This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
File:                     Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json)
Hash identifier:          xXlnTP/aC73MOarFN+/4u/RhkIeSaw2+sT2BMbpIyI4=
Subject key identifier:   8B:88:DD:FA:11:D3:A0:1E:C8:10:4C:FE:2C:46:C6:BE:44:FF:4B:A3
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Certificate issuer:       /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial:       024C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
Manifest number:          0244
Signing time:             Sun 25 Jan 2026 01:09:26 +0000
Manifest this update:     Sun 25 Jan 2026 01:09:26 +0000
Manifest next update:     Sun 01 Feb 2026 01:09:26 +0000
Files and hashes:         1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: yeGqI75xuKqT0I9CauOT3y32WESQtZozmI5omnQLnDY=)
                          2: F69540BA810811ED9EA03683C4F9AE02.roa (hash: WdWxS6dCM7XMQ2LQO0o9GTTA7XcowvkD2iePT2v6AE4=)
                          3: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: WWuM765nOGpRARWICFdR3WrAuYsh9pXJlLffK+z2xm8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
                          rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
        Validity
            Not Before: Jan 25 01:09:26 2026 GMT
            Not After : Feb  1 01:09:26 2026 GMT
        Subject: CN=69756d46-2dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c7:28:2b:85:ff:7c:58:f3:df:c7:64:41:c4:
                    6c:b4:6f:c5:1c:f4:d7:ae:42:f4:d0:ea:eb:45:c3:
                    96:4d:1f:1b:89:73:13:3b:af:72:69:55:7c:39:99:
                    4c:3d:81:15:44:b9:51:38:20:ee:a9:37:e9:83:b0:
                    9d:51:cd:e3:d2:27:c0:93:71:54:fa:2e:84:8b:27:
                    a3:d1:3e:7d:83:cb:6c:3f:e0:34:6e:08:fe:01:12:
                    d6:93:f9:ee:f6:8c:ef:50:1f:7b:9e:74:a7:6d:6e:
                    3a:9d:b3:3d:0c:77:f8:6b:38:2d:e2:7c:2d:88:25:
                    18:25:b6:a6:61:27:41:fd:c7:e1:ce:39:f3:6a:e0:
                    0b:fa:1a:8f:17:84:80:52:eb:99:ef:8d:d8:f7:4e:
                    0f:07:8b:02:e6:1f:2c:f8:fc:54:f9:9f:eb:2c:39:
                    dd:20:ac:d1:42:74:86:7a:8f:5f:2d:66:8b:dc:57:
                    f6:11:ee:46:a1:67:8c:32:b2:cb:23:8b:b7:20:2f:
                    85:d4:6d:a6:87:79:49:a3:7f:e3:87:ab:f0:7d:67:
                    55:86:80:22:41:2f:d8:51:62:b3:83:fe:9f:6a:e0:
                    ae:2f:76:36:4f:90:07:3b:8b:7b:56:79:06:a3:72:
                    17:fd:be:ea:bb:87:1a:b4:6b:d1:7c:b1:d9:b8:a0:
                    cc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:88:DD:FA:11:D3:A0:1E:C8:10:4C:FE:2C:46:C6:BE:44:FF:4B:A3
            X509v3 Authority Key Identifier:
                keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9d:12:39:3c:58:83:ae:30:d3:ac:54:7d:66:a9:59:d9:cf:
         12:6f:ad:a5:4b:23:dc:db:ca:31:8b:83:c6:ad:ab:5a:c1:68:
         46:c4:ea:b3:bf:4a:8e:e8:0c:60:f9:15:13:2b:74:46:f9:12:
         6e:34:06:4a:d4:23:f5:e2:b6:3f:ab:f3:f4:17:de:08:61:de:
         1e:ba:f6:47:fb:1f:df:94:85:e2:0c:dc:ef:48:c2:74:17:7f:
         78:8e:70:4f:28:03:88:44:de:0b:6c:72:32:63:fc:bb:9e:4f:
         8d:e7:35:f4:c0:89:3e:04:fc:7b:68:04:78:4b:20:ca:ef:7c:
         92:58:cf:ad:97:56:56:51:ff:4f:0d:61:b4:cf:c3:3a:b6:85:
         7f:56:d3:ae:6d:10:6d:25:f8:97:23:29:43:03:45:91:d4:9e:
         64:c2:de:51:d6:26:36:bb:8d:70:98:ed:7d:09:ac:e8:30:e6:
         1c:e1:b1:36:b7:bd:23:5e:84:97:28:5d:26:03:1f:a9:09:29:
         94:bc:28:5a:0f:3b:79:37:6a:1c:b9:35:ff:83:0f:10:78:d3:
         25:8c:8c:4a:ff:02:db:76:d5:75:c6:34:17:1f:49:45:46:58:
         bc:b2:11:9c:1c:69:10:ec:06:ba:9d:8f:9f:f8:fc:34:cd:90:
         da:9d:0b:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1
N0U4QzEzQ0UwHhcNMjYwMTI1MDEwOTI2WhcNMjYwMjAxMDEwOTI2WjAYMRYwFAYD
VQQDDA02OTc1NmQ0Ni0yZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoscoK4X/fFjz38dkQcRstG/FHPTXrkL00OrrRcOWTR8biXMTO69yaVV8OZlM
PYEVRLlROCDuqTfpg7CdUc3j0ifAk3FU+i6Eiyej0T59g8tsP+A0bgj+ARLWk/nu
9ozvUB97nnSnbW46nbM9DHf4azgt4nwtiCUYJbamYSdB/cfhzjnzauAL+hqPF4SA
UuuZ743Y904PB4sC5h8s+PxU+Z/rLDndIKzRQnSGeo9fLWaL3Ff2Ee5GoWeMMrLL
I4u3IC+F1G2mh3lJo3/jh6vwfWdVhoAiQS/YUWKzg/6fauCuL3Y2T5AHO4t7VnkG
o3IX/b7qu4catGvRfLHZuKDMAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuI3foR
06AeyBBM/ixGxr5E/0ujMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx
MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm
SjdfWExPZFM5YzFYNk1FODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3nRI5PFiDrjDTrFR9ZqlZ2c8Sb62lSyPc28oxi4PGratawWhGxOqz
v0qO6Axg+RUTK3RG+RJuNAZK1CP14rY/q/P0F94IYd4euvZH+x/flIXiDNzvSMJ0
F394jnBPKAOIRN4LbHIyY/y7nk+N5zX0wIk+BPx7aAR4SyDK73ySWM+tl1ZWUf9P
DWG0z8M6toV/VtOubRBtJfiXIylDA0WR1J5kwt5R1iY2u41wmO19CazoMOYc4bE2
t70jXoSXKF0mAx+pCSmUvChaDzt5N2ocuTX/gw8QeNMljIxK/wLbdtV1xjQXH0lF
Rli8shGcHGkQ7Aa6nY+f+Pw0zZDanQsD
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:17 2026 by rpki-client