This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
File:                     uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json)
Hash identifier:          T4K3FEX0+OnBRVhBOKaNnEorquYEnH8CkXkhhc08r0o=
Subject key identifier:   0D:BF:88:68:61:C8:4B:1B:D6:12:7B:13:BD:CE:A6:27:60:8A:F7:12
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Certificate issuer:       /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
Manifest number:          0121
Signing time:             Sun 25 Jan 2026 04:00:30 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:30 +0000
Manifest next update:     Sun 01 Feb 2026 04:00:30 +0000
Files and hashes:         1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: s0KuHgxFFHnuM0rmmEtPhEGHSqfbu4sYLERSIP55YIs=)
                          2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: RhQloGXtcZHnLcoyU2Qhf/8Ls5h2TxH8G+0z0bjWi3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
        Validity
            Not Before: Jan 25 04:00:30 2026 GMT
            Not After : Feb  1 04:00:30 2026 GMT
        Subject: CN=6975955e-d877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:54:cc:e7:62:76:9e:40:52:e0:10:be:48:
                    4f:1b:86:95:e4:82:08:0e:ae:c4:a1:6f:e8:78:f7:
                    49:af:de:8d:cc:44:9d:8f:3d:2c:35:09:2a:fd:2c:
                    fe:86:85:1b:f7:89:b4:ea:8f:61:42:1a:c7:5a:9c:
                    17:ad:13:64:bc:73:ce:d2:b5:95:83:0d:18:ee:b3:
                    c4:ec:75:bb:86:fc:e6:16:5d:56:ea:9d:e6:0f:e8:
                    f5:d6:8f:a9:27:7e:66:ec:50:9c:fd:31:af:a4:6a:
                    69:7a:19:b6:ac:a4:28:bc:45:0f:76:45:d1:41:b0:
                    2f:27:7a:71:c2:ed:e2:cd:8b:98:a2:d9:2c:b3:f7:
                    7f:d6:24:bf:43:1a:04:47:30:3d:3e:8e:79:fa:23:
                    77:15:f5:aa:f9:4f:b5:82:6a:54:48:77:29:0e:d2:
                    ac:d5:17:ee:d1:b6:4d:57:56:f9:70:09:45:95:bd:
                    54:62:4d:f4:e7:24:b8:b4:ef:bc:dd:16:ab:54:1e:
                    bd:38:c5:90:0f:15:34:2f:f6:9b:d3:c0:b7:15:f0:
                    15:82:7d:b4:52:e8:cc:b0:e8:2f:5d:4f:2f:6a:2d:
                    a1:36:5b:02:30:10:16:16:cc:7e:de:b0:8a:2a:99:
                    08:c8:20:da:59:1f:80:3a:d9:e0:d4:63:2e:b0:b6:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BF:88:68:61:C8:4B:1B:D6:12:7B:13:BD:CE:A6:27:60:8A:F7:12
            X509v3 Authority Key Identifier:
                keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f6:4b:ad:c3:7f:08:6b:e9:2c:5b:14:c3:a8:ff:82:4c:aa:
         f0:5b:ca:1c:03:99:50:e5:e5:02:6a:b1:4a:e0:5d:d9:10:03:
         b4:3e:75:9c:67:cc:93:db:46:3e:dd:3c:a5:09:96:cd:dd:f4:
         df:dd:28:a0:fa:4c:c2:1b:53:53:a8:ed:aa:52:a8:70:1a:a4:
         3f:35:c6:a7:2b:5e:b1:b2:3b:20:c0:0c:54:05:3e:78:4c:06:
         eb:78:b2:2e:80:b5:ab:42:35:05:57:71:fd:4e:2c:b5:30:33:
         87:6b:c8:6d:9a:7f:13:ce:f2:ad:8a:80:1a:ce:ce:9e:bd:35:
         86:b1:b4:3a:cf:4d:b2:2e:38:e1:bb:cf:51:11:09:25:92:6c:
         fe:bc:16:5b:63:38:7c:4c:cc:b1:07:df:e3:98:94:61:e6:6f:
         58:10:a0:42:e0:1b:64:36:75:eb:f1:95:75:af:0c:ac:36:6d:
         06:17:3d:80:74:ba:57:cf:89:90:ba:5c:63:25:64:bd:12:98:
         39:72:fa:a5:d8:bc:c4:a7:1c:be:33:56:28:bf:68:9e:3e:8d:
         49:f3:67:c9:e4:49:65:64:7e:01:55:eb:19:53:f2:53:e2:86:
         c6:6b:f5:68:da:e4:40:eb:96:cc:2f:07:b3:df:9d:0f:b0:de:
         58:af:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:48 2026 by rpki-client