This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
File:                     UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft (raw, json)
Hash identifier:          TA24N3ugSYK+Tf1ZNltOmzBsmlptuFpYD0WNTp2jeSY=
Subject key identifier:   32:DC:59:93:FA:DC:1F:10:13:53:8C:5B:E0:D9:4A:7A:49:9E:F6:17
Authority key identifier: 51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4
Certificate issuer:       /CN=A9160DDD/serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
Manifest number:          31
Signing time:             Fri 23 Jan 2026 06:36:44 +0000
Manifest this update:     Fri 23 Jan 2026 06:36:44 +0000
Manifest next update:     Fri 30 Jan 2026 06:36:44 +0000
Files and hashes:         1: UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl (hash: mh3pL/4CwV+jEJnPDI2iZXWTsGZSThe1MyXJ5BocGXs=)
                          2: D94518DAD42C11F0972DF142C4F9AE02.roa (hash: uXWvFP9Z94HEljAssthanqLQgApJdRhaBIpVH4TEE/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DDD, serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
        Validity
            Not Before: Jan 23 06:36:44 2026 GMT
            Not After : Jan 30 06:36:44 2026 GMT
        Subject: CN=697316fc-42e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:63:1e:c6:7c:37:2e:9d:88:4f:9d:42:c5:
                    e8:18:8d:63:ff:5a:8a:56:db:a0:db:13:2c:fa:1d:
                    2e:fd:12:c3:a4:29:41:60:20:77:bd:c4:35:51:e2:
                    0c:0d:70:f7:42:ed:77:4f:7c:a4:4d:b2:8a:3b:c2:
                    de:3a:0a:b3:55:fd:33:5b:1c:96:0c:21:18:81:35:
                    16:23:50:c8:73:48:c5:c8:ff:f3:86:fb:14:a6:32:
                    9e:f7:d1:d8:29:4b:51:d5:f3:4c:6b:38:24:c7:a3:
                    b4:bf:46:3e:7d:52:4e:6e:fb:16:eb:dd:56:6c:36:
                    18:65:b6:10:00:3d:52:bf:ed:c0:70:5b:51:aa:b0:
                    6e:78:9d:c4:77:b4:ac:ba:10:7b:c8:27:80:d4:2a:
                    48:cd:75:00:0d:1b:97:07:fb:f2:62:58:a9:ab:dd:
                    cb:f0:74:5d:3d:54:fe:68:15:c4:fe:91:ef:fa:0a:
                    55:9a:44:32:a2:be:dd:00:52:a5:38:1e:46:d2:aa:
                    3c:ea:e7:6c:49:45:21:fa:d6:f4:f7:73:ec:1b:b8:
                    8e:0f:9f:82:bd:17:b7:c3:d6:f5:eb:66:a6:d1:af:
                    be:65:1f:e7:00:8d:ff:b4:0a:e3:1a:7f:26:91:41:
                    d5:32:06:73:7a:23:6d:84:de:e3:10:d1:58:53:a0:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DC:59:93:FA:DC:1F:10:13:53:8C:5B:E0:D9:4A:7A:49:9E:F6:17
            X509v3 Authority Key Identifier:
                keyid:51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c8:a1:b7:99:a6:ec:fe:4f:6d:4c:19:e5:1f:86:6e:8f:b0:
         97:e3:ef:f7:32:13:47:d1:4c:ec:df:e0:7c:98:51:9d:6a:a1:
         39:c0:02:9b:dd:ff:cc:5b:bd:b4:46:d9:47:f3:e4:c4:b1:1f:
         74:e0:f3:74:0e:be:75:28:3e:72:95:26:a5:5b:2c:01:6b:62:
         cf:a2:b1:07:e8:15:4d:53:6d:0a:07:34:0c:70:58:bb:fd:06:
         8e:43:26:2e:f1:be:a8:d2:f9:60:64:7c:bb:2d:7c:66:39:5c:
         64:0d:a3:1d:12:97:ae:3e:37:5a:1d:b9:da:db:6f:78:b4:83:
         91:da:05:cf:55:65:d1:f8:86:dc:64:50:53:5f:60:7e:31:28:
         97:a2:0c:cb:68:69:43:46:ae:c8:c0:eb:6b:78:9b:f1:ce:94:
         9e:7b:4c:f9:08:4f:06:d5:6c:1e:5e:e6:9c:ff:65:27:cc:d1:
         8f:5c:a7:69:1a:b5:4c:c0:3d:72:e5:20:95:11:cd:00:0c:f8:
         8d:60:16:08:12:f2:ab:2b:60:e7:98:d1:ed:48:c4:1e:08:9c:
         e3:36:40:58:3b:b9:6b:9e:c7:cd:a2:1f:ca:78:ad:73:f8:ec:
         11:d5:b2:9e:70:6e:a5:a3:17:ee:90:2f:e9:3c:d5:3e:18:3c:
         16:3d:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:32 2026 by rpki-client