This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
File:                     6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft (raw, json)
Hash identifier:          6RSGKTt5H52InjZbtLdFvAEdM4SNj9ng2aHoIKXzZvQ=
Subject key identifier:   A9:C6:5C:BD:50:84:BB:AE:D3:EE:FA:3C:3C:F4:CE:03:8C:60:BF:88
Authority key identifier: EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A
Certificate issuer:       /CN=A914541C/serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
Manifest number:          0157
Signing time:             Sun 25 Jan 2026 03:23:00 +0000
Manifest this update:     Sun 25 Jan 2026 03:22:59 +0000
Manifest next update:     Sun 01 Feb 2026 03:22:59 +0000
Files and hashes:         1: 6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl (hash: /OONzVfSrkGbjNdeaXvhYLnB/c96a7lkxiUE4IBhtIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl
                          rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914541C, serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A
        Validity
            Not Before: Jan 25 03:22:59 2026 GMT
            Not After : Feb  1 03:22:59 2026 GMT
        Subject: CN=69758c94-79b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:01:92:24:a1:4d:f6:10:81:f7:61:cb:b5:
                    db:1d:eb:8d:0b:e7:f8:70:90:6c:7a:da:01:f6:19:
                    7d:78:8d:e0:c5:32:2f:c3:1c:ee:6c:7b:38:ad:93:
                    64:ed:79:d0:ac:eb:7e:cf:7f:dc:93:b4:d3:41:e2:
                    77:68:80:a2:1d:88:80:b7:48:e9:95:52:ef:34:fa:
                    1e:da:50:fc:7d:59:59:24:9a:20:e4:34:d1:c1:4a:
                    ba:ba:0a:11:12:27:bb:82:ba:74:57:3a:13:32:5b:
                    2a:90:dc:3c:86:95:9d:4e:c2:cb:88:ae:96:75:68:
                    9c:a4:da:54:14:38:8d:25:df:d6:3d:58:5b:ca:35:
                    3f:f8:99:23:1f:f9:56:2f:0b:5a:30:bc:96:84:e9:
                    4c:d3:d2:ae:b1:b7:27:a5:25:c0:d8:69:7e:e7:4c:
                    a8:6a:5f:e8:a7:f3:c9:fc:fd:a2:5c:b3:1c:22:df:
                    a8:34:c5:b8:40:72:43:17:98:16:46:e5:d8:1d:c0:
                    e2:28:4d:aa:77:c9:df:56:9c:9b:2f:80:06:5b:ae:
                    88:9f:c8:62:88:01:5b:01:7b:80:c7:1c:44:7e:0f:
                    87:af:6d:48:c5:e1:4e:05:35:77:23:29:29:7b:df:
                    c5:ff:b3:86:d9:38:e3:59:26:bb:18:29:07:ac:bf:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C6:5C:BD:50:84:BB:AE:D3:EE:FA:3C:3C:F4:CE:03:8C:60:BF:88
            X509v3 Authority Key Identifier:
                keyid:EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8b:58:b9:c5:58:32:1e:d7:33:c1:ad:8e:36:68:ce:8d:84:
         7d:49:50:fa:71:3c:59:a4:cb:15:d4:a0:19:12:89:b4:93:9b:
         95:0e:83:1f:d9:41:c0:4f:e8:5a:0c:59:7e:92:7c:f0:41:37:
         cd:56:b0:eb:c9:0e:5e:ba:e5:aa:74:ee:71:71:e0:9d:df:ed:
         15:64:18:f6:33:0e:75:25:75:97:a3:18:81:3d:bf:da:da:1e:
         33:2f:81:6e:a8:a1:8c:00:ff:95:98:b1:af:c1:82:23:26:2f:
         a2:e0:a7:d8:9c:fc:2c:39:66:11:a3:03:11:ca:a0:a1:76:9a:
         da:25:5e:0e:d8:44:b9:24:60:51:92:9a:eb:fb:ee:8a:ad:13:
         b3:56:d2:c8:29:f4:c6:0a:27:76:14:4e:ec:8a:16:44:63:49:
         26:c9:51:81:3c:d1:f1:1a:7d:93:29:8d:ec:24:59:af:9f:c1:
         70:ff:46:1c:23:cb:99:7c:26:d3:2a:05:b5:72:b5:65:a4:e2:
         1b:1c:89:46:95:3c:bf:06:dd:b9:a2:50:e9:f4:a1:9e:48:43:
         2a:0b:8a:e6:41:9b:69:da:e2:b4:66:83:1d:b2:af:11:7a:22:
         82:3b:23:7c:e1:a1:3d:3f:c4:33:0f:93:3c:1d:bf:e6:76:f4:
         dd:a8:48:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:03 2026 by rpki-client