This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
File:                     UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json)
Hash identifier:          f98D4xfz3m89eYoOSQifbuk011Nbe2qKOx7NEYpgsyM=
Subject key identifier:   A2:B3:17:74:33:B0:1D:7C:03:5E:2B:AB:10:78:D9:26:59:4F:A5:E1
Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
Certificate issuer:       /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Certificate serial:       1045
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
Manifest number:          103C
Signing time:             Sat 24 Jan 2026 17:07:09 +0000
Manifest this update:     Sat 24 Jan 2026 17:07:08 +0000
Manifest next update:     Sat 31 Jan 2026 17:07:08 +0000
Files and hashes:         1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: gmkKp0/x14YtyY2axbnAhmfE13zxlmaACOPQz4N7vnM=)
                          2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: gPm95k9B9IRjr3SYjHp0eLr7oEtltC4Q30ofIoBPOx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl
                          rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4165 (0x1045)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CA20, serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
        Validity
            Not Before: Jan 24 17:07:08 2026 GMT
            Not After : Jan 31 17:07:08 2026 GMT
        Subject: CN=6974fc3d-b036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5c:d7:aa:09:27:1e:b5:39:0e:d4:dc:41:57:
                    2e:a5:e2:d3:e0:b2:ba:64:02:03:b2:e5:d3:e0:5d:
                    2d:1f:45:41:d2:83:c9:87:1a:ee:20:87:a9:3b:78:
                    02:79:53:e4:ac:18:c1:e8:09:f3:6a:ce:cd:0f:35:
                    77:d4:e3:00:85:b1:6d:93:2e:fa:fe:26:06:63:30:
                    26:a4:35:ad:c5:d3:90:e3:3d:97:27:86:b3:69:28:
                    67:db:6f:ab:d5:ac:4e:ef:57:26:30:5b:26:0c:b6:
                    20:80:aa:86:d0:75:c1:b8:9f:1d:83:f0:69:b1:08:
                    0c:9d:2f:2d:76:f5:a4:6a:48:35:65:59:9c:6d:21:
                    9c:c6:a0:7c:c7:8f:03:92:87:e0:2c:ec:bf:19:fe:
                    25:4b:0f:9c:59:8b:d9:bf:d7:9b:a2:2e:e3:76:4f:
                    2b:ee:b9:3b:d4:31:bd:7f:87:de:fc:4b:9c:ac:59:
                    7c:36:95:a2:99:f8:02:bf:de:e8:39:33:4f:3d:af:
                    02:36:af:e3:35:42:f0:df:31:95:2e:38:dd:93:5f:
                    56:1a:ab:ba:5e:8e:54:8c:8f:cb:ad:15:6c:de:75:
                    1e:2d:91:4e:7d:e8:d4:58:58:f8:7f:ae:33:21:49:
                    e2:5d:ff:b3:11:68:7f:3b:33:5b:4f:b1:f0:1d:0e:
                    2e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B3:17:74:33:B0:1D:7C:03:5E:2B:AB:10:78:D9:26:59:4F:A5:E1
            X509v3 Authority Key Identifier:
                keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:24:bb:28:3f:ed:0d:8c:66:33:0c:d3:3d:8e:c3:72:3d:c8:
         2d:c5:4f:2b:89:be:44:d7:5e:51:ea:63:cb:9e:2e:2f:3a:84:
         4e:51:53:fb:47:3d:a0:af:ec:13:d9:10:96:ab:12:58:48:d3:
         9f:92:08:d9:6a:7d:b7:f3:da:8b:35:f5:c7:26:a6:19:7e:15:
         01:ba:90:8e:74:59:cc:98:23:6b:0a:2d:88:eb:68:7f:73:1d:
         a9:8c:27:c5:62:17:9d:8a:c4:19:8d:3b:23:26:88:ff:6a:55:
         a0:90:13:43:b7:57:bc:4e:03:d8:c2:c7:4d:65:29:c6:23:50:
         d8:5e:7c:30:f6:4f:ff:6d:6d:fc:a9:ab:51:de:7e:77:a0:96:
         0f:10:62:c0:b8:12:da:3f:1c:1b:45:22:7e:ed:19:fe:78:96:
         3f:ca:e7:8b:4c:d9:47:a0:0d:cb:ec:00:e0:59:5d:2b:51:f1:
         d2:5d:98:db:12:dc:89:1a:05:88:1a:26:f0:f5:15:42:6c:35:
         73:4f:b4:4b:1a:d5:dc:a6:00:31:fb:10:e5:cc:b6:4f:5c:8d:
         23:81:13:5c:da:c1:1d:a5:e2:77:73:a7:9e:25:71:d1:69:4a:
         44:c2:f1:bd:55:07:ca:dd:e7:92:e5:de:1f:d6:db:d6:2c:25:
         8e:35:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:48 2026 by rpki-client