This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
File:                     UK8aopMCL3bNH1G6DdWKW4lmkVo.mft (raw, json)
Hash identifier:          29vrvPs+826nylJG/ejujxdZUOzq6nGmbOYuzJCErhw=
Subject key identifier:   14:33:00:83:66:45:0E:B1:59:39:33:C3:57:6D:B9:08:2B:4D:79:5C
Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
Certificate issuer:       /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
Manifest number:          20
Signing time:             Fri 23 Jan 2026 06:51:41 +0000
Manifest this update:     Fri 23 Jan 2026 06:51:40 +0000
Manifest next update:     Fri 30 Jan 2026 06:51:40 +0000
Files and hashes:         1: UK8aopMCL3bNH1G6DdWKW4lmkVo.crl (hash: R8OmaWuXHJlpWVa3Xgr3XavfLyarh9oJ99wTuq94mWM=)
                          2: 7D88011ACF4011F08FF1FE52C4F9AE02.roa (hash: /IHW3aHM/SUsb9kiCoK1jZIm/hDv2f3qYZbCqQZYAZs=)
                          3: BBD396F8CC1D11F09B362031C4F9AE02.roa (hash: gh8+qv3MhaUl1O19jg6tnVa+KoQIkfYNDiOkghKWIjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
                          rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
        Validity
            Not Before: Jan 23 06:51:40 2026 GMT
            Not After : Jan 30 06:51:40 2026 GMT
        Subject: CN=69731a7d-2ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:b5:7e:8d:8e:f9:b8:eb:c6:89:a9:41:9a:
                    52:25:13:ad:3e:6e:a1:5b:da:b9:fd:17:f2:98:2f:
                    38:51:30:57:da:29:ef:29:3e:a2:42:14:e0:b6:86:
                    39:7a:0c:aa:b5:01:d8:21:af:e3:49:92:57:fc:5f:
                    1b:ea:2d:17:56:8c:99:e0:e5:90:45:ab:c5:52:46:
                    a6:fa:8c:90:bd:27:c0:93:23:33:c2:02:73:5f:95:
                    cb:94:ee:4d:ca:d0:17:13:1c:72:ee:0a:3e:3b:fe:
                    c6:fd:33:07:4d:1f:6e:52:8c:32:dd:10:09:1b:c9:
                    5b:3f:9e:5e:fb:13:c8:80:92:d2:96:5e:92:34:2a:
                    b5:de:6e:c9:97:10:7a:c8:9b:dd:e1:39:d8:8a:63:
                    b4:39:52:e5:0f:82:8d:82:33:69:47:45:63:9d:69:
                    8e:aa:4f:e4:37:fa:35:6d:a2:ec:15:d8:e1:86:37:
                    82:17:9c:78:e9:8c:36:47:ca:5d:d8:68:07:81:17:
                    f7:66:0d:0c:8e:91:8b:40:3f:6e:13:69:d7:1b:85:
                    67:09:7a:8a:c5:8c:54:3f:cf:1c:d5:1a:4c:53:09:
                    34:49:79:3e:62:f4:e6:29:fe:00:bc:fc:28:1d:7d:
                    00:0b:c9:30:aa:22:b7:4e:5b:be:00:4b:e3:7d:e6:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:33:00:83:66:45:0E:B1:59:39:33:C3:57:6D:B9:08:2B:4D:79:5C
            X509v3 Authority Key Identifier:
                keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d6:c5:04:80:58:7f:7b:47:f6:1f:85:13:19:7f:22:b4:6e:
         aa:c0:cd:f8:8b:09:80:33:25:4d:02:da:09:98:f7:27:cd:fd:
         3a:e3:25:db:bd:8a:85:c3:44:53:0c:ac:27:1b:00:eb:11:8f:
         b0:51:5b:61:c5:c3:6b:1d:5b:bd:03:52:30:aa:39:a4:2b:8a:
         97:2d:7e:34:41:e4:b2:5b:48:5e:3f:57:6e:c6:7b:0a:83:85:
         7b:28:43:06:6b:17:83:e7:f5:20:84:58:74:bc:a8:c2:ee:e9:
         3a:60:84:af:8a:c0:41:1f:5a:26:2a:a8:32:e3:46:55:c1:f3:
         8f:fa:7c:c6:77:a3:07:69:a5:0d:6e:34:ae:08:1a:80:72:a0:
         c8:78:06:d0:c3:31:de:c1:15:cb:4b:ab:18:2e:f7:77:fb:e9:
         49:3f:b5:28:ef:4e:02:a5:e1:cc:1d:f6:5d:12:3a:49:6c:94:
         64:f9:db:38:fe:6d:46:1b:db:c3:07:15:71:40:4f:cd:d9:ac:
         07:3a:d2:36:eb:a6:df:7b:0d:bb:a0:30:47:dc:d5:a9:5d:1c:
         8e:3b:65:98:dc:d1:24:6a:65:40:e8:fd:7c:86:c9:13:76:fb:
         84:4f:4d:3f:ba:03:8e:92:00:c9:8b:84:86:e6:c1:f4:77:2f:
         1d:5f:b0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:48:53 2026 by rpki-client