This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
File:                     lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json)
Hash identifier:          HdejK5ZPWjvsokK6VtG2ERTj0mkjbYb2q7MtZaV26AY=
Subject key identifier:   5A:B0:6C:A7:63:8F:EC:B4:5E:22:E6:E5:3C:2C:E2:94:3C:5A:53:5C
Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
Certificate issuer:       /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Certificate serial:       06B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
Manifest number:          06B1
Signing time:             Sat 24 Jan 2026 21:36:28 +0000
Manifest this update:     Sat 24 Jan 2026 21:36:27 +0000
Manifest next update:     Sat 31 Jan 2026 21:36:27 +0000
Files and hashes:         1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: pVKRtPuvdaZjmxWLGk1ZpZ6acSaB19Z+a1keFEijKks=)
                          2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: hzbXrtnctw9RaO4u4LO+M5su44TkMPAo6wV59Ue+QJk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
                          rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
        Validity
            Not Before: Jan 24 21:36:27 2026 GMT
            Not After : Jan 31 21:36:27 2026 GMT
        Subject: CN=69753b5c-a3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:42:9a:f2:c8:f3:59:5f:1a:a7:1f:8d:34:
                    e6:86:99:78:d7:9f:46:8d:52:3a:e1:1e:97:5f:b5:
                    07:be:33:79:f8:04:2d:4e:05:d2:6b:a8:7b:6f:75:
                    1f:4d:40:f5:84:26:47:fc:a1:34:9b:a9:25:b6:54:
                    ec:a8:2c:a4:34:a9:e7:e7:6f:ca:af:bf:05:a7:30:
                    9b:80:f1:3d:f5:54:55:7a:e0:df:f0:a5:58:9c:47:
                    aa:5e:89:28:fd:3b:03:0e:c3:d2:b5:2b:4b:05:01:
                    55:65:5e:a5:57:99:5b:c8:5e:9e:6a:fc:67:e7:d1:
                    48:62:3e:b1:67:22:cf:5d:c1:0c:12:49:33:db:20:
                    57:b1:67:3e:22:27:99:ad:a2:b2:ea:f7:c4:a1:87:
                    06:49:e5:09:de:35:df:3a:43:d6:e8:9b:17:a3:50:
                    db:fe:c5:ac:e9:7b:cf:09:61:26:6c:41:55:6c:84:
                    8d:2a:30:f4:d9:88:04:94:8e:48:57:4c:bc:61:50:
                    12:98:81:21:48:6e:62:e0:23:80:94:c3:89:01:17:
                    37:83:8b:63:30:4b:79:27:92:77:1d:1e:f6:08:87:
                    f1:f4:3f:11:f5:94:2d:4b:77:50:6f:77:44:71:3e:
                    3e:bc:3c:57:a1:2c:39:e1:6d:eb:f9:4a:f3:91:62:
                    58:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B0:6C:A7:63:8F:EC:B4:5E:22:E6:E5:3C:2C:E2:94:3C:5A:53:5C
            X509v3 Authority Key Identifier:
                keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:37:ea:e4:cc:50:32:68:47:fe:5d:4e:20:f3:ef:b5:1e:86:
         19:4c:c5:2e:07:54:5e:90:5f:6d:7f:21:c2:a1:71:aa:2b:22:
         99:55:92:8a:9e:79:d5:71:45:09:27:a0:21:a1:94:4f:54:6c:
         fd:70:04:40:4c:d8:d5:ac:c1:3b:8a:36:ac:fd:b0:a1:fc:16:
         2d:d0:af:67:97:06:df:c7:1d:c5:0f:e8:a6:a1:5f:90:f0:46:
         aa:ee:f0:fa:b0:92:a7:6f:52:35:9a:ee:6d:06:45:28:fa:e5:
         16:69:4c:36:e5:63:69:04:0d:bb:b5:be:29:5b:54:63:cc:aa:
         4c:68:53:12:da:00:86:31:a2:3e:fb:35:1a:af:df:b2:cd:8f:
         24:3d:06:6a:1b:ce:95:e7:f4:5d:ba:b0:1f:f1:71:3f:b9:0c:
         82:9b:9a:40:cf:c9:81:43:a5:76:e9:ec:4a:41:5b:4a:9f:79:
         c1:f6:d2:6d:05:03:07:35:57:33:8c:1b:79:81:17:c9:66:dc:
         c0:6c:b5:dc:a7:7c:41:b2:3f:6f:be:fe:d9:da:70:e3:ff:e6:
         6a:c4:8b:32:d8:4e:9d:e1:bd:7e:90:95:33:2b:d3:31:e8:64:
         51:b7:66:76:0d:ba:93:95:2c:42:18:12:9a:f3:78:ac:42:ce:
         15:1f:03:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:16 2026 by rpki-client