This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
File:                     xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json)
Hash identifier:          QPC60P8kHR2kj/K5nR7yFdklF3hAjqGo8Pn9vAzn+To=
Subject key identifier:   53:B2:0A:F4:C8:0D:39:6D:98:77:EC:AB:DB:89:CE:EB:D4:39:7D:02
Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
Certificate issuer:       /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Certificate serial:       051C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
Manifest number:          0517
Signing time:             Sat 24 Jan 2026 22:49:12 +0000
Manifest this update:     Sat 24 Jan 2026 22:49:11 +0000
Manifest next update:     Sat 31 Jan 2026 22:49:11 +0000
Files and hashes:         1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: gjsACXGX1DGKFwgjX8t1a4JJmVOBA9DfIEIix2JsJ8Q=)
                          2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: XUaIWvSjvHJx2WjE0nq5LCjXyTsCoEUciSF2lpWLzf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl
                          rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308 (0x51c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3
        Validity
            Not Before: Jan 24 22:49:11 2026 GMT
            Not After : Jan 31 22:49:11 2026 GMT
        Subject: CN=69754c67-1df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:19:51:20:c7:67:43:8f:03:d8:17:ff:c3:
                    fb:99:89:73:ad:2d:bd:b5:b4:66:e5:8d:89:63:61:
                    da:09:61:0b:85:40:03:5f:6e:21:9d:a9:38:9b:4e:
                    96:dc:ae:45:19:21:3a:23:0e:a5:75:c3:10:ee:5c:
                    f3:7f:cd:7e:8e:46:71:67:cc:80:37:a7:ac:85:96:
                    19:59:60:ff:db:6b:ed:37:d3:d8:b5:55:ef:17:2c:
                    00:38:24:73:d0:61:d6:9a:7d:f9:09:2b:3e:e5:30:
                    ae:6a:9a:bf:51:9e:9b:50:0e:b3:cc:3a:26:6c:d8:
                    34:03:57:3c:34:c1:bc:c1:e2:ee:79:9a:fd:92:38:
                    cb:95:d3:1c:a3:58:22:1e:dd:f4:2b:38:23:d1:d7:
                    2c:8c:eb:5a:a7:09:cc:55:0e:f9:fb:b1:a6:43:70:
                    79:58:57:52:15:19:0b:b1:5f:f6:ae:61:f2:38:49:
                    a6:a3:a2:53:20:31:b1:d6:fb:9a:f7:74:5a:08:01:
                    83:7e:5f:86:4b:ce:6b:45:9b:2a:6f:f7:86:0a:56:
                    c8:8b:17:b2:3e:ff:a0:a6:6c:10:45:26:32:11:8b:
                    13:9b:ea:f4:ab:ee:66:56:0e:20:1c:9d:41:e7:e3:
                    f6:36:d8:80:27:65:01:a0:01:02:79:8f:1f:6b:43:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B2:0A:F4:C8:0D:39:6D:98:77:EC:AB:DB:89:CE:EB:D4:39:7D:02
            X509v3 Authority Key Identifier:
                keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fc:b0:87:bf:a1:46:c9:96:aa:8f:95:34:f3:9b:77:e8:d2:
         6a:f0:a2:6c:fe:f1:7d:92:a3:bb:84:d5:a1:c1:fb:81:9c:ae:
         77:37:ba:8a:e8:1b:f8:16:32:08:f2:d3:e1:7a:e9:aa:f9:4a:
         4c:9d:fd:79:9d:4c:0a:f4:e6:ae:86:1b:71:da:15:e8:82:63:
         29:4b:d5:df:2d:f5:f1:cb:da:89:26:3e:3d:35:b4:a2:42:43:
         1a:e4:31:f7:97:d5:34:97:5e:b1:ba:5e:bd:55:1f:84:46:cc:
         e2:f1:8c:52:64:05:a8:58:7c:a6:53:46:3b:7b:80:df:43:10:
         27:53:2a:a7:f8:53:58:5f:7d:91:c3:67:1a:9f:93:97:4c:7e:
         44:bf:ca:fe:03:db:82:09:85:9e:38:05:14:7e:2f:1d:7b:c7:
         3f:2d:a5:7c:db:6c:03:ed:d5:f5:fa:32:93:1b:ce:af:25:94:
         10:bb:e4:b0:52:6b:77:d4:03:c1:d9:59:ad:8c:22:36:a6:18:
         ad:23:4c:da:71:26:f3:1d:48:fc:fe:38:f2:cf:d7:1d:ab:ae:
         03:cb:2d:de:bb:a4:8f:d5:14:be:ce:cf:60:37:76:12:df:c5:
         25:4b:4f:47:36:da:f2:65:2e:eb:41:a0:56:05:ac:e4:79:51:
         23:74:dc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:17 2026 by rpki-client