This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
File:                     UqHEINgnwWzqoEKD3Si2QKMVY00.mft (raw, json)
Hash identifier:          CV/JW3TQsrHj2pmDSM38CpCeUVlgxuYN6FuTe+8KHbo=
Subject key identifier:   E1:8E:67:07:68:30:07:65:3A:9E:30:B9:65:0D:C1:B8:AF:4E:32:93
Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
Certificate issuer:       /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
Manifest number:          79
Signing time:             Sun 25 Jan 2026 06:01:55 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:54 +0000
Manifest next update:     Sun 01 Feb 2026 06:01:54 +0000
Files and hashes:         1: UqHEINgnwWzqoEKD3Si2QKMVY00.crl (hash: mW5ikU4E8VA85CF9QvTRLwnG1bNbcwxv/FyQ6C8y4aw=)
                          2: E5E9F8B8D0F711F0ACA5A85AC4F9AE02.roa (hash: L+R5MmpKGufoqG5JJ77d6wpZuVDjwC3CDe/wMrgik6c=)
                          3: C577E392D0F711F0BC02385AC4F9AE02.roa (hash: A/1e58q+MdxskPknGiwVRXPIcLRGBTcwWKriVPbQ9n4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
                          rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
        Validity
            Not Before: Jan 25 06:01:54 2026 GMT
            Not After : Feb  1 06:01:54 2026 GMT
        Subject: CN=6975b1d3-5ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:b1:f1:7a:72:36:4b:b0:06:14:83:1b:97:
                    71:70:19:05:06:91:b5:94:bd:5a:f5:e9:c7:3d:e0:
                    8a:a7:a5:8e:50:3f:97:23:58:24:b8:ea:1e:fc:a4:
                    51:14:10:c8:a4:55:a5:12:35:eb:ee:dd:2d:f2:09:
                    19:17:ce:36:93:b9:31:c9:46:d7:9d:b8:59:6b:87:
                    58:39:e3:40:b9:f8:b2:fd:36:af:7f:17:8a:f8:f5:
                    5d:70:76:25:f7:6b:ea:b5:8e:ec:16:69:c5:82:ad:
                    78:2c:5f:71:ec:c5:f2:3d:58:91:dc:ce:47:17:25:
                    a5:d9:c0:75:c2:09:07:cf:1f:ca:c5:02:10:0e:44:
                    46:68:78:bf:ef:84:1e:f1:73:33:99:d1:be:9e:d0:
                    3a:00:3f:42:8f:6b:d8:60:cf:66:59:ee:d4:3e:d1:
                    55:8b:fe:9d:4e:c8:17:98:1b:3c:50:b1:f8:c8:db:
                    52:47:07:f0:f0:6e:f0:55:c3:bf:1a:dc:6b:e5:c6:
                    f8:11:9d:45:bf:81:01:d6:68:27:cf:9b:f4:da:96:
                    1f:38:a8:c2:7f:34:4c:3b:84:d8:fa:f3:dc:42:0e:
                    64:40:a1:9d:a7:52:c1:aa:bc:69:6b:59:bb:8c:b6:
                    c9:e7:97:ac:1b:01:af:52:67:1e:8a:bf:cf:17:8e:
                    c9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8E:67:07:68:30:07:65:3A:9E:30:B9:65:0D:C1:B8:AF:4E:32:93
            X509v3 Authority Key Identifier:
                keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9e:48:c8:a4:71:c4:57:c5:44:97:a1:7e:68:b4:d2:3a:7d:
         61:ed:2c:3a:8c:3a:a7:da:81:84:a7:48:a2:a2:b3:5c:31:1b:
         7e:b0:15:fe:e8:69:99:88:f9:dc:bc:87:28:fa:b6:19:af:c2:
         c9:00:f6:25:3e:dd:f5:d7:33:2b:79:6d:85:ae:15:61:70:dd:
         74:99:ae:1c:df:43:ca:58:9e:5b:40:6a:15:2e:8b:91:6e:85:
         36:31:44:93:3d:4a:04:26:f8:f8:57:83:e1:b1:c0:9f:1f:f3:
         b8:4f:16:c6:e9:72:50:9c:55:92:68:93:80:72:b9:a4:5d:e6:
         c4:c2:b6:63:d6:c4:cc:b3:d2:6d:39:c6:9a:36:eb:5c:08:b0:
         5c:92:74:ef:4d:93:43:89:43:01:ab:33:65:95:83:0d:c1:53:
         02:57:98:a8:f6:81:20:cc:ef:2b:c4:64:7c:0e:90:2f:74:cf:
         4a:c4:d7:bc:81:1c:a3:28:3e:61:78:b9:25:09:74:27:63:a0:
         a5:eb:61:04:0c:b2:ca:67:cf:b0:74:ec:94:d3:7e:2e:f9:bd:
         e1:61:bb:e8:35:35:49:6e:e9:75:4e:d5:25:85:f3:7e:8c:49:
         70:f4:52:07:b2:96:5c:45:8b:7d:d0:23:ac:6a:14:10:3a:65:
         f8:d2:e0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:12 2026 by rpki-client