This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File:                     UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier:          GOhPtnysUdcTaBhT6TLbWdMNLVkfVVN6hDtRyRZ1xvI=
Subject key identifier:   2B:5C:C3:7F:81:7E:19:E4:61:A9:58:9B:98:01:D2:66:7C:29:F7:FB
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer:       /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial:       0C73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number:          0C5E
Signing time:             Sat 24 Jan 2026 18:15:36 +0000
Manifest this update:     Sat 24 Jan 2026 18:15:35 +0000
Manifest next update:     Sat 31 Jan 2026 18:15:35 +0000
Files and hashes:         1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: xm1Xaph7MNYk63sbdAAx6lQEv8WQFm3oMCsrcpuzR6E=)
                          2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: vHCE8Xl5BDP1uHkO7u1AQeNIYeGBlOPuRbaiEEaJ7/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
                          rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3187 (0xc73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
        Validity
            Not Before: Jan 24 18:15:35 2026 GMT
            Not After : Jan 31 18:15:35 2026 GMT
        Subject: CN=69750c48-9b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:fc:ee:17:b1:cb:f1:42:46:0e:f5:00:46:
                    98:4a:24:c8:b0:93:e1:34:dd:13:3a:64:6c:54:67:
                    15:8c:7e:50:62:4f:45:06:24:ad:34:fa:82:d1:3b:
                    26:7b:12:2f:d1:f2:16:e1:67:05:e4:9a:4e:9e:d9:
                    ce:d8:9a:11:3e:5f:95:7b:51:db:6a:b3:11:b7:c5:
                    1f:74:0f:9a:1f:62:08:a9:e6:6c:60:e5:38:42:8c:
                    c4:2d:a1:dc:f7:9e:19:b0:8a:64:53:f8:96:40:fa:
                    e3:58:eb:cb:30:13:ad:4e:a4:c8:2a:54:58:51:02:
                    d2:54:14:17:0d:f9:23:5a:89:e7:3f:96:28:29:ed:
                    46:2d:2a:5e:09:27:30:0d:5c:f5:7d:45:f7:cb:df:
                    be:a8:a2:69:6f:9c:19:1b:00:e5:9e:ee:84:0c:58:
                    0e:ad:b9:2e:e3:d9:75:44:7d:dc:70:36:7a:9b:89:
                    00:15:e5:ea:10:e8:fd:de:95:14:44:d6:17:9f:50:
                    6f:95:fa:c9:19:34:3f:82:fd:0c:85:ea:32:d8:61:
                    ac:13:ff:ab:fa:7b:18:94:7c:f3:b0:c0:cd:6b:b4:
                    52:0c:68:eb:cf:13:c9:1b:b4:3d:b7:d9:2c:78:39:
                    5d:05:ac:da:31:f6:ae:86:1f:2f:fa:81:d4:cb:90:
                    71:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5C:C3:7F:81:7E:19:E4:61:A9:58:9B:98:01:D2:66:7C:29:F7:FB
            X509v3 Authority Key Identifier:
                keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5c:c7:9f:3d:54:f4:c0:92:f2:29:15:f7:e4:19:03:cb:d4:
         9b:f6:44:1a:4e:4c:11:95:c0:7f:2b:24:5e:03:cb:b6:b6:ed:
         03:19:a1:60:f7:d2:be:4e:b7:9a:d5:a7:dd:68:f4:d1:e1:a7:
         7f:62:d1:38:ee:e6:14:b7:b0:09:5c:27:ab:be:49:94:b3:a2:
         ec:3a:d4:4a:20:59:28:fb:7f:fc:ff:ba:95:82:8e:e5:59:61:
         de:7a:12:ba:fd:a0:d3:8a:cf:d9:c9:9c:8f:c8:cd:17:4e:b1:
         2b:19:73:e4:49:c4:48:76:3e:d8:b2:a6:70:27:bf:78:e7:77:
         b8:95:94:83:ee:25:f7:55:f3:bc:62:8f:21:f1:ed:d3:20:f4:
         9c:d5:87:1d:42:54:9d:5c:02:7d:06:dc:65:f3:30:e1:f7:73:
         18:2f:62:aa:43:d2:92:59:3d:50:3f:16:e2:24:65:57:44:f4:
         73:ad:d2:00:09:4f:21:55:0c:46:b1:73:3f:df:e4:f9:98:cc:
         07:8d:a4:35:c5:16:c6:f9:e0:f6:2c:09:74:99:b5:c8:ad:36:
         77:2b:f8:fe:c3:0f:42:cd:3f:06:36:cb:48:04:9c:87:6e:36:
         02:73:ff:98:f0:bf:8f:1b:ae:52:94:62:3e:8d:9d:35:26:d7:
         b9:e2:29:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:26 2026 by rpki-client