This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
File:                     UPqOjU4pl_9d5gjaeMrGVMzRabY.mft (raw, json)
Hash identifier:          VKy4C/VCUAPwP+XxbgUlupMgrnOQUMmxQ/d8Qt/T1Fo=
Subject key identifier:   64:29:D5:54:10:3C:24:03:D5:32:9A:0C:69:1C:A6:4C:96:6D:62:5F
Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6
Certificate issuer:       /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
Certificate serial:       096B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
Manifest number:          0960
Signing time:             Sat 24 Jan 2026 19:34:09 +0000
Manifest this update:     Sat 24 Jan 2026 19:34:08 +0000
Manifest next update:     Sat 31 Jan 2026 19:34:08 +0000
Files and hashes:         1: UPqOjU4pl_9d5gjaeMrGVMzRabY.crl (hash: DDFSlONzwzjQnQtyIPo1DhbcFYeo+kuYmb7ArSZyp+U=)
                          2: CD095756AF1211EAA486D140C4F9AE02.roa (hash: nvWxmCSAUBjo1M2/wF1sYZaCvwMpa6MX82x33FgigCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2411 (0x96b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE26, serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
        Validity
            Not Before: Jan 24 19:34:08 2026 GMT
            Not After : Jan 31 19:34:08 2026 GMT
        Subject: CN=69751eb1-a4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:ba:80:f6:2b:1f:4b:d2:78:ba:1c:42:61:
                    d6:3c:0b:82:98:b0:af:1c:39:dc:59:d8:b1:7d:c5:
                    3e:40:f0:00:ea:79:16:d1:00:f1:02:2a:bd:a6:f2:
                    04:6e:c6:66:7c:93:fc:94:fe:d4:0b:18:c8:43:40:
                    08:23:57:b8:e5:61:06:a1:eb:9b:25:c0:7f:fe:0a:
                    ff:1f:4c:45:6d:f9:dc:85:6f:4a:42:05:cf:2c:2b:
                    d6:2d:0b:5c:59:5d:f9:74:b4:56:50:fd:40:c3:e8:
                    20:c0:10:ad:93:0e:15:03:c8:40:e0:eb:7e:9a:81:
                    54:ee:e6:9e:66:20:8f:f0:83:d5:5a:4e:a2:5d:0d:
                    f4:95:4e:56:0e:a3:35:5e:1a:3c:b5:20:20:51:31:
                    e6:af:ed:7b:1f:9e:d8:f0:92:04:c4:31:6b:34:49:
                    3c:19:d8:98:e0:38:a3:21:2a:07:e4:93:fa:6e:b9:
                    40:e1:e6:be:f4:eb:b7:80:90:53:17:de:48:e2:79:
                    19:eb:fc:36:cf:b3:37:d3:0d:cf:ab:53:6c:2c:38:
                    10:a9:7f:11:b1:6e:3c:88:8f:71:6c:49:ab:05:f2:
                    7f:84:3d:84:bb:b5:68:db:26:31:2c:cc:9d:34:ad:
                    22:90:0e:b1:21:81:f6:6d:a8:57:cc:10:4e:c6:34:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:29:D5:54:10:3C:24:03:D5:32:9A:0C:69:1C:A6:4C:96:6D:62:5F
            X509v3 Authority Key Identifier:
                keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:aa:f5:cb:11:08:d8:06:4b:6e:6d:22:d2:a2:d9:37:ef:ea:
         44:2f:49:29:a1:4c:3f:b6:68:27:28:42:d0:67:de:9e:b3:e0:
         29:a1:c0:e7:7e:60:21:dc:49:39:32:b8:23:29:2d:ec:75:31:
         1a:73:5f:46:c4:7d:2e:2b:2f:6e:6d:63:f3:35:06:61:64:f6:
         0e:c1:d3:f5:07:22:1f:85:d8:0c:8a:d0:81:7e:c5:a3:7d:58:
         65:3c:67:5a:f4:91:e1:ce:12:71:d2:ac:c6:d7:ec:09:8a:f4:
         6a:f5:3e:40:e2:2e:d7:41:c3:81:40:f8:44:2e:37:02:ef:3b:
         1f:45:94:47:85:a2:53:7d:cf:cd:40:10:31:21:08:ea:08:e6:
         52:08:14:7c:90:c9:14:a1:5f:b9:13:c2:4b:9f:1b:ae:df:6f:
         b4:7b:4a:0d:ff:12:4c:b2:2a:3a:19:81:56:a5:45:ff:c5:9b:
         51:2d:b9:d0:5a:69:f5:1c:9f:60:71:5d:15:5c:c5:83:13:cd:
         99:c3:48:c9:12:4a:d3:ff:1d:ec:90:7d:2e:3c:df:20:db:20:
         d7:22:c5:c9:ed:83:d9:30:5a:cd:7d:f6:b5:1b:8a:18:bb:b1:
         19:40:b3:9a:4b:cc:b5:2c:45:02:c9:2a:e4:09:00:4f:7f:01:
         16:39:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:20 2026 by rpki-client