This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
File:                     UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json)
Hash identifier:          pTHYa875JU/3n4M0MZKGMuOgz86mmP2C9CimAAYwf1c=
Subject key identifier:   DA:C0:C9:4F:D2:C5:A3:B2:4F:F1:2B:8E:B1:A1:4D:DE:A5:2D:69:4F
Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
Certificate issuer:       /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
Manifest number:          51
Signing time:             Sun 25 Jan 2026 06:17:55 +0000
Manifest this update:     Sun 25 Jan 2026 06:17:54 +0000
Manifest next update:     Sun 01 Feb 2026 06:17:54 +0000
Files and hashes:         1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: X0Su24h74m2bA8DAxwbcByJOxh9lrUT02q+FfrEHqPo=)
                          2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: E0HpiYi9oekDhMBwLHO28cWKce/Mgln+cFcKFRPDwlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
                          rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 06:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
        Validity
            Not Before: Jan 25 06:17:54 2026 GMT
            Not After : Feb  1 06:17:54 2026 GMT
        Subject: CN=6975b593-d0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e5:0e:84:50:c5:1d:67:c4:ea:87:7a:2a:26:
                    80:13:f0:74:a4:53:72:20:13:59:6f:ae:53:e1:a2:
                    4c:7b:a9:40:07:e4:8e:5f:58:f5:ef:e0:3d:ad:21:
                    16:07:34:1f:60:94:d3:c0:4b:4c:2b:7d:dc:74:83:
                    92:7f:76:9f:7f:1b:c6:97:b5:f0:a3:25:da:d9:3d:
                    d6:9a:5d:94:7c:9a:60:02:e1:0a:60:c6:1f:d8:69:
                    cb:47:78:d1:10:26:a5:cf:31:ca:dd:36:95:f9:1e:
                    31:14:4e:93:24:2d:7b:3e:49:ef:e9:0d:69:8b:e5:
                    d6:4e:87:86:81:e9:29:23:02:7c:3f:ca:bd:e4:30:
                    44:f5:59:c6:e7:54:2e:c4:c3:48:fa:29:04:a1:3e:
                    e4:e3:45:f6:2f:39:7c:98:31:5e:37:04:1b:a7:c4:
                    9b:24:de:9e:0c:85:b7:1f:e3:1e:1b:7c:9e:36:83:
                    a1:46:1a:09:bd:c9:09:4e:f1:14:81:aa:f7:04:30:
                    47:e0:4a:ec:62:39:fc:6d:5a:05:b2:57:c4:ec:f6:
                    18:18:41:c0:b7:c2:d5:f7:fe:db:5a:5c:81:f5:45:
                    4d:d7:06:90:7e:36:00:79:d6:d7:19:e8:c5:17:b2:
                    13:95:e8:7f:55:84:04:26:e4:54:13:f5:10:c8:1d:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C0:C9:4F:D2:C5:A3:B2:4F:F1:2B:8E:B1:A1:4D:DE:A5:2D:69:4F
            X509v3 Authority Key Identifier:
                keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:aa:5b:92:19:45:70:e4:20:3f:96:28:19:fc:3c:56:f3:40:
         68:4f:d1:65:44:f7:b7:8d:fa:95:d9:07:40:20:d5:4a:6f:4b:
         c0:10:38:70:a7:a9:60:a6:b9:ca:b6:fb:bc:83:d4:42:3e:d3:
         67:64:18:92:9b:b2:52:eb:93:1e:e7:ff:21:fc:53:3e:fc:53:
         4e:c9:84:01:d3:bc:b1:f8:32:8e:3c:7b:b0:36:38:b7:55:b9:
         89:96:25:e9:cb:07:7f:a2:96:df:03:85:92:bc:da:d0:53:c0:
         77:d5:4e:24:8e:2c:87:6d:6b:2e:df:da:e2:3f:66:98:b7:eb:
         4a:da:68:5f:54:bb:c0:f8:39:43:96:d7:d7:43:a8:1a:33:c4:
         79:2b:4b:2f:26:b4:68:fd:3e:98:40:43:b8:ce:4d:b1:e9:44:
         8b:79:b2:b5:21:30:59:8a:e0:02:8c:96:39:01:21:21:b7:92:
         bd:1c:8c:df:3a:32:e5:1c:5e:f9:cb:e4:04:e0:06:f8:3e:bd:
         2f:b1:f7:8b:83:df:5b:59:fc:df:22:d5:93:e6:d0:89:89:31:
         da:5e:33:71:7b:54:47:1a:89:da:89:05:60:ea:89:2f:89:ae:
         22:14:01:43:bf:9f:aa:f6:2e:90:5f:16:a1:6c:87:6a:1a:44:
         8d:57:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:22 2026 by rpki-client