This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
File:                     UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json)
Hash identifier:          3hlrSiykzSDSCFZFqn9Q2hQGukQbQ5L1GM3H6RX7iwg=
Subject key identifier:   08:E5:3E:79:96:36:BC:EB:2F:BD:3D:8F:75:69:E9:E0:20:3F:98:DE
Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
Certificate issuer:       /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Certificate serial:       19A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
Manifest number:          19A4
Signing time:             Sat 24 Jan 2026 16:09:48 +0000
Manifest this update:     Sat 24 Jan 2026 16:09:47 +0000
Manifest next update:     Sat 31 Jan 2026 16:09:47 +0000
Files and hashes:         1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: l9xBeyHBvQQ1PS57pJOuXomHeZAT/kmV52KMhD8Zlvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
                          rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6564 (0x19a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
        Validity
            Not Before: Jan 24 16:09:47 2026 GMT
            Not After : Jan 31 16:09:47 2026 GMT
        Subject: CN=6974eecb-9601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b1:d5:0d:4a:4d:a4:3c:88:bd:36:d4:26:43:
                    94:01:4b:78:16:09:9f:43:12:25:72:0f:9f:a4:74:
                    03:c3:32:d4:a8:b1:6d:62:37:f1:69:08:d7:ce:56:
                    15:5a:66:f5:33:68:03:aa:47:94:39:fd:4e:52:d8:
                    90:ba:c6:d5:f4:3b:bb:e7:ce:fb:03:03:d3:78:02:
                    f3:23:5b:06:27:9f:3d:95:e4:78:a7:1d:ec:36:64:
                    f1:13:d8:1f:1c:84:e0:18:d8:b5:1d:1e:9d:0b:b6:
                    2b:4b:8a:65:e1:a1:b4:dd:20:5f:fe:58:14:30:b3:
                    05:00:90:35:dd:34:31:ce:fb:e5:9a:33:a2:8b:55:
                    c8:4f:dd:55:9e:bb:c8:18:65:80:9d:49:55:46:c8:
                    cd:19:02:35:20:47:99:0f:55:6b:d0:74:9b:e2:85:
                    51:a0:65:5c:16:2a:1c:47:1b:d1:48:23:81:2d:22:
                    5a:d8:5f:54:69:df:2a:59:05:2f:f7:5b:c2:03:0c:
                    72:01:71:92:a9:8b:25:bb:72:52:c2:da:aa:ad:28:
                    d2:0a:ec:b3:95:74:92:7e:99:7a:b6:6d:b4:38:29:
                    07:69:a8:58:68:6e:06:03:37:25:e8:f8:5b:71:7b:
                    45:63:c9:2d:44:54:9e:11:e5:d8:ed:0c:4b:0b:3d:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E5:3E:79:96:36:BC:EB:2F:BD:3D:8F:75:69:E9:E0:20:3F:98:DE
            X509v3 Authority Key Identifier:
                keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:24:72:16:2a:99:00:18:b9:11:ed:8b:a0:73:1c:c3:25:68:
         44:22:ba:1f:15:b3:84:0f:88:dc:81:4b:14:db:d4:00:42:0a:
         67:4e:12:ba:e0:b4:b8:9f:1d:74:be:5e:ee:21:e8:09:b5:54:
         7b:e1:2a:5c:ca:cd:69:76:1a:2c:9e:5e:1e:56:a2:8b:e1:d2:
         27:ac:f6:f5:1f:5a:cf:96:19:ad:1f:7a:e9:19:fe:44:d2:eb:
         9a:fd:33:6f:6a:cd:1b:0e:ee:ea:3a:b9:01:c8:90:64:6e:cc:
         3a:31:8c:27:2b:33:c4:8f:28:e1:68:ac:9a:12:f4:8f:67:d5:
         5d:51:50:9e:7f:09:87:23:01:04:fd:e3:50:38:ee:bb:0e:cc:
         10:e4:6f:7e:eb:39:f7:ad:29:6e:9c:52:57:ef:b8:dd:eb:f3:
         5e:b8:bb:23:dd:9f:fc:93:5f:a2:20:04:20:6b:47:c9:ae:4c:
         3a:e7:ef:4f:4c:cf:a1:8a:6a:84:be:58:2f:9d:f5:26:b7:9d:
         23:23:b7:10:6e:25:ad:1c:20:41:a7:f9:16:06:b3:d5:80:5f:
         7c:71:2a:dd:54:da:9d:78:8a:34:5b:26:be:dd:1e:b2:a5:bc:
         5d:f1:cf:a6:4d:8e:40:b0:a8:95:ea:a8:b0:57:3a:a9:a8:16:
         35:38:39:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:09:26 2026 by rpki-client