This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
File:                     UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json)
Hash identifier:          85F20fbQ1pbVhbhAZ95PyNWr4H2T12dtk2VvVXN0MSQ=
Subject key identifier:   52:9D:C8:61:15:12:B3:67:B7:6E:01:5C:5D:9A:35:60:BE:88:C6:71
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
Manifest number:          79
Signing time:             Sun 25 Jan 2026 05:55:04 +0000
Manifest this update:     Sun 25 Jan 2026 05:55:04 +0000
Manifest next update:     Sun 01 Feb 2026 05:55:04 +0000
Files and hashes:         1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: fTc2GI7p+TbRPXB9HcyQo26nZl2bEkiVQWilfHPaanI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Jan 25 05:55:04 2026 GMT
            Not After : Feb  1 05:55:04 2026 GMT
        Subject: CN=6975b038-29f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:eb:9f:bc:cf:d1:94:e7:3e:84:83:b1:37:97:
                    fa:61:6a:40:47:8b:93:76:8d:fc:25:56:dc:29:35:
                    f8:12:dd:72:13:4c:a6:ed:ad:d6:d2:75:7e:4a:ea:
                    35:c2:27:e6:64:52:06:63:a4:72:b8:17:c2:e9:2e:
                    05:c6:10:40:fb:1e:a6:54:99:fb:71:a5:d9:aa:34:
                    1d:5e:04:80:e5:4d:af:7d:46:f4:39:57:40:35:b9:
                    d8:2d:2f:4c:20:ee:b0:6d:48:ba:52:8e:51:b1:c4:
                    b6:d0:b8:4d:22:da:b9:30:37:19:c3:35:14:fc:bd:
                    87:76:3d:9f:e8:df:1f:a8:77:1b:ed:e9:ad:92:5a:
                    db:46:54:fa:9d:8e:9e:10:68:9a:12:cf:e7:d8:34:
                    57:c4:1c:c7:5f:29:68:4a:79:2b:11:cc:e7:a4:e4:
                    9f:20:61:5a:7d:fa:98:08:e8:75:57:b5:25:64:5b:
                    31:bb:7d:de:17:a3:37:61:fb:6c:90:3d:db:87:77:
                    ae:c3:bd:99:6f:ee:47:28:1c:fd:0c:87:99:67:dc:
                    9f:f0:15:12:43:dd:66:74:7a:bf:56:80:9e:4d:f6:
                    80:49:68:e8:c9:50:1f:ab:75:95:58:ac:89:06:18:
                    f8:06:90:59:cf:62:3b:33:15:aa:e5:3b:ce:d2:23:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9D:C8:61:15:12:B3:67:B7:6E:01:5C:5D:9A:35:60:BE:88:C6:71
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c9:c8:ea:7a:09:d9:8e:d4:e3:eb:a1:a1:f8:31:ef:71:78:
         34:9a:a2:f6:ea:45:23:42:ef:0a:e2:4b:aa:7f:33:18:b3:65:
         ea:96:97:7c:da:bd:82:ad:08:60:95:44:77:87:f3:1e:2a:f3:
         8f:a5:c2:a2:5f:63:a3:0c:53:ad:7e:35:4c:f5:2a:bb:84:bf:
         5b:d7:c5:7c:2f:5f:77:b6:43:12:76:92:36:94:d6:4d:42:a1:
         d3:ff:5d:71:e5:03:9c:f8:4f:aa:c4:0d:84:2d:3c:5c:90:19:
         ee:82:3e:6f:d1:7a:52:e9:f4:94:33:77:d1:8f:b1:6b:61:aa:
         43:f0:3d:b5:9a:50:86:6b:41:1f:96:70:73:6c:c2:5a:ae:c6:
         e9:e3:a1:3f:7d:90:b6:42:4c:3c:d3:2f:f9:b6:fd:f9:b8:c3:
         27:74:23:ac:7a:c4:9c:d3:6d:50:39:e9:d4:2d:c4:b8:bc:6c:
         c9:3b:01:18:91:35:1b:b3:fd:96:60:bf:ac:c7:4d:b8:28:85:
         94:61:67:ef:76:b3:42:30:9c:dd:28:73:98:b0:84:57:98:1c:
         b4:b1:7a:a4:c2:58:f5:3c:48:ef:01:40:9e:0c:f1:2e:52:a4:
         04:66:c5:00:74:b7:3d:66:35:58:93:c2:a5:64:d1:f3:58:91:
         f1:a6:04:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:43:59 2026 by rpki-client