This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
File:                     UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft (raw, json)
Hash identifier:          AYkfLVbbzuafeii8zOVtsPAxV1dcd6TyuHu9lh5Hqb8=
Subject key identifier:   10:8E:30:03:E1:68:D8:BA:CE:C0:66:EF:27:E5:B9:05:31:F1:17:F0
Authority key identifier: 50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C
Certificate issuer:       /CN=A91A3D65/serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
Certificate serial:       0253
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
Manifest number:          024D
Signing time:             Sun 25 Jan 2026 01:07:26 +0000
Manifest this update:     Sun 25 Jan 2026 01:07:26 +0000
Manifest next update:     Sun 01 Feb 2026 01:07:26 +0000
Files and hashes:         1: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl (hash: m871V30I7jBKqqlAkH2HlTHm5bSo4TvH/+lhufu1SW8=)
                          2: 57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa (hash: wn8GgdPcVD9Nra4klhdx8fAd8a7oc/jiFnmRC3G0ueU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl
                          rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3D65, serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
        Validity
            Not Before: Jan 25 01:07:26 2026 GMT
            Not After : Feb  1 01:07:26 2026 GMT
        Subject: CN=69756cce-fc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:41:1c:79:44:0a:a3:57:77:7f:d4:fd:d6:
                    3c:32:34:46:ec:4c:21:f5:aa:22:7b:40:c9:a0:d2:
                    6b:cd:ce:3f:a3:ae:84:a4:51:bd:e3:a9:fd:50:09:
                    6d:c0:e5:b6:71:bf:a3:06:d1:29:15:2d:90:07:f9:
                    53:aa:1b:12:96:90:99:0a:92:95:a3:7f:04:37:da:
                    c6:27:a3:a6:54:20:4a:82:68:e3:48:77:28:22:2a:
                    a0:67:4a:21:48:80:36:e4:fd:31:b8:b1:90:61:57:
                    83:4f:f9:74:5b:af:36:ca:a8:43:8b:0f:c4:f2:a4:
                    ed:48:7d:6b:a7:29:b8:8b:23:2b:cb:b9:e3:8c:07:
                    7f:d4:a3:36:4b:a1:80:da:60:44:96:2e:4d:5d:2b:
                    a6:14:53:54:c5:d0:06:09:38:e0:13:b4:a1:15:4d:
                    1f:de:0c:ab:82:83:ad:5a:6d:55:8b:24:c0:36:e4:
                    8a:f1:b8:17:ff:bc:86:52:5f:12:95:d0:f9:e0:9a:
                    4b:68:f5:1c:0e:73:c6:f5:5e:a2:bc:25:71:90:f5:
                    a2:2b:47:c4:d8:5e:e4:d1:14:ef:1f:d3:b3:3e:e0:
                    08:49:72:7b:74:c6:3b:06:29:e3:b2:51:bb:91:06:
                    fa:c7:32:47:8f:e5:13:d6:5f:c9:01:3b:02:f8:b8:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8E:30:03:E1:68:D8:BA:CE:C0:66:EF:27:E5:B9:05:31:F1:17:F0
            X509v3 Authority Key Identifier:
                keyid:50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:82:c3:29:c6:80:2a:46:00:6b:0f:76:31:35:73:f4:d5:fa:
         22:6f:73:9e:f1:68:bf:3f:0d:c7:9c:5c:7b:38:22:f5:a1:df:
         ab:58:78:b8:39:bb:ad:98:39:06:5b:df:ff:87:9c:cf:c9:da:
         fa:1f:e0:36:82:80:6d:75:ec:28:14:7d:68:f8:9e:b1:55:fd:
         aa:ac:19:b9:76:a8:9e:ca:b9:cb:8a:f7:c4:c0:db:77:c2:cb:
         d5:5a:12:ee:a1:cc:2d:74:7b:c2:3d:32:39:12:dd:1a:55:b5:
         9b:d2:2f:5f:d5:9b:4b:92:cc:2e:bb:92:8b:76:20:bc:11:f1:
         78:2a:d2:11:08:cd:6d:25:e7:09:15:bd:77:bb:90:a3:80:1b:
         17:86:16:40:90:5d:ad:1c:07:ab:a1:73:46:27:8d:b9:fb:b1:
         a3:4b:f2:3b:a9:ed:c2:80:8f:76:2e:03:ef:91:03:4d:c4:14:
         ad:3a:ad:db:33:88:0e:7b:26:d0:ef:e0:c7:37:b0:43:87:a3:
         e3:14:84:8f:03:ab:6c:4e:c5:dd:87:8b:2c:94:d6:10:a3:df:
         1c:bc:e6:59:e5:4b:75:eb:15:9a:68:89:00:98:ed:0c:b5:85:
         99:d8:17:b1:dc:8c:3c:f6:1f:d1:26:da:ea:88:f7:a1:3b:12:
         b7:04:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:24 2026 by rpki-client