This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
File:                     UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json)
Hash identifier:          h8yJs6ruHUw+hPHa5joEEsmrSHepHST3fwOBXipav5Y=
Subject key identifier:   54:95:66:B9:53:B3:3B:20:5A:BA:56:B1:36:94:C9:46:F5:86:10:DE
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Certificate issuer:       /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
Manifest number:          015A
Signing time:             Sun 25 Jan 2026 03:23:20 +0000
Manifest this update:     Sun 25 Jan 2026 03:23:20 +0000
Manifest next update:     Sun 01 Feb 2026 03:23:20 +0000
Files and hashes:         1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: FbJIL1QS9Fr8W+xCkkMnX//AxDv3gbYLKeGCknpPy3c=)
                          2: C32999EE391F11EFBFAB6D66C4F9AE02.roa (hash: g8qMHMQ112lEc0CBX6z9UVtKL/qr3OF4595+543HHj8=)
                          3: DADBB0C033A411EF8E99B625C4F9AE02.roa (hash: GE9if/qMDXWukB3XSTMftXVRzAVJimyZd4NP7/FslLk=)
                          4: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (hash: 7nB9PKLpginNAvHpyeXPNO88VYIsFeVoJ8sBAHLSABo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
                          rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
        Validity
            Not Before: Jan 25 03:23:20 2026 GMT
            Not After : Feb  1 03:23:20 2026 GMT
        Subject: CN=69758ca8-bb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:75:d4:84:58:e2:42:76:5b:58:b8:0d:45:
                    dc:f4:46:61:2f:48:a7:4f:e3:84:0e:3b:59:3d:28:
                    19:ad:68:e2:29:e5:0b:eb:a7:6f:36:cb:32:a9:26:
                    3b:ce:b4:ea:92:8e:69:86:4e:a2:23:9a:2e:af:04:
                    89:48:02:3f:a4:a8:2a:9c:c4:00:fb:63:88:5f:ad:
                    c5:c2:db:16:66:52:ae:38:91:f6:bd:ff:dd:5c:68:
                    8c:e4:85:35:91:52:1f:45:52:24:65:f7:dc:3b:69:
                    b1:a6:ee:15:89:fd:3f:9d:00:08:28:52:a5:2d:0a:
                    63:9c:1f:30:82:5c:72:c6:b0:70:24:bd:fa:56:83:
                    a4:a3:e4:5e:be:1d:05:df:a2:4f:e6:3b:39:3e:ea:
                    79:9d:1c:10:8b:28:43:90:9c:16:83:72:c3:fb:c7:
                    47:b3:9f:2e:f1:ae:7d:d0:50:a1:bc:fe:88:d5:c0:
                    7c:cd:70:93:6b:e9:59:63:6b:a0:20:80:f1:2a:38:
                    03:5f:6a:a2:b9:5e:0b:da:2c:48:88:a0:bc:59:d7:
                    e5:d4:60:b8:7d:a9:75:0b:98:1c:00:ae:0e:d0:e2:
                    c5:b7:8f:c8:6b:f8:2a:4c:85:a3:77:6c:f7:a0:8d:
                    2e:da:77:b3:df:2d:e6:01:92:dd:48:d2:ba:78:6f:
                    d4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:95:66:B9:53:B3:3B:20:5A:BA:56:B1:36:94:C9:46:F5:86:10:DE
