This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
File:                     8ue_m6mnxEF7217_IXMMXshAJA0.mft (raw, json)
Hash identifier:          KrxVKpBwENiKFhUcxBH+0WE2tLPFZ/vCHjXTJwWqojo=
Subject key identifier:   93:9F:A0:C0:01:60:98:F2:B3:56:87:90:CF:E0:E0:B5:01:53:0C:D3
Authority key identifier: F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D
Certificate issuer:       /CN=A914E6AA/serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D
Certificate serial:       0681
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
Manifest number:          0ABD
Signing time:             Sat 24 Jan 2026 21:50:26 +0000
Manifest this update:     Sat 24 Jan 2026 21:50:25 +0000
Manifest next update:     Sat 31 Jan 2026 21:50:25 +0000
Files and hashes:         1: 8ue_m6mnxEF7217_IXMMXshAJA0.crl (hash: PoAjHvBFpAWPvKnLCIeS2peWLatr4VZpuEqiOSDuYWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D
        Validity
            Not Before: Jan 24 21:50:25 2026 GMT
            Not After : Jan 31 21:50:25 2026 GMT
        Subject: CN=69753ea2-a65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:ab:34:22:eb:3b:f5:ea:b2:96:3c:87:a6:
                    74:ee:ad:81:b2:24:7d:a0:8d:ed:d5:8a:b7:bf:20:
                    d3:72:a2:86:56:7d:64:54:e0:86:e0:6e:c1:9e:51:
                    8d:a7:a0:03:77:c4:00:23:93:ee:41:aa:10:33:0e:
                    bd:75:66:b3:6d:82:c4:65:6a:e3:28:fa:72:f1:cf:
                    1e:66:d0:5a:be:88:50:33:be:a9:9a:24:b5:57:24:
                    b2:75:fc:c8:e4:b4:68:b2:f0:c2:cb:34:95:56:63:
                    c5:d6:d5:e6:43:59:bf:80:c9:ac:78:63:cb:90:3b:
                    3c:03:d4:46:f4:df:bb:d0:f9:28:8b:fe:42:80:50:
                    e1:55:fa:85:1d:a5:5e:42:8c:37:11:88:c9:89:77:
                    5c:15:1c:12:b9:b6:02:94:9d:61:fe:77:1c:a1:90:
                    bb:36:3c:ef:24:73:c5:de:09:8e:a8:c8:2e:a2:a6:
                    08:db:70:d7:d6:5b:18:0c:e5:7a:27:c0:fe:d1:72:
                    10:a4:a8:c5:c1:04:d7:ee:a9:6b:25:a4:e1:66:06:
                    d8:5d:88:f3:b9:cf:37:52:94:c5:24:a5:7f:f0:df:
                    11:fc:5d:d2:44:cb:bf:01:51:da:5e:e3:86:c0:d8:
                    46:96:00:de:40:83:56:38:09:f2:36:bf:22:76:62:
                    8e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9F:A0:C0:01:60:98:F2:B3:56:87:90:CF:E0:E0:B5:01:53:0C:D3
            X509v3 Authority Key Identifier:
                keyid:F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:4a:51:ce:f4:ad:ae:ec:f3:b7:4f:b2:50:c4:bb:84:c9:c7:
         2c:d0:02:89:a8:54:dd:d1:4b:15:21:2c:fe:48:5d:98:d6:ff:
         fc:85:4a:e2:43:b5:25:9a:b4:13:26:4b:46:a0:0e:c6:7d:44:
         f1:d7:55:62:58:69:55:23:d1:84:fb:7d:d5:a4:0e:71:6f:82:
         a6:a9:eb:b4:fb:76:ba:74:b9:06:cf:49:88:94:4c:b4:43:68:
         e5:53:1a:d4:ae:28:7b:92:e1:b1:c3:01:90:56:85:f2:1a:76:
         b2:a8:e5:6f:c9:c5:b5:ee:f4:62:3a:fc:b9:1b:74:31:e4:fa:
         1f:a9:88:0d:ab:5a:fb:80:35:0a:03:80:96:85:48:ea:5a:e2:
         08:ec:65:32:8a:a4:a3:f6:01:37:4b:3c:52:ba:19:d4:4c:d0:
         f7:53:3b:05:d8:33:5d:fd:f8:7a:e0:56:2c:2a:11:79:dd:e6:
         2a:aa:f4:f0:54:07:ce:a8:f6:92:52:fa:a4:06:1c:89:06:2c:
         45:80:45:65:91:e4:de:f8:66:85:fb:00:b9:1c:80:97:06:9e:
         be:ca:fa:e0:d2:0d:52:76:7a:6b:ea:a0:d4:5d:ba:13:36:a1:
         0f:d3:69:67:9a:6d:9a:8d:64:84:e3:af:54:b9:22:e5:b6:15:
         f2:32:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:57 2026 by rpki-client