This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
File:                     uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft (raw, json)
Hash identifier:          aTSdK8/4rJUY56ZiYv0FRuJu3xF9LlDpJPjprYi3yKI=
Subject key identifier:   86:5E:FB:34:A2:C6:A7:9D:2B:B0:5A:4C:BD:85:DA:83:F8:0A:D0:E0
Authority key identifier: BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14
Certificate issuer:       /CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
Certificate serial:       04CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
Manifest number:          04BE
Signing time:             Sat 24 Jan 2026 23:07:25 +0000
Manifest this update:     Sat 24 Jan 2026 23:07:24 +0000
Manifest next update:     Sat 31 Jan 2026 23:07:24 +0000
Files and hashes:         1: uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl (hash: 2JVjnjUGOBVqrInnVJPD0Fy0lwP2UOyeOsGuNj5rZsw=)
                          2: 53E4239C99F811ECA0663D19C4F9AE02.roa (hash: Y7h+ThuR3023tbfID3tJUzdvMuVp3Y56Ae3EjEbCXpU=)
                          3: 4911720A694F11ECB6F9B541C4F9AE02.roa (hash: 7k8YHn/nAtUVU3VLssB80YxDHO9IxRBfL7eh5zIgJsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138C14, serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
        Validity
            Not Before: Jan 24 23:07:24 2026 GMT
            Not After : Jan 31 23:07:24 2026 GMT
        Subject: CN=697550ac-58b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1d:35:d3:a4:77:07:5a:57:c2:fd:bc:fc:02:
                    03:e7:e1:89:e8:a3:0a:34:17:67:e9:e2:b0:0a:b2:
                    ab:b6:3a:88:1d:ef:23:ff:9f:57:b2:60:7e:a0:05:
                    32:35:e8:5f:f7:48:7a:e2:2b:7d:5b:b0:f3:d1:c4:
                    db:25:fd:28:0b:41:a7:52:2b:8b:fa:6f:e3:6b:2b:
                    23:10:9b:dc:bc:16:8a:0f:70:07:a8:67:94:37:5e:
                    4b:50:2f:1b:3b:08:08:3a:2b:3c:80:5d:05:b2:0c:
                    a8:33:33:83:98:ce:ca:83:5f:c9:ef:15:98:da:6d:
                    89:c9:b9:dc:46:12:6a:9b:2d:72:98:57:39:62:a7:
                    58:7f:61:2a:85:68:8c:95:c7:1d:ad:ec:e2:2c:46:
                    a9:4a:98:7d:cd:44:99:67:ce:54:74:b1:2f:ad:72:
                    ce:c4:fe:21:3c:8c:2d:e3:2c:88:8a:c7:37:4a:2b:
                    0d:2a:f5:45:f0:2f:6f:2d:73:12:99:81:60:43:1a:
                    da:ef:bc:c0:22:d7:c3:35:c7:41:eb:9a:99:4d:8b:
                    f3:14:a5:85:c4:28:61:e8:28:9f:35:ad:cc:73:0b:
                    57:2a:81:34:40:57:f6:4b:bd:5c:c2:15:81:f7:4b:
                    b7:cb:32:7c:2e:0c:61:8d:24:e6:0e:a5:3b:14:92:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5E:FB:34:A2:C6:A7:9D:2B:B0:5A:4C:BD:85:DA:83:F8:0A:D0:E0
