This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
File:                     UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json)
Hash identifier:          G866R+gRNybkyMUt0KAAe3yLGZiiXWoJgJ8SCEcSFGo=
Subject key identifier:   41:2B:C0:C1:60:6C:51:13:00:A5:82:6D:84:57:28:1D:50:1E:BF:BB
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Certificate issuer:       /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial:       2109
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
Manifest number:          20E9
Signing time:             Sat 24 Jan 2026 15:46:32 +0000
Manifest this update:     Sat 24 Jan 2026 15:46:31 +0000
Manifest next update:     Sat 31 Jan 2026 15:46:31 +0000
Files and hashes:         1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: +yYkqrW/zOJf1wpckFS22SAJTIOQ4DaXmkSSZ1P2VrU=)
                          2: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: ISWHnAnupcgdEe8p2mboULpSfRcbxX3lISCXNa8ynQ4=)
                          3: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: ebbHAc3H1xs8yb83KOxdepldMzKZEG2KB/oj0PgrPl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
                          rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8457 (0x2109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
        Validity
            Not Before: Jan 24 15:46:31 2026 GMT
            Not After : Jan 31 15:46:31 2026 GMT
        Subject: CN=6974e957-5d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:6a:e4:ec:b7:8f:ca:89:0e:05:d6:f3:d9:
                    7c:bf:67:71:7a:5f:2e:e0:c4:9e:80:98:09:fb:56:
                    da:92:c3:c6:85:d7:ff:d5:9c:61:8e:7b:14:45:d2:
                    33:24:e1:71:6e:17:ff:39:6b:e7:b5:c0:0d:2a:ed:
                    6c:ad:00:63:ec:32:63:20:d3:5b:67:53:e3:72:00:
                    d5:6e:92:eb:b9:71:85:ec:7b:5b:cb:6d:e4:6d:13:
                    d5:86:86:f5:b5:c3:73:ee:63:50:18:71:10:aa:6e:
                    8b:3c:e6:03:b0:97:02:c5:73:4b:29:3b:ee:99:2f:
                    59:bf:1e:64:14:b4:50:e1:92:c4:ff:68:bd:95:08:
                    09:55:36:fd:ad:6b:83:55:02:9c:c4:58:3e:c1:f3:
                    25:e4:74:6c:9d:63:04:b8:1b:1b:91:04:d7:3b:4f:
                    7d:7c:26:e4:3c:22:9d:5f:ec:f4:90:f0:6e:00:2a:
                    cf:f6:71:5a:fa:f8:f3:b0:c0:89:00:8a:c1:78:2b:
                    ef:f5:fa:0a:37:a2:cc:c2:4d:e6:36:63:37:d0:df:
                    57:e6:9a:7e:15:80:b3:1b:cc:85:2a:21:eb:78:60:
                    48:34:03:d2:59:a4:8a:7e:c8:f3:01:6a:ca:c7:09:
                    cc:26:a2:60:d0:49:8b:d9:b5:8c:44:3f:24:12:0f:
                    06:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2B:C0:C1:60:6C:51:13:00:A5:82:6D:84:57:28:1D:50:1E:BF:BB
            X509v3 Authority Key Identifier:
                keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:52:76:65:eb:fe:46:24:5f:11:33:78:a2:70:02:17:14:37:
         c1:9e:b2:b9:73:e5:47:9b:b1:b3:c3:75:16:7e:a8:84:05:54:
         58:1d:b9:cd:c6:81:ff:c6:75:ff:64:a3:46:ff:ac:15:26:51:
         37:14:2b:6c:27:7b:ea:1e:4d:c7:f1:cd:4e:3f:96:d0:1e:ed:
         86:d0:c6:4e:e5:5a:19:89:19:40:d7:9d:2b:70:9a:19:a2:20:
         e3:e9:8b:e1:c3:6a:76:df:1f:08:97:6e:ce:f6:87:8d:43:db:
         40:ea:2a:ab:1f:f9:a8:1a:96:8f:90:2f:65:6f:83:3a:df:78:
         c7:42:01:70:06:58:ff:01:04:d3:13:72:9b:79:60:ca:fe:a7:
         8c:1f:e7:b2:2e:d7:85:38:b8:b1:a1:f9:f0:af:10:77:10:44:
         d1:7a:51:fc:6b:fd:04:51:ac:1b:f5:cd:f1:f0:26:9d:57:50:
         19:0f:27:69:7c:4d:ca:51:8d:49:c0:b2:9b:33:b5:5e:30:2a:
         52:91:60:be:5d:64:51:6a:54:b6:50:cf:6f:fd:75:80:0d:9b:
         5b:c0:99:8d:85:71:5f:30:80:aa:73:a1:0c:ac:9e:5a:2e:07:
         6a:29:e5:59:88:16:73:7a:57:65:2b:7c:cd:91:fb:fc:b4:a3:
         9b:0b:99:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTk5NjcxMTAvBgNVBAUTKDUzMzBFRUVFQjBEMEE5NTM1RkFDODUwNUU3MzU4NDNB
RjZDRTYwQUYwHhcNMjYwMTI0MTU0NjMxWhcNMjYwMTMxMTU0NjMxWjAYMRYwFAYD
VQQDDA02OTc0ZTk1Ny01ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsOZq5Oy3j8qJDgXW89l8v2dxel8u4MSegJgJ+1baksPGhdf/1ZxhjnsURdIz
JOFxbhf/OWvntcANKu1srQBj7DJjINNbZ1PjcgDVbpLruXGF7Htby23kbRPVhob1
tcNz7mNQGHEQqm6LPOYDsJcCxXNLKTvumS9Zvx5kFLRQ4ZLE/2i9lQgJVTb9rWuD
VQKcxFg+wfMl5HRsnWMEuBsbkQTXO099fCbkPCKdX+z0kPBuACrP9nFa+vjzsMCJ
AIrBeCvv9foKN6LMwk3mNmM30N9X5pp+FYCzG8yFKiHreGBINAPSWaSKfsjzAWrK
xwnMJqJg0EmL2bWMRD8kEg8GFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEErwMFg
bFETAKWCbYRXKB1QHr+7MB8GA1UdIwQYMBaAFFMw7u6w0KlTX6yFBec1hDr2zmCv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTk2Ny8wQkJGMjU3ODE1
QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFWTmZySVVGNXpXRU92Yk9Z
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V6RHU3ckRRcVZOZnJJVUY1eldFT3ZiT1lLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTk2Ny8wQkJGMjU3ODE1QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFW
TmZySVVGNXpXRU92Yk9ZSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwUnZl6/5GJF8RM3iicAIXFDfBnrK5c+VHm7Gzw3UWfqiEBVRYHbnN
xoH/xnX/ZKNG/6wVJlE3FCtsJ3vqHk3H8c1OP5bQHu2G0MZO5VoZiRlA150rcJoZ
oiDj6Yvhw2p23x8Il27O9oeNQ9tA6iqrH/moGpaPkC9lb4M633jHQgFwBlj/AQTT
E3KbeWDK/qeMH+eyLteFOLixofnwrxB3EETRelH8a/0EUawb9c3x8CadV1AZDydp
fE3KUY1JwLKbM7VeMCpSkWC+XWRRalS2UM9v/XWADZtbwJmNhXFfMICqc6EMrJ5a
LgdqKeVZiBZzeldlK3zNkfv8tKObC5kr
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:48 2026 by rpki-client