This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft
File:                     UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft (raw, json)
Hash identifier:          iLkdAdEbscyxgNVMCXLl/UJx6lPZJ+B1CnMgxwNbLJ0=
Subject key identifier:   02:D9:01:9B:20:27:9A:42:74:21:7C:39:2E:80:F0:E7:21:CA:9C:17
Authority key identifier: 51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5
Certificate issuer:       /CN=A91BA8F5/serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5
Certificate serial:       0403
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft
Manifest number:          03FF
Signing time:             Sat 24 Jan 2026 23:40:14 +0000
Manifest this update:     Sat 24 Jan 2026 23:40:13 +0000
Manifest next update:     Sat 31 Jan 2026 23:40:13 +0000
Files and hashes:         1: UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl (hash: dEtdZiNIN6PR9DajY/+bBHBfgUH2ueow9RXQProSMUc=)
                          2: 713001A0A35811EC88C42869C4F9AE02.roa (hash: DNm/cKBnOwMLtVf8PNiul90A2LNN5D/9x28AaUpSyDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl
                          rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA8F5, serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5
        Validity
            Not Before: Jan 24 23:40:13 2026 GMT
            Not After : Jan 31 23:40:13 2026 GMT
        Subject: CN=6975585e-89f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:5b:11:4f:67:5d:d2:95:e4:20:d2:f9:fd:
                    41:d9:28:69:02:43:e8:f2:99:7e:3f:5f:cf:89:78:
                    65:7d:0c:50:b2:6c:6f:90:cd:f5:1b:c8:d0:27:38:
                    f5:13:b3:80:35:01:9b:c9:68:94:b3:48:cd:1b:7d:
                    7d:25:3c:7f:03:49:b0:98:14:a3:55:67:45:bb:31:
                    e2:b3:dd:9b:2d:47:94:c6:24:e3:99:98:a0:92:04:
                    7d:95:a8:78:02:58:e9:0f:be:e1:8e:2b:26:1a:da:
                    b2:50:20:ce:9e:cf:75:c3:c5:90:b5:01:8f:af:2a:
                    c4:ef:75:c8:c1:5c:1d:34:e8:d2:76:a1:3b:58:20:
                    7b:38:55:97:2e:62:b1:74:45:e8:ef:39:6c:28:fd:
                    af:dd:98:5c:3e:5f:ac:10:96:7b:00:ce:93:65:fc:
                    1a:8c:66:24:dd:04:a6:ef:54:d9:67:f2:6d:23:65:
                    69:18:3a:3c:d2:0a:f9:39:e1:44:3e:dd:25:e8:80:
                    3f:94:27:a5:55:8e:ca:22:a6:3d:53:e1:d3:9a:6e:
                    42:3e:b2:81:3b:a7:7e:8a:ee:f0:6e:83:96:69:8f:
                    7d:92:cb:e1:2b:24:f4:1f:44:e4:64:20:e9:2b:dd:
                    20:18:24:77:f3:09:29:44:ab:da:23:8d:7c:14:59:
                    f9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D9:01:9B:20:27:9A:42:74:21:7C:39:2E:80:F0:E7:21:CA:9C:17
            X509v3 Authority Key Identifier:
                keyid:51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a0:38:19:e1:43:ca:52:30:3b:ac:47:4e:bc:d3:fc:8b:3d:
         b7:35:46:10:04:33:bf:ce:25:2b:b9:c7:f1:6f:81:65:25:7c:
         a4:b6:52:7a:09:3e:f5:e4:c8:5f:a3:66:ef:ee:cc:7b:c9:97:
         73:3d:fc:12:4b:f6:92:8b:41:28:c7:cd:fe:15:f3:bc:d8:8b:
         93:e0:9e:4d:50:8d:85:93:ae:0e:3b:dd:a0:41:0f:b2:09:a6:
         2a:7a:80:c1:3c:5f:0d:3a:88:2f:3d:15:0b:cf:88:93:f1:1f:
         e2:27:bb:84:40:c3:1f:a1:54:dd:06:de:f9:e8:ea:c1:1b:c2:
         1b:ad:43:f6:6f:8c:59:3f:fa:55:e8:3a:51:64:73:5b:d6:e4:
         38:74:24:8e:6b:6d:e9:fa:8c:c0:b4:79:9f:a7:d8:40:70:c7:
         0f:7c:74:a1:3f:1b:5b:6a:38:d8:05:e0:20:65:76:74:d1:77:
         a6:f5:15:15:97:41:ec:60:3a:9c:dc:d6:94:aa:fb:e6:77:9b:
         a8:b3:e5:70:9c:39:0a:b3:e5:ed:48:9c:ed:75:e0:79:ad:23:
         a0:60:ed:f0:04:89:36:37:a6:05:b4:40:ed:81:54:30:f0:a8:
         68:e2:c6:a5:fd:12:f7:37:8d:f8:32:21:41:b1:1e:6e:e3:1d:
         91:0f:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:32 2026 by rpki-client