This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
File:                     uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json)
Hash identifier:          U4a66NyrdFg+AnYlIPmrueRX6OqwyjGB7dbsSeAas9s=
Subject key identifier:   6D:8F:3A:8A:1C:13:CA:8F:35:07:7F:72:53:A4:7A:AE:A7:6B:F1:56
Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
Certificate issuer:       /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
Manifest number:          F3
Signing time:             Sun 25 Jan 2026 04:36:09 +0000
Manifest this update:     Sun 25 Jan 2026 04:36:08 +0000
Manifest next update:     Sun 01 Feb 2026 04:36:08 +0000
Files and hashes:         1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: 11eBMHNGc2VBWZHPjJxMODayq5mzJu4hx/lSH8tda3U=)
                          2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: ++LVGRxofYEX6I3wU8GpWTit5dMqqug/RxXZrZLIN/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
        Validity
            Not Before: Jan 25 04:36:08 2026 GMT
            Not After : Feb  1 04:36:08 2026 GMT
        Subject: CN=69759db8-5438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:03:86:75:d5:16:10:7c:9f:38:a1:65:09:
                    b5:cd:06:c9:93:62:42:c9:56:a2:de:ce:ee:81:aa:
                    0b:f5:99:cf:00:ec:8e:06:fc:96:b6:2b:db:83:02:
                    e9:01:73:fe:0c:f7:d8:48:47:a1:4d:88:e9:f1:1d:
                    32:1c:a1:d3:82:e4:9c:71:70:15:ec:a7:08:8b:82:
                    4c:62:1c:91:20:38:22:43:72:b9:5d:90:84:85:80:
                    1c:8b:7a:6a:72:64:f5:98:89:5a:09:c1:2a:3a:cc:
                    fa:45:cf:b3:0c:8f:ab:0e:11:ac:93:6b:d3:d1:a9:
                    3e:86:ec:be:9f:0d:21:93:56:d9:7e:8d:b0:99:34:
                    78:a9:e5:55:46:ce:bf:eb:de:7b:cd:63:a4:f3:63:
                    11:93:10:79:bb:a4:3a:4e:52:fc:89:3e:e9:10:89:
                    9f:8a:43:c7:b2:c4:01:92:64:90:12:52:97:63:28:
                    33:4b:ab:a4:d0:28:f6:43:29:4d:4e:e2:75:01:c1:
                    92:9b:a9:3f:fb:d4:05:6b:2a:6a:34:a9:35:1d:1c:
                    5f:d4:d0:80:7a:17:10:ad:b0:1b:c7:76:c1:a2:bf:
                    91:d1:fb:79:f6:75:98:16:ac:29:5d:20:ec:79:4e:
                    30:3c:40:fb:c7:9d:f9:06:6d:de:1c:f6:17:ea:08:
                    c6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8F:3A:8A:1C:13:CA:8F:35:07:7F:72:53:A4:7A:AE:A7:6B:F1:56
            X509v3 Authority Key Identifier:
                keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:62:6f:86:da:cf:4a:e2:47:0e:71:ba:a9:ea:6c:3c:19:7e:
         57:93:dc:28:96:ac:1b:73:36:51:83:c4:77:31:b7:e7:79:34:
         7d:fa:af:f6:94:45:3a:9f:3f:c9:8c:8e:e2:0f:cf:8e:00:4c:
         8e:4f:47:fc:7e:2e:9f:69:ae:ac:f0:9e:1f:b4:9f:0d:97:25:
         ef:37:78:4f:b4:e0:dc:f3:2c:9f:0a:70:75:7a:09:3e:74:cb:
         97:86:42:4f:3c:c8:c6:b5:3a:05:fb:58:7b:ea:e2:1e:c3:fa:
         51:cd:34:54:3f:da:e9:d4:39:43:ed:4a:0e:ce:89:7b:a2:72:
         69:fa:57:02:62:b4:0a:e9:4a:39:a6:f2:4e:17:04:00:e7:cf:
         66:c9:7f:ee:25:b2:6d:52:48:2a:a7:bd:95:3a:3c:1e:fb:85:
         f3:28:ae:de:c0:d9:39:d0:38:e4:f9:a5:8d:17:e2:5e:38:7d:
         7d:1f:59:36:8e:6d:c8:6d:52:da:3c:3d:9c:96:0d:48:44:90:
         4d:3c:34:f8:19:61:e3:97:b8:91:cb:21:fa:31:f4:5e:e7:b5:
         7d:f9:7f:66:8e:4b:af:28:7c:7d:a8:99:5c:ed:8e:21:a7:0d:
         c3:e2:56:18:3b:33:2b:cd:6d:4e:ef:a8:aa:21:63:00:3e:08:
         d5:4b:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:13:18 2026 by rpki-client