This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
File:                     ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json)
Hash identifier:          7xJshYCWVDis7nhcCoFiTpBNtxyGzxTZLhGFGXpwWT4=
Subject key identifier:   58:5A:B9:8E:3B:88:87:FD:F7:7B:6D:4E:11:37:1D:6C:ED:9E:F5:65
Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
Certificate issuer:       /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
Manifest number:          0147
Signing time:             Sun 25 Jan 2026 03:34:29 +0000
Manifest this update:     Sun 25 Jan 2026 03:34:28 +0000
Manifest next update:     Sun 01 Feb 2026 03:34:28 +0000
Files and hashes:         1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: mImHRP4W4GikD7485voz2wbI41aiGvwl4hutqHPqw2Q=)
                          2: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: jb52alxfqmopNXaWzE+J3NyrR4hDhCWX65ruTvYQprU=)
                          3: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: bsOFqF88ssvO68Cm8Ame+jksnHjJ98Qo8WHk2fC18fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
        Validity
            Not Before: Jan 25 03:34:28 2026 GMT
            Not After : Feb  1 03:34:28 2026 GMT
        Subject: CN=69758f45-8d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:ad:4b:59:92:e0:ec:e0:52:95:ae:5f:84:
                    bc:e5:1b:98:42:55:74:88:7e:ea:60:37:d9:68:1a:
                    01:3e:d4:14:56:06:4d:b0:fd:31:1c:84:4f:75:e1:
                    86:c5:af:ee:6e:1c:b2:e2:e0:c3:ae:d3:bf:f6:4e:
                    e1:45:93:81:ec:24:76:87:7d:89:64:09:34:e5:58:
                    06:96:5f:c0:2e:03:5f:80:c3:1e:65:83:39:77:cd:
                    38:b8:fe:1c:84:02:f1:41:db:dc:54:15:f3:18:2c:
                    54:2f:4d:22:44:2c:d0:56:d9:b2:e1:ab:d3:4b:6b:
                    7b:23:00:76:d0:e4:64:68:52:4c:13:24:0c:17:f7:
                    d6:92:34:22:ef:b3:72:40:ef:a7:c9:b7:b8:fb:ce:
                    e1:d9:ad:af:bc:33:37:1b:de:16:80:fa:bd:b0:ac:
                    01:36:37:c3:85:ae:9f:72:79:23:f1:0c:3b:0d:bf:
                    a0:b5:87:48:21:4a:74:48:0e:87:4f:6d:aa:4d:e1:
                    0c:8f:c0:a6:9c:2e:a3:27:5c:96:47:a2:e3:d1:da:
                    4d:95:b4:9d:b2:cb:1c:26:91:ec:f6:75:a4:d4:b8:
                    fc:7c:ca:4f:8e:36:4f:e5:2b:c9:65:a5:13:cb:fd:
                    21:5d:33:f9:42:df:66:4d:84:90:8f:ab:ff:b0:aa:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5A:B9:8E:3B:88:87:FD:F7:7B:6D:4E:11:37:1D:6C:ED:9E:F5:65
            X509v3 Authority Key Identifier:
                keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d7:0c:b3:35:39:3a:f2:eb:2f:fa:7a:af:b5:98:57:fd:cf:
         63:6f:05:20:2c:84:94:28:49:e6:cd:c7:9e:00:ad:c9:aa:2b:
         89:19:36:e4:1f:7e:f0:a3:54:94:63:b7:87:9b:2e:7e:72:0a:
         42:2f:13:1d:c4:72:c1:6d:30:9d:95:de:66:95:59:71:2c:97:
         52:3e:64:5d:7d:ee:10:f4:d8:48:85:c4:39:29:c0:22:1d:19:
         ee:c5:11:f3:75:fa:5d:e0:9f:85:e9:86:cd:3e:61:6d:35:d4:
         3e:fe:bc:52:86:32:44:c2:35:98:b1:1e:78:2f:c9:b3:60:bf:
         53:04:83:bb:07:ce:97:33:80:22:fa:ff:25:6b:76:1a:ae:75:
         9a:f9:16:e6:15:2d:eb:56:2e:09:d7:32:e2:0a:9c:09:ea:d8:
         85:df:4d:4e:43:dc:39:a8:a9:bb:5c:36:d6:f6:e1:62:3e:fa:
         27:40:fe:9c:3a:70:64:7b:1c:fa:35:c7:4f:8b:c5:57:1a:87:
         b2:9c:5b:c7:0b:db:46:5e:6a:d5:6b:f5:85:bc:39:78:89:85:
         e0:b8:fa:dc:33:a4:7c:3e:6a:50:b2:19:60:86:d1:49:5e:a2:
         5b:fe:5e:ac:9b:ed:e2:b5:b7:98:9c:a2:76:bc:6f:03:d7:c5:
         a1:ce:96:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:49:20 2026 by rpki-client