This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
File:                     UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json)
Hash identifier:          fRgNdTzE2B1UB3vdW3m8QqpqIiZCtgm3CXxnV7McciM=
Subject key identifier:   39:5D:09:E0:3A:AA:37:79:1C:05:D5:84:06:A3:29:CD:ED:C4:C2:56
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Certificate issuer:       /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
Manifest number:          0129
Signing time:             Fri 23 Jan 2026 03:48:16 +0000
Manifest this update:     Fri 23 Jan 2026 03:48:15 +0000
Manifest next update:     Fri 30 Jan 2026 03:48:15 +0000
Files and hashes:         1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: 3P9wOOAv5Fg0WFN1acRrN9n2tNB/eD0EHumG62BCTUI=)
                          2: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: yZ1LidZrlFrNTxapIhIsCTEZZK7lTYC0s/4RKHkPEsg=)
                          3: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
                          rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
        Validity
            Not Before: Jan 23 03:48:15 2026 GMT
            Not After : Jan 30 03:48:15 2026 GMT
        Subject: CN=6972ef7f-b65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:bf:33:ec:4b:f9:a2:c2:5b:e8:77:b7:b8:
                    6a:c6:82:20:c6:b3:aa:43:b8:00:14:4f:a1:01:46:
                    00:8e:f1:3e:76:91:bf:e8:05:22:67:b6:8b:63:3e:
                    be:62:ed:5f:9f:14:40:a3:b6:ab:47:40:bd:65:e6:
                    57:6f:0f:75:82:b6:2f:48:28:94:d4:10:5a:cf:b2:
                    1f:6c:78:c7:3b:65:52:58:22:5a:91:79:e4:79:91:
                    8a:07:e8:43:27:c7:0b:60:50:ac:a1:08:e7:0a:be:
                    19:0f:67:61:2b:2c:11:7e:c7:12:d9:c5:7f:bf:3c:
                    c2:6b:cb:2d:1c:78:86:f9:ee:c8:c3:eb:0d:47:ed:
                    d4:83:02:3e:e7:7e:81:51:de:d8:f9:0e:ca:fb:96:
                    01:f9:bc:d4:cc:55:39:58:a7:9f:3a:ee:5a:95:8e:
                    f9:59:a6:70:a9:52:46:1c:c5:2d:c8:e9:c5:91:85:
                    db:1f:bb:43:dd:05:c5:cd:bb:21:c7:a9:9e:67:c5:
                    41:a3:26:b9:91:ed:fa:60:21:0b:2b:56:3f:30:6d:
                    7a:48:49:8f:a0:32:ef:a9:94:9e:80:92:ad:c3:93:
                    9a:78:00:82:e9:e6:6e:2f:ad:ed:99:80:4b:63:d3:
                    b7:5f:8c:a4:a8:cc:59:3e:f2:f7:61:07:0e:d7:65:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5D:09:E0:3A:AA:37:79:1C:05:D5:84:06:A3:29:CD:ED:C4:C2:56
            X509v3 Authority Key Identifier:
                keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:c0:1c:2e:cd:b8:9e:2b:55:3a:cf:e8:c5:7b:0c:56:fd:
         6d:30:ce:ef:43:b6:76:f7:d7:f8:45:99:9c:25:44:34:e3:c9:
         be:e5:ca:82:49:10:53:55:09:3a:6a:e5:98:ff:9e:86:b7:ed:
         7d:f3:c9:d0:90:af:18:5f:d4:c1:d3:89:3c:2a:b1:08:02:ed:
         14:7c:b5:b0:59:cc:6a:1d:94:52:0d:7e:20:15:eb:06:f9:88:
         70:a7:68:c2:82:42:0c:83:97:77:08:4b:30:30:6e:2e:b7:4a:
         49:b5:d3:18:92:75:0d:98:f7:db:25:f7:be:0a:95:25:c1:1e:
         c6:dc:22:68:f6:48:c8:21:8a:b9:0a:cf:f7:84:58:a6:83:07:
         fc:32:91:d4:36:1d:03:72:e6:13:d9:32:ab:47:66:08:07:93:
         26:4e:2c:95:69:e1:92:f0:61:70:10:c0:22:a7:2d:af:32:2c:
         cf:97:5f:e0:ad:1c:8c:82:3e:bc:c1:fe:e9:92:a7:9a:67:51:
         c2:3c:82:c4:2b:0d:93:10:79:0b:b7:fd:a5:20:d3:aa:ae:8a:
         cb:ae:df:ec:43:66:ce:a0:6b:f1:43:99:86:fd:63:d2:62:28:
         ee:59:ae:1a:69:57:29:d9:c5:f2:05:19:b6:f3:c5:70:65:75:
         e5:02:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:12 2026 by rpki-client