This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
File:                     UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json)
Hash identifier:          dChww0Sptxr1rx9Mh9RjzQFMmHidLXQHMnl5pDCIYeI=
Subject key identifier:   24:78:1A:4B:27:81:10:3B:BF:2B:2C:AE:3D:21:77:7A:B9:FE:AB:32
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Certificate issuer:       /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial:       09C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
Manifest number:          09A3
Signing time:             Sat 24 Jan 2026 19:32:12 +0000
Manifest this update:     Sat 24 Jan 2026 19:32:11 +0000
Manifest next update:     Sat 31 Jan 2026 19:32:11 +0000
Files and hashes:         1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: 2GfJgQFUsLX7wZYFzjSLqiYsrE307HSmdOsrT4uo2hc=)
                          2: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (hash: nXVtsybD/p0SClRwWP9c2+ZIMGXniljjDK2EFaKpa7A=)
                          3: 11DBC0ACEB3211EFBDFC3E0FC4F9AE02.roa (hash: zYdZV0PmY995jxBgObVxrNeEKm4srCzVt7whFrsxdT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
                          rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2496 (0x9c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
        Validity
            Not Before: Jan 24 19:32:11 2026 GMT
            Not After : Jan 31 19:32:11 2026 GMT
        Subject: CN=69751e3c-3213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:df:0c:05:e3:b7:cf:5f:60:06:05:6b:7c:
                    88:ca:51:55:95:ea:aa:d1:b2:cd:8d:38:0a:03:07:
                    7e:28:10:64:98:fd:29:28:a7:c9:ba:a9:bf:73:66:
                    84:e4:ac:60:13:ce:30:2c:a2:25:9c:1a:7f:70:b9:
                    6b:67:ff:34:7f:75:63:1c:0d:48:c0:65:b4:4c:d2:
                    d0:88:b1:3a:1c:33:e8:ea:1d:00:e6:12:98:e7:92:
                    f0:f0:0f:5c:b0:48:ca:33:cf:4c:41:c9:52:65:51:
                    94:f5:53:b8:42:c5:78:14:7a:a3:fc:fd:c0:a4:49:
                    eb:2f:df:99:59:ea:e6:cc:28:93:b1:f6:ca:77:c1:
                    77:4b:bd:19:9e:48:8a:d8:47:48:51:75:1b:6f:ec:
                    4a:71:ff:f7:f3:2f:0e:7a:46:94:e3:93:73:9e:5c:
                    3d:09:e8:17:bd:89:25:cd:ef:7b:92:65:38:5b:4b:
                    92:c9:0a:d6:4f:f7:c0:41:00:f7:31:11:45:c2:5a:
                    a1:4f:15:6f:98:01:b5:2f:f3:3d:fe:c2:43:96:68:
                    57:a1:d0:1f:5c:a8:f3:13:69:4f:d0:ff:81:83:61:
                    45:a2:81:c0:5e:3b:e4:9b:d8:84:15:68:69:11:86:
                    a2:20:51:8c:f2:12:9e:e0:1e:c3:c6:ce:42:06:8c:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:78:1A:4B:27:81:10:3B:BF:2B:2C:AE:3D:21:77:7A:B9:FE:AB:32
            X509v3 Authority Key Identifier:
                keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:6c:f6:d6:27:7d:a1:43:37:72:75:26:5f:2c:60:28:29:a5:
         a7:d1:11:f0:27:6a:18:ca:7a:8c:a1:f9:77:2d:32:90:0f:94:
         16:3e:6f:2d:ac:cc:03:29:13:00:90:fd:86:bc:2c:12:a1:43:
         e6:ef:be:7a:dc:69:fc:e7:4b:46:dc:ab:7f:d4:5d:88:79:2f:
         16:6f:3d:37:74:06:83:64:d2:55:b5:e5:48:e3:38:20:80:c1:
         c5:20:25:72:a4:85:99:70:9e:e7:4f:3f:27:4c:c9:8a:6d:f5:
         0c:67:ab:4a:df:b0:c0:45:be:79:22:78:28:68:b2:3a:44:3e:
         7c:ca:cd:2d:0b:47:a5:a8:70:0d:d1:1e:37:17:6b:b8:00:63:
         f9:8f:df:31:ab:e1:d1:69:ff:6d:ee:5b:ee:54:7d:aa:9e:ca:
         11:a9:47:23:b7:e2:87:24:9d:1d:76:c5:49:6d:e4:8b:b5:47:
         bb:2e:f0:a0:e3:f3:c0:fb:2b:c5:bf:7d:98:5c:83:b3:a1:77:
         1d:5d:cd:9d:7a:99:fb:4f:10:72:11:45:4b:ef:f1:06:4b:77:
         17:aa:26:9b:db:f8:c8:81:f7:6b:fb:83:6c:a4:c4:44:5e:cb:
         85:ef:61:89:69:2f:35:8e:f8:c7:be:13:88:b9:97:f9:87:d0:
         61:11:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:40:30 2026 by rpki-client