This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
File:                     UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft (raw, json)
Hash identifier:          TwgWNLGEqkdO3tRZWaCsjxibDqNLoi6tb5sU3m+k6Eo=
Subject key identifier:   11:B5:56:62:AF:A3:29:5B:E1:0E:E5:B0:70:61:05:50:2D:7B:8D:C7
Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23
Certificate issuer:       /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
Manifest number:          013E
Signing time:             Sun 25 Jan 2026 03:41:11 +0000
Manifest this update:     Sun 25 Jan 2026 03:41:11 +0000
Manifest next update:     Sun 01 Feb 2026 03:41:11 +0000
Files and hashes:         1: UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl (hash: L0tUlAWGRXF+GdrLvU56RXILqDg/MEraXpIjNz1vz18=)
                          2: C23053B019A911EF97366417C4F9AE02.roa (hash: 7AHfRlf5obcLabSztF3WSrRoKuN5MOc2fWcxIFrj8UQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl
                          rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
        Validity
            Not Before: Jan 25 03:41:11 2026 GMT
            Not After : Feb  1 03:41:11 2026 GMT
        Subject: CN=697590d7-5569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:aa:f0:cc:d4:0b:4d:c5:af:92:8d:4e:8c:
                    1c:c3:d5:7a:c9:3a:3c:ff:54:69:2a:cb:bb:bf:99:
                    dc:13:1f:0a:a1:bd:e7:9a:41:05:a4:f8:da:67:26:
                    06:ee:92:76:9d:7a:e4:be:2a:94:83:11:61:61:2e:
                    23:24:75:5e:be:05:cf:e1:29:2b:02:f1:61:d8:44:
                    b5:c6:8c:b6:4a:be:ba:78:f3:b5:b9:2d:e0:c1:f1:
                    1e:f7:df:25:6b:43:fd:a6:ab:67:a3:98:ea:b8:f0:
                    c6:03:f4:8b:16:55:ac:06:9f:ab:aa:53:14:2d:58:
                    ad:fd:7c:bd:7b:ba:7f:33:58:c9:37:6c:b2:5f:bc:
                    f4:bf:7a:2c:df:66:e9:e8:f8:79:de:50:f8:01:c0:
                    a8:5c:7a:5b:7d:bd:96:ac:27:7f:cf:f1:46:11:84:
                    99:a3:f8:6b:46:58:ff:72:69:9c:b9:41:0b:c0:6f:
                    59:ee:d1:77:14:d4:7f:9b:a3:81:26:44:6a:06:fa:
                    2b:08:13:14:93:da:d8:a0:87:e7:61:eb:7f:ca:67:
                    7f:0b:03:1f:05:3a:b2:90:18:b4:7d:13:d8:3b:91:
                    57:2d:68:f9:bb:16:9c:d5:97:57:e3:6c:4a:69:19:
                    43:8e:dd:e7:01:12:42:99:fa:c8:1c:68:20:83:dd:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B5:56:62:AF:A3:29:5B:E1:0E:E5:B0:70:61:05:50:2D:7B:8D:C7
            X509v3 Authority Key Identifier:
                keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ce:c8:f3:17:be:93:ba:01:82:c7:ab:c7:f4:3d:45:33:1c:
         eb:cf:d6:f5:d6:d4:59:ad:77:6c:cf:6a:62:59:7c:99:04:19:
         97:18:df:9d:8d:ed:10:90:d8:49:37:06:5b:d4:f8:ae:16:82:
         f3:79:8d:ed:63:aa:37:2f:e0:69:40:ac:08:33:25:50:c2:8c:
         cd:c3:d9:3a:8b:46:64:40:e7:ce:7a:82:bc:0f:60:bf:c6:71:
         62:cf:6d:46:e2:f4:2d:f9:6a:bf:49:a0:23:90:6e:63:c4:02:
         12:61:85:27:38:85:64:51:3b:65:8d:27:8c:09:a1:0b:5c:7c:
         a0:77:59:f9:7c:02:92:0b:70:35:99:94:3e:33:3e:44:fa:9f:
         11:53:3c:b9:eb:e5:0e:eb:03:db:04:0f:04:15:f0:da:7e:f5:
         4f:37:aa:7e:9c:5c:1b:53:3c:7b:b0:85:ab:cc:d1:99:6c:9b:
         d2:e1:57:8a:87:50:cb:8d:d4:97:fd:a8:be:66:92:90:0a:12:
         83:0c:78:fd:8d:41:8d:55:b7:53:37:6f:4b:44:ef:da:0a:90:
         de:9e:98:df:c9:00:1e:5b:cc:11:5b:68:41:32:4d:78:39:73:
         f7:b9:95:84:0f:aa:11:4e:a2:34:ec:ed:36:db:93:27:2d:37:
         25:67:63:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:42:35 2026 by rpki-client