This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
File:                     _UmlE0ai96yBGwCtYuvvDpSiobI.mft (raw, json)
Hash identifier:          wDG1FxNFKeyIHPDBWUBWlyujqPklBmU8LhcmplFaZyA=
Subject key identifier:   61:1D:D4:4C:EB:12:E1:A4:38:59:97:9A:29:DD:44:47:BA:82:AA:A1
Authority key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
Certificate issuer:       /CN=A91652B5/serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
Manifest number:          28
Signing time:             Sun 25 Jan 2026 06:47:54 +0000
Manifest this update:     Sun 25 Jan 2026 06:47:53 +0000
Manifest next update:     Sun 01 Feb 2026 06:47:53 +0000
Files and hashes:         1: _UmlE0ai96yBGwCtYuvvDpSiobI.crl (hash: uG9SC0SBaIonx4HH916dmiw7AXmBHgh8Z7hAkf+0hmA=)
                          2: 535DB56CD1AF11F0A278C10CC4F9AE02.roa (hash: 5wR/vgwBsZWB9tqC4WRbv4D2H8YQRdD09PXZrJfd0zk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
                          rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
        Validity
            Not Before: Jan 25 06:47:53 2026 GMT
            Not After : Feb  1 06:47:53 2026 GMT
        Subject: CN=6975bc9a-d26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a2:22:96:39:87:1a:23:61:ec:07:83:b7:a2:
                    90:a6:f2:fc:60:69:67:1b:bf:aa:10:32:c1:f3:61:
                    6f:18:cb:2b:4d:dc:50:b8:1b:77:6c:2b:6d:67:0f:
                    88:be:64:cb:16:54:b8:80:59:d5:9a:36:c5:9f:44:
                    2d:91:b3:2e:df:ef:b4:ec:f9:3f:7b:25:6d:4e:1a:
                    af:1a:5c:70:a8:b3:d7:1d:9f:d0:af:87:74:71:ab:
                    21:66:eb:5e:c1:e3:4b:02:e9:34:f4:64:be:98:5f:
                    25:e6:cf:be:57:dc:51:79:fe:1d:5a:21:ad:29:63:
                    4c:d2:9a:a8:9c:18:c1:e1:6e:6f:f2:55:b9:8a:e1:
                    7b:28:39:16:f3:ff:40:9f:49:72:64:a0:51:b1:56:
                    5e:96:6f:55:c9:ca:5c:f0:1e:99:40:85:31:aa:b2:
                    af:d5:ff:a2:8b:1b:bc:43:e2:87:54:bb:0f:64:2c:
                    d5:61:93:0c:af:77:69:da:51:de:ab:10:9c:87:79:
                    f6:f8:86:b0:9a:ab:47:7c:3e:99:d6:4e:40:41:62:
                    7f:3a:b6:51:02:33:b9:b6:31:92:9a:d1:3b:b5:cd:
                    e5:dd:00:05:4e:f6:be:b1:be:8f:c6:2b:0c:34:28:
                    0b:95:66:22:6c:01:fa:50:4b:83:b8:12:ac:35:55:
                    77:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1D:D4:4C:EB:12:E1:A4:38:59:97:9A:29:DD:44:47:BA:82:AA:A1
            X509v3 Authority Key Identifier:
                keyid:FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:38:e9:25:38:85:5c:ae:c1:f1:65:9b:d2:e7:20:24:de:91:
         04:49:7c:39:73:d7:41:66:54:a4:e0:8c:0b:39:bd:f2:17:bc:
         03:32:48:c8:98:32:8b:ca:6e:8f:8a:ba:44:e9:41:e8:10:57:
         17:96:be:73:e8:d0:7d:00:ad:da:ee:b9:65:21:6c:da:44:2a:
         f4:8b:f5:50:aa:06:36:be:0e:04:e9:8a:ba:a4:4d:94:02:64:
         71:39:36:6b:ff:fb:55:bb:cd:53:e7:ff:24:bc:42:8e:a1:25:
         09:ac:ac:26:fb:25:fd:3e:74:30:ff:da:a8:d3:d0:9b:7d:b0:
         88:57:6c:e5:c8:18:6f:ce:ba:29:39:1b:9c:c9:ea:cd:89:31:
         43:5a:ed:bf:25:ed:01:fe:44:b2:11:ce:9f:e0:ab:e0:c4:41:
         b2:4e:cb:d1:41:85:3d:be:e8:d9:2d:36:0c:09:75:c2:ba:b9:
         48:cb:35:f8:c3:3d:07:d7:48:65:6a:e8:8f:b7:e7:20:08:28:
         1e:de:4d:59:74:88:fc:14:a2:1e:42:5c:5e:1a:1c:00:e5:ad:
         c6:ea:48:e3:63:e5:c7:50:b8:44:49:07:3c:06:03:51:71:46:
         b1:cc:77:7b:f0:1a:18:35:9e:5e:10:ac:3f:55:a1:65:6e:71:
         f1:fc:5e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:38:17 2026 by rpki-client