This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
File:                     UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft (raw, json)
Hash identifier:          dbjNH2y1mW6A4zQoNMF0ncOXSrUnr36gEXq2I0ILWDk=
Subject key identifier:   4F:BF:4A:48:62:B7:C8:F1:1E:64:86:F0:FF:06:C1:1D:03:9D:70:CF
Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
Certificate issuer:       /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
Manifest number:          015A
Signing time:             Sun 25 Jan 2026 03:25:07 +0000
Manifest this update:     Sun 25 Jan 2026 03:25:07 +0000
Manifest next update:     Sun 01 Feb 2026 03:25:07 +0000
Files and hashes:         1: UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl (hash: y3bzgkdgsiWY+/WHbU3LffX/1APegCT3seCIQd7aBoc=)
                          2: 6EAE50E8EBFA11EEA937307AC4F9AE02.roa (hash: J7aNLa3ERRvlZqfhEJCcY2ky3Snav79C7z3716SOcQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
                          rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913318E, serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
        Validity
            Not Before: Jan 25 03:25:07 2026 GMT
            Not After : Feb  1 03:25:07 2026 GMT
        Subject: CN=69758d13-abe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:84:4f:46:26:05:e8:d6:24:fa:04:2e:74:
                    de:2c:85:62:2d:3b:a5:12:45:c5:4c:ed:2f:c2:ca:
                    a0:c3:26:04:77:da:1f:2f:1b:10:83:32:4e:96:3c:
                    2b:fe:be:be:c2:0a:ca:d0:ee:4e:c6:1a:9a:05:ed:
                    18:6d:48:ae:37:5b:42:d4:35:b2:b6:4f:69:5b:68:
                    f7:34:04:25:bc:f4:a0:ab:ef:47:07:59:cd:a8:08:
                    f2:f8:ea:ee:65:82:62:05:59:ae:0b:64:a7:c9:f8:
                    40:71:31:1b:e3:6b:c6:2a:2d:30:e5:c3:9c:64:85:
                    6b:87:ee:47:a5:f6:96:e1:44:db:0e:80:27:38:9c:
                    5b:46:1d:0d:18:a1:9d:f4:7c:9c:eb:56:e6:8e:f9:
                    16:f5:8e:ce:5e:d7:c7:4d:0a:87:4d:cd:a2:51:8f:
                    b9:87:df:17:da:12:f0:62:86:f6:8d:59:9b:f1:45:
                    33:6f:36:73:11:8e:4e:b5:c3:41:0c:79:f6:e8:a3:
                    68:c3:69:31:8e:92:08:bb:39:2a:2e:a5:73:47:bc:
                    c4:cc:66:58:09:45:de:e9:d9:dd:60:68:77:c4:95:
                    30:48:80:6e:97:9b:b5:de:6c:26:b3:09:b0:a3:80:
                    b6:6f:d1:72:c1:46:96:73:0d:ab:52:8f:52:a3:66:
                    16:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BF:4A:48:62:B7:C8:F1:1E:64:86:F0:FF:06:C1:1D:03:9D:70:CF
            X509v3 Authority Key Identifier:
                keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:9a:04:07:2d:c7:69:bd:39:35:be:f9:55:23:96:e2:58:ee:
         0f:c5:61:16:fd:2f:ee:b1:f1:45:37:06:94:81:4d:64:87:e3:
         a0:e0:3c:9f:bb:6d:a7:1b:27:14:72:de:c1:f3:28:b7:92:99:
         a3:a2:4b:c4:ad:77:29:e6:79:4c:46:49:5d:6c:38:2b:a4:e7:
         27:3b:9e:41:c7:fd:ae:b5:45:d2:d8:68:7f:5c:86:df:23:a6:
         f4:3c:95:bc:8e:a7:2b:d4:9f:66:6c:85:32:6d:7f:e6:22:04:
         f2:46:86:eb:b9:00:8a:98:66:b8:60:9e:c0:d4:a6:71:1a:52:
         72:9e:0a:2c:05:3f:2e:1d:70:07:0e:fb:73:6e:2d:1f:c2:dc:
         ef:ab:f7:2d:b6:51:da:bf:fc:68:89:ff:b4:0c:a5:ee:86:b2:
         d7:12:37:8d:53:70:90:52:f5:c3:c7:7d:7e:57:6e:ea:62:df:
         18:99:1b:26:4b:40:43:bb:f4:3c:9e:09:a6:d0:ab:73:4b:97:
         af:cf:9d:91:7f:61:c4:2c:f3:90:a0:be:24:18:78:4f:4c:b6:
         33:94:44:29:b2:a2:86:5d:3b:b3:d3:cc:d7:c1:37:16:f5:fa:
         95:67:4f:7a:0b:4f:b1:a3:a0:a8:a8:f2:c2:5a:d5:11:98:75:
         85:b8:b7:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzMxOEUxMTAvBgNVBAUTKDUwMEY5MjAwRUI4NkRDNUZEMDZEQjc4NkMwQ0VBNDUy
RDBDRTcyMzAwHhcNMjYwMTI1MDMyNTA3WhcNMjYwMjAxMDMyNTA3WjAYMRYwFAYD
VQQDDA02OTc1OGQxMy1hYmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4qET0YmBejWJPoELnTeLIViLTulEkXFTO0vwsqgwyYEd9ofLxsQgzJOljwr
/r6+wgrK0O5OxhqaBe0YbUiuN1tC1DWytk9pW2j3NAQlvPSgq+9HB1nNqAjy+Oru
ZYJiBVmuC2SnyfhAcTEb42vGKi0w5cOcZIVrh+5HpfaW4UTbDoAnOJxbRh0NGKGd
9Hyc61bmjvkW9Y7OXtfHTQqHTc2iUY+5h98X2hLwYob2jVmb8UUzbzZzEY5OtcNB
DHn26KNow2kxjpIIuzkqLqVzR7zEzGZYCUXe6dndYGh3xJUwSIBul5u13mwmswmw
o4C2b9FywUaWcw2rUo9So2YWRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+/Skhi
t8jxHmSG8P8GwR0DnXDPMB8GA1UdIwQYMBaAFFAPkgDrhtxf0G23hsDOpFLQznIw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzE4RS82QTkwQUY4NEVC
RjkxMUVFOURBNzlCNzdDNEY5QUUwMi9VQS1TQU91RzNGX1FiYmVHd002a1V0RE9j
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VBLVNBT3VHM0ZfUWJiZUd3TTZrVXRET2NqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzE4RS82QTkwQUY4NEVCRjkxMUVFOURBNzlCNzdDNEY5QUUwMi9VQS1TQU91RzNG
X1FiYmVHd002a1V0RE9jakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJmgQHLcdpvTk1vvlVI5biWO4PxWEW/S/usfFFNwaUgU1kh+Og4Dyf
u22nGycUct7B8yi3kpmjokvErXcp5nlMRkldbDgrpOcnO55Bx/2utUXS2Gh/XIbf
I6b0PJW8jqcr1J9mbIUybX/mIgTyRobruQCKmGa4YJ7A1KZxGlJyngosBT8uHXAH
Dvtzbi0fwtzvq/cttlHav/xoif+0DKXuhrLXEjeNU3CQUvXDx31+V27qYt8YmRsm
S0BDu/Q8ngmm0KtzS5evz52Rf2HELPOQoL4kGHhPTLYzlEQpsqKGXTuz08zXwTcW
9fqVZ096C0+xo6CoqPLCWtURmHWFuLeA
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:11 2026 by rpki-client