This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
File:                     uDIFubLHQGPjdvNxFYOXBe277Ng.mft (raw, json)
Hash identifier:          AzFaIYDNi3wEvhcL00X9vJI3tY7NzDZ7cXbNfX0KXks=
Subject key identifier:   8B:60:C7:8D:4D:46:DB:32:2D:9C:50:19:45:BC:60:65:AD:31:8F:9E
Authority key identifier: B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8
Certificate issuer:       /CN=A9130138/serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8
Certificate serial:       03B2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
Manifest number:          03AD
Signing time:             Sat 24 Jan 2026 23:52:19 +0000
Manifest this update:     Sat 24 Jan 2026 23:52:19 +0000
Manifest next update:     Sat 31 Jan 2026 23:52:19 +0000
Files and hashes:         1: uDIFubLHQGPjdvNxFYOXBe277Ng.crl (hash: k6UDT29mmN0q/Ssq3HxIV5YTr5nFejXcEorAsUcf4mY=)
                          2: A7DEA0DAC47D11ECB544A26DC4F9AE02.roa (hash: f9p5nsZx4jMNkGPcJOkOhsmegpIzdL9T3kUEUM+NbsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl
                          rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946 (0x3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130138, serialNumber=B83205B9B2C74063E376F37115839705EDBBECD8
        Validity
            Not Before: Jan 24 23:52:19 2026 GMT
            Not After : Jan 31 23:52:19 2026 GMT
        Subject: CN=69755b33-e161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:e6:c2:de:ee:2d:a3:c5:1c:47:00:59:0b:
                    53:cf:62:76:9a:72:bc:c9:aa:02:89:d7:42:f5:0b:
                    0a:0a:0d:0a:f9:d2:ac:0e:c6:90:70:60:9b:d3:f2:
                    6c:b5:59:c3:82:2a:d7:82:c2:46:87:91:3e:30:e0:
                    c0:99:62:29:a2:80:af:7a:24:ed:cb:5f:45:5d:a1:
                    7e:96:21:a0:ec:ac:fe:0c:7a:37:a9:4a:6b:35:45:
                    72:62:7c:d5:e2:4f:f8:73:9b:ec:9b:b8:f0:ea:27:
                    fa:c6:4c:a3:d3:15:58:d4:06:fa:5f:c2:50:f1:ff:
                    31:64:9f:6d:55:af:11:2b:a8:5a:00:19:b1:1e:99:
                    77:18:88:6e:37:70:80:4b:d7:e7:05:bd:99:f1:ca:
                    7d:2d:45:78:5a:b7:68:e4:dc:97:9c:48:1a:ad:70:
                    7a:53:73:1b:6c:9f:bc:45:2b:03:0d:61:b1:61:d1:
                    0c:a0:50:bd:1d:b8:9b:2e:fc:51:ea:3b:35:a7:04:
                    c5:d7:cb:33:d7:f7:2b:71:d5:94:15:f6:4d:fd:12:
                    ac:1a:2d:4a:9c:75:38:5e:2e:ec:85:c8:7c:8c:c2:
                    2e:2b:a7:6c:6b:32:97:b5:47:83:27:29:68:1f:fe:
                    8c:a8:1e:42:d3:b6:7b:bf:78:f1:13:4e:40:0a:21:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:60:C7:8D:4D:46:DB:32:2D:9C:50:19:45:BC:60:65:AD:31:8F:9E
            X509v3 Authority Key Identifier:
                keyid:B8:32:05:B9:B2:C7:40:63:E3:76:F3:71:15:83:97:05:ED:BB:EC:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uDIFubLHQGPjdvNxFYOXBe277Ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/59FBA2B2C47A11EC8B344964C4F9AE02/uDIFubLHQGPjdvNxFYOXBe277Ng.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a6:9d:3d:12:99:48:2a:e5:19:ae:98:35:92:27:41:00:4b:
         69:33:52:6d:af:26:50:84:51:a3:66:8b:fd:0f:8a:37:9b:9d:
         12:a0:55:57:d6:71:1f:a5:20:b7:3a:ff:24:d6:4a:5c:d4:74:
         59:17:fa:d0:21:7a:60:a8:e8:d2:62:36:e6:94:11:c9:c8:a9:
         38:34:01:0d:a4:2b:62:4f:fc:b9:ef:27:47:7b:86:e8:3e:67:
         df:53:7a:d4:b5:0a:50:47:a6:9c:2d:be:3b:ae:7e:eb:d6:1a:
         00:20:44:e0:f9:9f:73:2b:c1:be:ad:8a:20:c3:47:4a:37:9c:
         16:db:78:22:b6:30:b9:ee:1f:7e:82:c0:60:f9:fd:bc:0e:f1:
         89:a9:92:57:55:90:e9:c6:b9:6e:89:9f:d9:e7:2a:14:c8:a3:
         69:ec:56:7e:22:01:15:70:90:c6:15:6b:3e:a2:99:b9:9b:47:
         b4:ae:0d:99:ce:6c:de:ee:fe:ec:79:de:68:f2:2a:80:09:59:
         03:10:16:97:61:c2:eb:19:bd:b3:29:66:1e:4f:db:f9:df:71:
         64:be:f3:a2:58:d1:17:d4:12:76:f6:55:86:c2:9e:b5:1e:0b:
         f6:d7:3a:8f:f9:9f:24:d9:5b:5c:ed:5d:9b:06:52:ee:b3:9e:
         a7:5c:a1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:12 2026 by rpki-client