            X509v3 Authority Key Identifier:
                keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:a4:f5:bd:9a:37:40:55:74:ae:0b:7d:d8:10:0b:dc:49:
         1b:b4:61:1f:d7:90:04:6d:8c:1a:33:d1:3f:e2:d7:d5:24:72:
         65:f8:4c:e0:f9:6e:79:bd:04:a9:dc:f5:1c:c6:79:ed:57:b5:
         81:f8:06:f4:bc:08:ef:4d:08:60:f2:2e:33:5f:65:d0:49:9d:
         17:84:eb:72:8b:07:0a:61:f7:23:6f:e3:46:ed:f1:ac:cc:97:
         c3:28:20:ea:95:ec:12:e6:9f:51:37:ca:0d:69:0a:6c:a0:7d:
         8f:bf:14:6c:0c:4d:8b:cb:a4:b5:4c:6a:f3:25:62:0f:f1:c7:
         a1:77:df:3d:cb:0e:f6:95:33:0c:2d:da:37:72:e5:5a:08:f9:
         6d:cf:b4:9f:cc:76:aa:70:ed:c2:d7:e5:6f:50:df:dd:23:a4:
         0a:15:3e:b7:71:ed:a0:5f:1a:4c:c4:ed:4a:1f:2f:28:9a:0c:
         f0:1d:0f:a1:e1:67:d5:ff:01:d2:b3:da:8d:8a:1d:69:ed:a0:
         5c:4b:40:3f:32:df:30:f1:dd:5c:c6:aa:ad:12:1f:b9:d4:06:
         bc:95:b5:ca:54:62:59:cf:8c:9a:3b:07:f6:72:cb:25:28:17:
         c4:b6:61:6d:53:81:e3:e8:1a:6e:3f:59:f5:99:d7:17:ea:35:
         6c:66:19:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY5MDYxMTAvBgNVBAUTKDUwMzI3MkRBM0VGMEFCRURFOTUzOUM3RTI0M0ExQjg2
ODZCMTYxRkIwHhcNMjYwMTI1MDMyMzIwWhcNMjYwMjAxMDMyMzIwWjAYMRYwFAYD
VQQDDA02OTc1OGNhOC1iYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtqt11IRY4kJ2W1i4DUXc9EZhL0inT+OEDjtZPSgZrWjiKeUL66dvNssyqSY7
zrTqko5phk6iI5ourwSJSAI/pKgqnMQA+2OIX63FwtsWZlKuOJH2vf/dXGiM5IU1
kVIfRVIkZffcO2mxpu4Vif0/nQAIKFKlLQpjnB8wglxyxrBwJL36VoOko+Revh0F
36JP5js5Pup5nRwQiyhDkJwWg3LD+8dHs58u8a590FChvP6I1cB8zXCTa+lZY2ug
IIDxKjgDX2qiuV4L2ixIiKC8Wdfl1GC4fal1C5gcAK4O0OLFt4/Ia/gqTIWjd2z3
oI0u2nez3y3mAZLdSNK6eG/UKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSVZrlT
szsgWrpWsTaUyUb1hhDeMB8GA1UdIwQYMBaAFFAycto+8Kvt6VOcfiQ6G4aGsWH7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjkwNi8yODNBNjY4RUU3
NzYxMUVFQUFGRjNFNzRDNEY5QUUwMi9VREp5Mmo3d3EtM3BVNXgtSkRvYmhvYXhZ
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VESnkyajd3cS0zcFU1eC1KRG9iaG9heFlmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjkwNi8yODNBNjY4RUU3NzYxMUVFQUFGRjNFNzRDNEY5QUUwMi9VREp5Mmo3d3Et
M3BVNXgtSkRvYmhvYXhZZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrTqT1vZo3QFV0rgt92BAL3EkbtGEf15AEbYwaM9E/4tfVJHJl+Ezg
+W55vQSp3PUcxnntV7WB+Ab0vAjvTQhg8i4zX2XQSZ0XhOtyiwcKYfcjb+NG7fGs
zJfDKCDqlewS5p9RN8oNaQpsoH2PvxRsDE2Ly6S1TGrzJWIP8cehd989yw72lTMM
Ldo3cuVaCPltz7SfzHaqcO3C1+VvUN/dI6QKFT63ce2gXxpMxO1KHy8omgzwHQ+h
4WfV/wHSs9qNih1p7aBcS0A/Mt8w8d1cxqqtEh+51Aa8lbXKVGJZz4yaOwf2cssl
KBfEtmFtU4Hj6BpuP1n1mdcX6jVsZhnT
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:11 2026 by rpki-client