This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
File:                     uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json)
Hash identifier:          GiorJ5Qs5cFGE3jVq6ZlVZdJc6FgZbFcs/kdjELlqfI=
Subject key identifier:   F8:7C:28:5F:64:51:40:C4:C0:2D:0F:FA:79:2C:ED:F4:BB:70:EA:01
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Certificate issuer:       /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
Manifest number:          96
Signing time:             Sun 25 Jan 2026 05:35:22 +0000
Manifest this update:     Sun 25 Jan 2026 05:35:21 +0000
Manifest next update:     Sun 01 Feb 2026 05:35:21 +0000
Files and hashes:         1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: kgfrp1K4kdPqkAD39g7F7zyzThI9R+lkcjtPp1UrVP0=)
                          2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: BmMWgtMQ3PCdQlZ5TlrzvWUUVUt35N0MZwh0nPjZPiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
                          rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
        Validity
            Not Before: Jan 25 05:35:21 2026 GMT
            Not After : Feb  1 05:35:21 2026 GMT
        Subject: CN=6975ab9a-cdd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:5e:84:bd:9c:31:f3:57:84:8e:53:94:35:
                    38:f0:f4:73:f1:4a:48:6d:9d:d2:f4:64:91:3d:06:
                    94:54:91:01:9f:46:36:02:4d:c2:85:28:7f:65:24:
                    ae:3a:a1:fb:59:d1:9d:6a:5d:36:b3:ec:1d:6c:ab:
                    44:70:85:00:cf:41:46:6e:57:1f:0a:68:3c:c6:c3:
                    92:1b:0c:5d:bb:c6:08:7c:a5:93:cf:04:46:b5:c6:
                    51:74:1f:55:a2:99:26:a7:79:c5:ee:d8:f0:fc:34:
                    33:67:d6:0e:69:12:e8:10:09:49:7f:b2:2c:ef:3b:
                    69:40:97:41:c6:b0:36:02:e7:fd:fa:33:13:82:57:
                    5c:eb:96:32:2a:ac:64:e9:f1:8c:b9:f3:ea:c7:05:
                    41:ba:85:0c:23:84:0a:6d:70:25:b5:97:ea:39:84:
                    c5:75:32:ee:e8:68:4f:bd:6a:0c:1a:94:2e:b6:d9:
                    27:65:1d:71:cb:af:46:f9:31:ab:a0:03:03:f9:51:
                    dc:fe:0b:10:5f:cd:fb:b8:2f:67:58:f8:f5:6c:39:
                    62:fe:dc:01:27:29:e2:02:32:12:70:b6:b1:58:25:
                    bb:68:42:ea:f1:11:c7:5b:a7:5a:b7:7b:60:94:9f:
                    c2:68:05:0f:b9:15:ed:0b:37:12:cc:4b:3f:6b:ee:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7C:28:5F:64:51:40:C4:C0:2D:0F:FA:79:2C:ED:F4:BB:70:EA:01
            X509v3 Authority Key Identifier:
                keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:ef:14:0e:60:4b:7f:8c:1f:1a:3e:b5:c1:16:0f:68:6f:
         71:82:9c:42:c0:6a:0b:de:05:d3:ff:8d:a1:d1:ca:7e:38:72:
         ce:b2:84:84:6d:5f:b3:69:68:ae:a6:af:11:87:e4:4e:84:6b:
         56:ed:8f:ed:f5:2e:6e:e2:7e:c2:28:eb:21:e0:5a:bd:4c:bd:
         db:c6:87:1b:3a:0f:17:80:38:73:5e:85:75:b7:01:7b:63:36:
         cd:e4:2e:c1:a7:de:98:6f:4a:c7:ac:84:15:07:74:70:db:50:
         dc:ab:9c:4f:ca:4b:d7:03:cf:da:c5:64:e6:0d:09:08:3f:4d:
         b7:62:81:44:f3:9b:85:79:25:41:a0:3c:a4:e7:d7:1f:5d:f0:
         0b:56:9f:ef:30:89:cc:3a:c8:54:64:a2:80:c3:e1:36:e9:16:
         ff:19:e8:9c:59:33:2c:59:4c:8d:a9:30:43:a3:aa:3c:ee:c8:
         35:79:95:cd:c1:04:f8:b8:75:d7:96:39:35:15:4f:3e:49:af:
         1e:7e:21:7e:d0:83:5c:00:5a:0c:34:ab:60:9e:31:0b:25:5b:
         0f:d3:8e:22:a5:21:89:0d:d2:8a:4f:b8:e9:4e:2e:b9:0e:ef:
         4b:82:bf:8e:96:be:21:1c:10:82:d0:dc:08:65:c5:be:12:39:
         ac:19:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:33 2026 by rpki-client