This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
File:                     S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json)
Hash identifier:          B/KahlAe1Cia69Jlmdc+3dSua/893hEQuEpXzSgIxNw=
Subject key identifier:   A4:E1:23:B6:72:F2:8A:50:D2:3B:A7:FD:C6:86:70:31:E5:A0:13:3A
Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
Certificate issuer:       /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
Manifest number:          0183
Signing time:             Sun 25 Jan 2026 03:00:27 +0000
Manifest this update:     Sun 25 Jan 2026 03:00:27 +0000
Manifest next update:     Sun 01 Feb 2026 03:00:27 +0000
Files and hashes:         1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: 0TBUSvNm3dkO26wF6CI0OH1O9W58wWXpM4HueX+NiNQ=)
                          2: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: s22fNuehfcR8cdi3cFR8Z1yPLk8LwMQLolDpdzgZgc0=)
                          3: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: PrkTvOXkxIIDm1NyNDWg8hQLP2IiT8tO2SVVH/dIBvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
                          rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
        Validity
            Not Before: Jan 25 03:00:27 2026 GMT
            Not After : Feb  1 03:00:27 2026 GMT
        Subject: CN=6975874b-ff16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:34:93:95:b9:e4:7b:3d:16:55:b6:c5:5e:
                    c6:5d:64:71:3a:1a:fc:ba:5e:ba:f8:ea:3d:a0:64:
                    35:03:98:13:83:9a:02:00:35:c6:12:ab:0f:c8:20:
                    c6:74:9a:4f:4f:56:1b:1a:e9:61:ee:bc:7e:95:50:
                    72:3a:6d:35:53:2d:e4:5a:5e:b3:27:3b:0f:fc:d5:
                    9e:63:e7:27:27:1f:b3:a2:3e:3d:73:1f:a9:4c:93:
                    f2:64:ec:eb:87:8d:6e:37:71:cf:fe:28:ec:67:79:
                    79:2e:9d:96:a2:5f:7d:39:64:f7:96:c5:08:2e:6f:
                    4a:40:d2:ad:48:fe:cf:ae:3a:96:82:c3:a5:48:5c:
                    37:c7:ad:42:d5:d4:77:4c:9b:e2:f2:4b:e3:16:92:
                    60:96:e5:1c:d9:8a:f8:96:02:4a:d1:02:a5:55:49:
                    af:09:59:69:f1:b9:4b:13:f5:b5:21:b7:aa:09:be:
                    3d:7d:ea:e6:ad:91:24:21:5c:56:9f:ad:b3:66:c7:
                    00:bf:6e:e1:b8:4a:79:96:a9:b1:d9:ea:32:f3:61:
                    00:ac:3a:1a:b0:ef:e2:0e:63:a8:65:42:31:64:38:
                    ed:f7:8e:20:ec:12:35:f1:78:f5:81:36:86:ee:bc:
                    43:59:37:0f:dd:6f:99:4d:2d:80:b4:14:80:3a:4a:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E1:23:B6:72:F2:8A:50:D2:3B:A7:FD:C6:86:70:31:E5:A0:13:3A
            X509v3 Authority Key Identifier:
                keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:f5:f9:87:57:16:3a:7e:24:0b:de:cf:f7:03:f0:d2:3f:
         06:c0:c4:0b:2a:2f:78:d3:7a:87:45:5b:8d:ca:b6:2a:27:8c:
         45:b6:df:ab:76:62:36:e1:9e:bb:f4:90:e0:6a:34:1f:60:34:
         2c:d9:60:5c:7f:ad:93:df:b5:d1:ed:d6:e0:b2:c3:88:7a:5c:
         d1:75:0d:af:27:b8:d1:d1:4d:4e:7a:d6:e0:83:85:50:c1:b1:
         26:64:2f:f9:3b:0d:b8:08:94:36:a8:d9:c2:cc:7d:00:06:a3:
         8a:16:9c:2f:a2:16:1b:83:61:34:9a:19:59:02:69:d5:f5:77:
         37:5b:00:4b:fe:84:f0:44:1f:3e:82:c0:2a:ab:97:7a:f1:de:
         9b:a0:66:a9:45:0c:09:8e:d3:79:48:df:c7:92:d6:b3:1b:db:
         09:85:75:12:03:6c:58:6b:03:79:a2:3d:62:9b:60:3f:37:f0:
         bb:fe:3a:91:ab:82:1e:1d:06:a3:d5:29:ad:71:8f:f1:de:d5:
         8a:2f:0b:ba:4a:93:1b:c1:e7:92:d3:74:e5:e4:16:66:3f:44:
         08:74:79:df:52:91:bd:db:f7:4a:6a:9d:b8:31:9a:57:14:23:
         66:c1:b3:55:a1:17:fe:cb:ec:20:8b:5f:e5:8d:1a:a0:16:70:
         66:19:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:01:11 2026 by rpki-client