This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
File:                     UM3WDPjzEj_evOkIgq83u-PvXEg.mft (raw, json)
Hash identifier:          6fDbRId0dpso4tnya/XaBoLp4Y0H6dM9wH+ogl8L1jc=
Subject key identifier:   6A:E4:90:6C:C7:DB:1A:32:00:98:30:24:DE:DF:E5:6E:3A:E3:D4:10
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Certificate issuer:       /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial:       07E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
Manifest number:          07E2
Signing time:             Sat 24 Jan 2026 20:36:16 +0000
Manifest this update:     Sat 24 Jan 2026 20:36:16 +0000
Manifest next update:     Sat 31 Jan 2026 20:36:16 +0000
Files and hashes:         1: UM3WDPjzEj_evOkIgq83u-PvXEg.crl (hash: Mr2+AonoNcpagTt2BFyUH2HWY1uQIaVQzj3eGNnyWvI=)
                          2: 5BF797081CF411EBB5ADE642C4F9AE02.roa (hash: v+COy4aJ4vI2kVsinHUDpF8Q9iJxgP+snNqHCNRWWC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
                          rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025 (0x7e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
        Validity
            Not Before: Jan 24 20:36:16 2026 GMT
            Not After : Jan 31 20:36:16 2026 GMT
        Subject: CN=69752d40-0abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:f9:fd:54:55:5a:09:59:ac:68:a1:43:be:
                    03:41:da:af:c0:a8:6e:a2:d2:55:e4:62:2d:da:23:
                    7f:3d:d7:86:d3:5b:72:b9:03:42:e9:84:57:9f:fc:
                    c8:f8:73:12:a7:e1:e9:a2:40:76:65:9a:23:d4:04:
                    26:9c:8e:96:5e:a7:4f:d1:6c:f1:e6:57:14:c4:11:
                    e8:df:42:13:19:a4:16:47:9d:9c:6a:d4:d8:db:81:
                    8c:82:36:fb:d0:1b:1b:74:80:01:ed:f1:b2:9b:1b:
                    1c:df:2b:40:b1:ca:98:4f:d2:d6:ad:54:f2:7e:d0:
                    7d:2d:d8:6a:01:ca:4f:73:bb:bc:eb:d2:ad:9f:77:
                    19:a0:f8:3c:2c:b4:d2:d8:12:e2:cb:57:da:9a:1e:
                    70:3c:e0:a5:95:d2:68:a0:59:b5:5d:ba:05:96:48:
                    64:fa:9c:1f:0d:d1:36:37:b9:0e:12:af:87:fc:a0:
                    ba:c8:3a:e1:06:c2:6e:cb:6d:19:b0:7b:e1:49:7b:
                    a6:5e:07:cb:97:56:19:c3:ce:10:0e:04:c2:0f:bd:
                    95:fe:2d:80:41:ac:0d:bf:9c:a3:fd:2c:ab:17:83:
                    c0:a9:42:e6:0a:89:a5:22:ed:06:66:a6:8e:dc:79:
                    f5:e8:3e:c8:f4:f9:a2:1e:33:6b:95:96:8f:58:83:
                    45:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E4:90:6C:C7:DB:1A:32:00:98:30:24:DE:DF:E5:6E:3A:E3:D4:10
            X509v3 Authority Key Identifier:
                keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f6:25:eb:58:fc:b7:f2:35:b2:6f:bd:95:51:90:9a:14:a4:
         39:3e:2d:e5:a2:0d:9e:e2:25:c8:f1:95:cf:b6:85:12:52:e7:
         37:a5:a9:56:4e:d7:4d:86:97:37:c5:03:00:99:d5:41:12:9d:
         f5:45:ed:ce:93:a7:5e:81:eb:bc:5a:b8:ee:b0:48:e0:35:d1:
         44:3b:ae:ca:4e:7c:d9:be:9e:80:4a:f0:6c:47:61:e5:d8:02:
         0e:d2:a8:82:e8:31:ab:8e:5b:ff:45:57:e6:31:bb:23:e2:2e:
         01:a4:9e:ac:65:cb:bc:35:9f:c8:48:0c:3d:eb:fe:3c:d8:a2:
         4e:58:c6:65:76:52:0e:88:c6:a9:15:5c:14:25:f8:29:15:1a:
         45:6a:bd:9d:2b:ab:0e:28:ae:91:c1:f1:9c:a4:1a:9f:d8:4c:
         bf:4f:39:7b:e4:cd:38:86:b6:8c:b9:8c:33:f7:50:7f:43:5b:
         12:20:62:b3:91:be:87:4a:54:ee:a1:cd:7f:73:4c:cc:cd:12:
         31:d4:dd:c1:f0:54:63:bf:86:f3:ef:a0:0d:13:a7:42:db:a7:
         d5:d7:08:38:5e:31:89:1a:c6:f1:3c:0b:8c:05:69:64:70:3b:
         48:8b:7c:0e:d5:d4:a3:4f:23:e4:1b:eb:8f:7d:d4:56:23:a3:
         4b:32:7b:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC
RTNFRjVDNDgwHhcNMjYwMTI0MjAzNjE2WhcNMjYwMTMxMjAzNjE2WjAYMRYwFAYD
VQQDDA02OTc1MmQ0MC0wYWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1YT5/VRVWglZrGihQ74DQdqvwKhuotJV5GIt2iN/PdeG01tyuQNC6YRXn/zI
+HMSp+HpokB2ZZoj1AQmnI6WXqdP0Wzx5lcUxBHo30ITGaQWR52catTY24GMgjb7
0BsbdIAB7fGymxsc3ytAscqYT9LWrVTyftB9LdhqAcpPc7u869Ktn3cZoPg8LLTS
2BLiy1famh5wPOClldJooFm1XboFlkhk+pwfDdE2N7kOEq+H/KC6yDrhBsJuy20Z
sHvhSXumXgfLl1YZw84QDgTCD72V/i2AQawNv5yj/SyrF4PAqULmComlIu0GZqaO
3Hn16D7I9PmiHjNrlZaPWINF6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrkkGzH
2xoyAJgwJN7f5W4649QQMB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD
RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkM5NC84MjIyQzI3RTFDRjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVq
X2V2T2tJZ3E4M3UtUHZYRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA19iXrWPy38jWyb72VUZCaFKQ5Pi3log2e4iXI8ZXPtoUSUuc3palW
TtdNhpc3xQMAmdVBEp31Re3Ok6degeu8WrjusEjgNdFEO67KTnzZvp6ASvBsR2Hl
2AIO0qiC6DGrjlv/RVfmMbsj4i4BpJ6sZcu8NZ/ISAw96/482KJOWMZldlIOiMap
FVwUJfgpFRpFar2dK6sOKK6RwfGcpBqf2Ey/Tzl75M04hraMuYwz91B/Q1sSIGKz
kb6HSlTuoc1/c0zMzRIx1N3B8FRjv4bz76ANE6dC26fV1wg4XjGJGsbxPAuMBWlk
cDtIi3wO1dSjTyPkG+uPfdRWI6NLMnvv
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:18:37 2026 by rpki-client