This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
File:                     U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft (raw, json)
Hash identifier:          J+UOm7OOswxkUg7AKwYv8psEhrkoMoGZW20juEsMmCg=
Subject key identifier:   5A:6D:12:7B:2C:F6:72:AA:E4:47:27:56:F7:81:2B:19:C6:D3:E9:B0
Authority key identifier: 53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF
Certificate issuer:       /CN=A9130837/serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
Certificate serial:       0524
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
Manifest number:          051C
Signing time:             Sat 24 Jan 2026 22:49:37 +0000
Manifest this update:     Sat 24 Jan 2026 22:49:36 +0000
Manifest next update:     Sat 31 Jan 2026 22:49:36 +0000
Files and hashes:         1: U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl (hash: jftx7O1lBgFOJ+5n7uN4jSp+3roQDeWL3CULENwrYWQ=)
                          2: 1C032F5A36E711EC9581EC54C4F9AE02.roa (hash: zUvIyZQWJmUN/whCAHbha9fHrVDz2p8tvRwoEjb9vCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl
                          rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130837, serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
        Validity
            Not Before: Jan 24 22:49:36 2026 GMT
            Not After : Jan 31 22:49:36 2026 GMT
        Subject: CN=69754c80-ac16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:98:85:23:a8:79:ba:09:ca:c4:b2:60:8f:
                    c0:9b:f2:c0:ac:c5:fa:b3:1a:1c:f5:64:d5:fc:f2:
                    8e:28:98:7d:43:f8:46:5d:6a:5b:35:52:a6:f2:6a:
                    e9:2b:a6:b8:ff:22:bc:5e:24:1b:18:76:84:c1:3e:
                    96:4b:a5:13:12:a4:d8:e3:ae:34:f9:3d:a7:f1:bd:
                    53:8a:01:9f:c2:2d:fe:2a:5b:e2:40:5c:0c:30:72:
                    72:02:24:fe:36:8a:b0:70:1e:c6:1c:a1:b0:9e:97:
                    0a:43:70:cc:df:fe:b1:63:e7:d3:81:bb:71:66:48:
                    92:b3:1f:8f:23:1a:24:87:73:9f:b6:3e:82:af:9c:
                    96:6c:1a:9f:65:db:b3:b3:d5:fb:51:51:4c:81:f1:
                    37:4e:a0:9d:71:6a:ae:7a:38:94:0d:0f:a1:d2:71:
                    5f:87:3f:8a:4d:9b:47:b8:2d:1c:70:76:0a:66:4a:
                    54:e4:e5:f4:e4:b7:e1:f5:59:2d:4c:fe:a4:f6:f5:
                    23:f3:56:c5:8f:15:32:19:17:c0:f9:2b:f6:0c:5f:
                    48:ec:e7:9a:90:be:a3:40:9a:47:e7:40:3c:45:cb:
                    0c:4a:40:3b:11:6f:cc:41:c9:38:08:14:c4:d3:aa:
                    5b:5a:58:0c:ff:31:20:29:d0:a9:51:63:00:cc:78:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6D:12:7B:2C:F6:72:AA:E4:47:27:56:F7:81:2B:19:C6:D3:E9:B0
            X509v3 Authority Key Identifier:
                keyid:53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c7:e5:c0:41:12:ea:3c:04:73:37:82:68:3b:58:be:f1:26:
         84:0a:f1:b2:c6:ac:f8:e1:ca:61:33:bb:51:ea:60:40:a1:21:
         15:2a:94:2d:6e:17:b7:5e:89:e1:66:90:58:66:95:ce:3f:4e:
         f1:d4:01:b1:42:45:9c:d4:3c:1e:7a:43:86:03:46:1b:06:3e:
         83:d4:01:f8:f0:41:be:5f:30:84:0b:f6:f8:cb:e5:9c:c4:54:
         00:7e:bb:31:86:58:29:17:a8:d0:bf:a3:8f:80:8c:d4:d8:eb:
         0b:b5:78:b9:13:4c:a2:db:26:1a:c1:37:0f:f2:78:59:c5:0c:
         38:44:44:d9:5d:98:14:0e:1e:ac:c0:5f:79:d1:5a:48:31:5e:
         99:89:4e:d4:60:8f:47:df:76:25:61:2e:b9:c9:13:7c:46:0f:
         79:f0:2a:42:bc:de:e6:99:6d:c8:3b:7f:ef:23:12:5a:73:fa:
         ea:3a:ce:b0:ed:2a:63:6e:c1:b3:e7:34:f3:04:25:94:e0:b2:
         b7:b8:eb:d9:e8:96:d7:3b:ad:e8:fc:2f:df:34:b3:8a:02:cd:
         f1:a3:58:a6:66:f3:20:4c:25:1f:a4:53:bf:3b:d2:ea:92:22:
         f1:fd:41:6f:2b:e8:59:e7:16:4c:66:ae:79:ef:64:76:10:ec:
         fc:c0:9a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:59:55 2026 by rpki-client