This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
File:                     uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft (raw, json)
Hash identifier:          axk6C4BGIa9ioRYUOKLRCaSwk7e/2bTGEU3xi5SETOU=
Subject key identifier:   98:4D:DE:82:6B:44:D3:AD:3C:A9:A3:F4:88:BC:1E:07:B2:77:58:7F
Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
Certificate issuer:       /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Certificate serial:       06E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
Manifest number:          06D6
Signing time:             Sat 24 Jan 2026 21:25:46 +0000
Manifest this update:     Sat 24 Jan 2026 21:25:46 +0000
Manifest next update:     Sat 31 Jan 2026 21:25:46 +0000
Files and hashes:         1: uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl (hash: YdlWZ2/9tl0RKfvyoJziGXSeJZP9K9SDq5SGUggNS/I=)
                          2: 8889F4E484A711EBB701E773C4F9AE02.roa (hash: lWZRobhtO0oFUd+vRpiCuxRaZUL791izmBtb3cII0fo=)
                          3: 7464EB1E876411EE8971C221C4F9AE02.roa (hash: zpTvJznQ+5mTsWYuBwFqmhL2aTwH3SE1aCKMAY/WGXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
                          rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760 (0x6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917068E, serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
        Validity
            Not Before: Jan 24 21:25:46 2026 GMT
            Not After : Jan 31 21:25:46 2026 GMT
        Subject: CN=697538da-829a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:8e:9e:8d:c0:bd:50:e1:b4:f5:31:49:ef:
                    12:ea:5c:7c:6c:47:95:d8:f4:55:45:3b:b4:51:3c:
                    a7:7c:0e:71:ae:67:ad:56:80:29:5b:86:ed:88:35:
                    ae:c9:7c:9d:e1:75:96:6e:fd:19:c4:bf:ed:10:6b:
                    da:85:c7:65:2f:e9:2f:af:99:ce:8f:07:04:ce:ef:
                    a7:97:98:9d:75:a6:89:c3:a7:73:2c:e8:9e:61:64:
                    22:3e:f1:96:8e:78:56:85:24:b7:dd:69:dd:24:bd:
                    a7:96:21:58:54:0d:e6:42:74:dd:78:73:c1:c5:ff:
                    90:20:c4:ac:45:12:de:9f:7f:e3:3b:ab:31:ee:c4:
                    9f:be:fe:6a:0b:33:4d:2a:42:5a:1a:17:ae:46:36:
                    47:9c:17:fa:ec:47:5e:10:90:c8:13:55:36:80:78:
                    19:db:38:54:f3:14:b6:47:0f:17:63:16:b0:7d:b8:
                    d4:2a:e0:fe:25:a4:93:b2:f4:85:2b:4c:20:66:b6:
                    b3:db:84:55:d0:75:1c:21:db:81:e8:fc:82:df:cc:
                    1a:35:81:b7:b4:df:f4:57:65:26:c1:e3:e1:74:65:
                    30:d4:78:5c:f7:d9:61:9c:79:4a:b8:aa:0f:cd:66:
                    1b:a3:ef:61:98:9e:ea:c5:ea:2d:30:68:72:1a:cc:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4D:DE:82:6B:44:D3:AD:3C:A9:A3:F4:88:BC:1E:07:B2:77:58:7F
            X509v3 Authority Key Identifier:
                keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:dc:49:9d:6c:96:f3:ce:ab:5a:13:ec:63:54:5b:e0:3f:eb:
         02:17:1a:32:25:f6:7a:64:3b:19:f4:3b:51:74:4a:17:75:61:
         22:a3:23:6b:50:1b:f6:dd:dd:18:fb:a1:2e:45:44:a7:99:fb:
         24:c7:36:bd:28:2f:5c:59:eb:d6:7d:0a:9f:eb:3c:b0:71:2f:
         3b:c9:8a:5c:7e:b7:2d:d0:6e:a8:c5:da:65:29:93:6c:87:d9:
         6b:4d:30:8e:0c:ba:2f:bd:7c:52:4c:70:af:b2:eb:39:8e:65:
         c0:32:00:75:a4:42:f7:5a:cb:3c:a8:94:78:59:85:d4:4f:55:
         ea:b2:a3:dd:b3:1c:d8:d9:2c:6e:c9:90:cd:a2:4a:0f:15:20:
         50:15:6b:d5:cc:03:1a:77:46:1c:cf:49:b6:38:f5:64:37:c4:
         a1:50:b5:12:33:e7:7b:2f:57:ae:88:6e:b5:be:1d:74:ff:72:
         dd:b0:a9:8e:fb:11:4b:c0:0d:eb:fa:1a:60:fc:55:12:95:c9:
         6c:78:db:10:fa:76:a1:f7:6c:be:ed:03:86:51:ce:c3:70:fa:
         ed:ef:a9:ec:9e:b7:5c:9c:cd:35:82:05:bf:bf:8e:7b:7f:0e:
         4f:41:8a:e1:83:83:bd:22:3e:c2:88:b0:39:2d:a8:b5:64:04:
         ac:d3:e2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:43 2026 by rpki-client