This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
File:                     uDJLQvvF8hOdeQHkF94hA5slJdw.mft (raw, json)
Hash identifier:          KKJD6DKxElxiKlZGqxILwA2TmZeVD5+SQcR32BQsEdU=
Subject key identifier:   86:81:37:36:F8:61:BA:E2:EA:B8:66:BA:5B:3E:F2:2D:92:FB:6F:CF
Authority key identifier: B8:32:4B:42:FB:C5:F2:13:9D:79:01:E4:17:DE:21:03:9B:25:25:DC
Certificate issuer:       /CN=A913AFD2/serialNumber=B8324B42FBC5F2139D7901E417DE21039B2525DC
Certificate serial:       074E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
Manifest number:          0747
Signing time:             Sat 24 Jan 2026 21:03:29 +0000
Manifest this update:     Sat 24 Jan 2026 21:03:28 +0000
Manifest next update:     Sat 31 Jan 2026 21:03:28 +0000
Files and hashes:         1: uDJLQvvF8hOdeQHkF94hA5slJdw.crl (hash: GtlrWTth2vLvuTvUMI89DfG2D+nb2CHjfT2IlfgWZDU=)
                          2: A74A1698590A11EB9ECF402AC4F9AE02.roa (hash: 4eRzOG2I//7TY5ChgdSvpUtnnyrP9LtDGhTYUfmfKh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.crl
                          rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1870 (0x74e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AFD2, serialNumber=B8324B42FBC5F2139D7901E417DE21039B2525DC
        Validity
            Not Before: Jan 24 21:03:28 2026 GMT
            Not After : Jan 31 21:03:28 2026 GMT
        Subject: CN=697533a1-13b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:d2:d8:6d:50:92:9a:0a:dc:18:81:67:ff:
                    b1:a8:56:a5:f3:cf:09:51:15:97:ae:83:78:53:e2:
                    d9:41:db:50:18:bf:b4:61:4f:cd:13:a8:16:7b:24:
                    ad:30:77:3f:87:99:42:7e:bb:e6:a7:3c:b1:ae:03:
                    6a:02:d6:a3:d8:98:0a:ec:4a:c6:88:ae:aa:3e:79:
                    46:48:fb:e5:48:6b:7b:b3:be:25:7a:32:fd:81:9e:
                    91:3b:8a:0c:0e:2c:b0:50:c8:d9:b2:7b:01:0d:ce:
                    17:c3:88:e4:f0:a1:26:a9:50:02:bd:97:cd:d2:ef:
                    69:25:a9:56:04:aa:de:9a:32:11:96:2e:9f:4c:fc:
                    d5:fa:91:fd:3d:2c:5d:da:d5:01:5a:1d:25:39:09:
                    9c:8b:11:4c:1c:b6:91:96:99:e5:46:41:c6:5a:ec:
                    4e:99:3a:3a:1e:4a:48:5d:15:d9:64:e2:b4:24:00:
                    34:96:92:dd:52:ff:ef:4a:e1:a2:e7:a4:a8:6c:81:
                    6d:6b:fd:c1:67:46:57:fe:d6:1b:bb:6b:0f:eb:64:
                    69:29:97:44:8e:39:99:b2:48:d7:f6:c8:7d:be:b6:
                    17:e5:ad:89:cc:3f:30:e2:d3:71:13:f6:db:1f:e1:
                    ed:f9:90:51:18:37:07:ad:81:0f:46:b9:be:91:91:
                    56:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:81:37:36:F8:61:BA:E2:EA:B8:66:BA:5B:3E:F2:2D:92:FB:6F:CF
            X509v3 Authority Key Identifier:
                keyid:B8:32:4B:42:FB:C5:F2:13:9D:79:01:E4:17:DE:21:03:9B:25:25:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:48:8e:33:bf:f2:37:36:67:fa:0b:2e:9c:59:80:c0:87:63:
         4e:68:77:cb:8c:c9:1d:73:79:e2:8d:67:ed:4a:38:db:a2:59:
         13:b7:65:e5:53:35:5d:13:9c:18:29:18:c8:a3:c5:08:06:c1:
         d9:48:7a:53:90:60:5e:56:91:d6:72:8e:fc:76:12:d9:ef:c2:
         1f:1b:2a:83:84:3d:40:7c:13:da:61:c1:a6:7c:7d:3d:0b:54:
         55:53:d8:e7:5a:7d:5e:b3:4b:33:4f:e9:44:5a:7f:19:57:c0:
         66:4a:d7:d6:84:38:68:ca:e8:c5:5e:ca:57:c5:5d:90:3a:df:
         d1:33:47:c8:52:15:1c:8d:5a:cd:24:5b:c0:d0:bc:c5:9a:50:
         46:f8:e0:15:92:fc:2d:68:45:84:88:a3:1e:57:37:de:90:0f:
         8f:e0:24:02:f9:8d:ed:a8:d2:c2:ca:5a:e6:34:a6:ab:6a:bc:
         a6:6d:cc:29:5a:fc:0b:97:fe:db:24:12:03:f5:71:16:51:63:
         c3:8b:ab:c1:ec:6d:95:0c:dc:74:a4:4d:b8:34:6c:43:20:08:
         00:d9:57:db:97:0f:73:85:7d:53:1b:33:2c:ba:54:44:5a:f2:
         cd:9e:f5:3d:e7:bf:10:d3:c5:9f:e5:b3:fd:e2:86:bc:05:38:
         c9:7d:8f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:17 2026 by rpki-client