
                    b0:47:c5:72:a6:76:7a:dc:30:e0:91:3e:d5:de:1d:
                    2b:dd:8c:8b:4b:99:05:4b:6f:72:16:2f:97:dd:2c:
                    4b:fc:9b:a0:5c:93:66:2f:a1:af:a5:ef:8b:e0:65:
                    fb:d9:4d:b7:17:38:ea:3c:46:1d:6e:90:72:0c:19:
                    e5:ed:ba:1f:a2:17:ae:f8:8c:fd:9b:37:62:f8:d1:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:46:BB:AB:DB:95:D2:2C:EF:EE:F8:4D:37:87:81:12:5F:B2:7D:21
            X509v3 Authority Key Identifier:
                keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:6d:9c:70:b3:93:e6:bc:7b:3b:04:b7:5d:d3:35:be:57:f9:
         bf:c4:53:c2:55:3a:e7:d9:86:84:5f:51:7f:0b:21:13:27:12:
         f4:df:d1:65:39:87:a9:1e:91:c9:fd:33:ab:f2:50:3a:7c:34:
         a4:a4:b6:89:f0:d1:15:b6:fd:85:d4:76:89:9d:96:ea:f4:d1:
         16:9a:7a:c2:66:09:92:88:3d:18:1f:64:07:1d:43:3d:05:d6:
         bb:0a:46:8d:0e:e9:77:50:28:7b:a0:e7:b0:1a:7d:f1:fb:a8:
         e0:4e:44:28:3b:08:9e:7d:5f:67:d3:0f:29:65:c4:9e:40:29:
         bf:e4:0b:66:90:97:8f:c6:15:a3:df:fd:d5:b7:ff:6e:38:21:
         00:ec:0b:4f:a8:a7:81:65:6a:78:6d:f1:83:01:9d:4d:a5:37:
         fd:ad:75:3b:0d:e9:33:f2:72:8e:61:ba:f7:00:53:d6:14:34:
         d6:13:42:82:a0:38:a6:37:53:97:c4:24:7f:40:92:b9:ac:08:
         e3:59:5b:3f:ac:10:79:77:24:3f:e2:db:31:37:32:39:b2:0e:
         1a:cc:62:73:70:69:92:2b:fc:2f:78:04:ee:dd:fd:bc:4d:3b:
         d9:01:19:19:df:92:bd:33:7d:5c:59:50:d9:3a:6e:5f:a2:49:
         43:90:eb:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjk3NjYxMTAvBgNVBAUTKEM5MjQ2MDE0MjU3RUVGRkZGRTgwQ0QzRUFCRkVENjdB
ODk4RDZGNTcwHhcNMjYwMTA5MDUyOTM0WhcNMjYwMTE2MDUyOTM0WjAYMRYwFAYD
VQQDDA02OTYwOTIzZS1hNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Nu8mXu/Z34L50J5i9RIr0L27s+QBEhtVHIoOe/CTTMUs9hqYk84YbqesCA5
XxL+QCJb9E8rPPkhM9twe8BZbHCwZweAAdnWqXGqMVmtD3bLxiJG4ZEy1a6ajg7l
dac0IQlnNtApVmwq/BDYy1Gm05ycBNCb/Re1cLPwzmU6rcs7fBkTxlPMUdWlksmp
ith3FItmM8Mjl0/5sAHT7cPcDqKGePMFbQZtSDeHXWh2IhF5P6mwR8VypnZ63DDg
kT7V3h0r3YyLS5kFS29yFi+X3SxL/JugXJNmL6Gvpe+L4GX72U23FzjqPEYdbpBy
DBnl7bofoheu+Iz9mzdi+NE5fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdGu6vb
ldIs7+74TTeHgRJfsn0hMB8GA1UdIwQYMBaAFMkkYBQlfu///oDNPqv+1nqJjW9X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc2Ni84MEY1OUU5NEVB
NTcxMUVGQjQyQ0IyODVDNEY5QUUwMi95U1JnRkNWLTdfXy1nTTAtcV83V2VvbU5i
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OTc2Ni84MEY1OUU5NEVBNTcxMUVGQjQyQ0IyODVDNEY5QUUwMi95U1JnRkNWLTdf
Xy1nTTAtcV83V2VvbU5iMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXbZxws5PmvHs7BLdd0zW+V/m/xFPCVTrn2YaEX1F/CyETJxL039Fl
OYepHpHJ/TOr8lA6fDSkpLaJ8NEVtv2F1HaJnZbq9NEWmnrCZgmSiD0YH2QHHUM9
Bda7CkaNDul3UCh7oOewGn3x+6jgTkQoOwiefV9n0w8pZcSeQCm/5AtmkJePxhWj
3/3Vt/9uOCEA7AtPqKeBZWp4bfGDAZ1NpTf9rXU7Dekz8nKOYbr3AFPWFDTWE0KC
oDimN1OXxCR/QJK5rAjjWVs/rBB5dyQ/4tsxNzI5sg4azGJzcGmSK/wveATu3f28
TTvZARkZ35K9M31cWVDZOm5foklDkOsP
-----END CERTIFICATE-----
Generated at Fri Jan 9 08:20:21 2026 by rpki-client