            X509v3 Authority Key Identifier:
                keyid:BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:cd:8d:5c:8e:4f:e5:12:82:df:66:5c:fe:6f:b5:55:de:bb:
         d4:19:15:cc:82:28:a5:bc:da:a8:8a:7f:33:9e:b0:c1:46:a9:
         bb:19:95:d5:8b:52:4d:16:3a:53:7a:f4:80:1e:5a:cf:73:5e:
         3a:8d:96:ae:52:52:e6:9d:04:12:19:b6:72:69:0b:65:b7:ab:
         93:ff:f1:dc:07:57:48:5a:fe:ff:8c:b5:8a:9a:72:58:70:2c:
         91:c3:7b:43:ed:a5:51:99:8b:c7:4b:ab:6c:a1:24:73:3d:79:
         7c:5a:55:0f:84:64:37:06:62:0d:33:29:9d:4b:4d:2e:87:cf:
         7b:bc:0b:f7:a5:55:ab:58:c8:2b:09:02:82:76:4f:8a:5d:05:
         f4:92:6f:d3:6d:cd:ac:2c:02:d8:8c:73:59:ba:78:6b:46:58:
         a0:3a:f1:df:72:19:e8:5e:f6:4d:40:b4:40:1a:d5:a5:3f:3a:
         62:91:5f:f6:1b:59:73:47:1d:76:bb:d4:da:8b:48:fd:d2:4f:
         5e:47:0c:2f:81:05:72:93:c4:ad:53:f3:11:97:2b:17:18:46:
         cc:50:07:70:f7:5d:5c:3e:58:66:df:bd:1b:00:63:75:54:09:
         26:3c:a8:88:88:f8:bb:f1:c8:2c:d0:c8:06:3f:5a:82:4c:a4:
         85:95:4a:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhDMTQxMTAvBgNVBAUTKEJCMEU1NTAzNzlGRUEyODFBODgxQTY3NDc5Qjc3Qzg2
MDJEMDEzMTQwHhcNMjYwMTI0MjMwNzI0WhcNMjYwMTMxMjMwNzI0WjAYMRYwFAYD
VQQDDA02OTc1NTBhYy01OGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmR0106R3B1pXwv28/AID5+GJ6KMKNBdn6eKwCrKrtjqIHe8j/59XsmB+oAUy
Nehf90h64it9W7Dz0cTbJf0oC0GnUiuL+m/jaysjEJvcvBaKD3AHqGeUN15LUC8b
OwgIOis8gF0FsgyoMzODmM7Kg1/J7xWY2m2JybncRhJqmy1ymFc5YqdYf2EqhWiM
lccdreziLEapSph9zUSZZ85UdLEvrXLOxP4hPIwt4yyIisc3SisNKvVF8C9vLXMS
mYFgQxra77zAItfDNcdB65qZTYvzFKWFxChh6CifNa3McwtXKoE0QFf2S71cwhWB
90u3yzJ8LgxhjSTmDqU7FJJOpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZe+zSi
xqedK7BaTL2F2oP4CtDgMB8GA1UdIwQYMBaAFLsOVQN5/qKBqIGmdHm3fIYC0BMU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEMxNC8zRTRDNDYzMDVC
QzQxMUVDOTYyNzkzNTRDNEY5QUUwMi91dzVWQTNuLW9vR29nYVowZWJkOGhnTFFF
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V3NVZBM24tb29Hb2dhWjBlYmQ4aGdMUUV4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEMxNC8zRTRDNDYzMDVCQzQxMUVDOTYyNzkzNTRDNEY5QUUwMi91dzVWQTNuLW9v
R29nYVowZWJkOGhnTFFFeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIzY1cjk/lEoLfZlz+b7VV3rvUGRXMgiilvNqoin8znrDBRqm7GZXV
i1JNFjpTevSAHlrPc146jZauUlLmnQQSGbZyaQtlt6uT//HcB1dIWv7/jLWKmnJY
cCyRw3tD7aVRmYvHS6tsoSRzPXl8WlUPhGQ3BmINMymdS00uh897vAv3pVWrWMgr
CQKCdk+KXQX0km/Tbc2sLALYjHNZunhrRligOvHfchnoXvZNQLRAGtWlPzpikV/2
G1lzRx12u9Tai0j90k9eRwwvgQVyk8StU/MRlysXGEbMUAdw911cPlhm370bAGN1
VAkmPKiIiPi78cgs0MgGP1qCTKSFlUpT
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:32:56 2026 by rpki-client