This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
File:                     UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json)
Hash identifier:          lxrRz+QfxO6wkDN6vIwBzj6nxr2vLHBT9bBpA98qoKE=
Subject key identifier:   A4:8C:92:C8:76:AB:B0:6B:8C:F5:C3:53:E8:0F:3B:EA:B6:39:48:AD
Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A
Certificate issuer:       /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
Certificate serial:       0454
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
Manifest number:          044F
Signing time:             Sat 24 Jan 2026 23:25:05 +0000
Manifest this update:     Sat 24 Jan 2026 23:25:05 +0000
Manifest next update:     Sat 31 Jan 2026 23:25:05 +0000
Files and hashes:         1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: 53CxeaJRs3MqWGEX8UEmPxA0tslKYga4TE3HRG5cO1g=)
                          2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: /RxOlV3ierU9U8XUpOrcDZ1BfZBiiZXrWx/RXW8pGyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl
                          rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A
        Validity
            Not Before: Jan 24 23:25:05 2026 GMT
            Not After : Jan 31 23:25:05 2026 GMT
        Subject: CN=697554d1-12ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:fe:fb:1e:00:ab:7d:54:89:16:e4:55:89:
                    26:8f:12:40:34:9a:25:72:4d:7a:51:25:2c:83:70:
                    6f:d8:e5:e2:f2:d8:77:6f:f1:b4:79:99:d3:7e:13:
                    2e:ca:4e:ee:39:c7:95:a4:e4:90:e3:45:78:b4:11:
                    88:f3:51:4c:30:e4:8b:85:95:70:af:92:7c:6f:c9:
                    af:dd:ba:bc:92:e3:72:ca:50:dc:fd:cc:62:11:a0:
                    83:1d:30:33:bb:b3:b7:e4:06:7e:0f:77:39:c7:97:
                    d7:e9:07:67:53:15:18:d0:f0:f1:51:d8:65:aa:4e:
                    d6:42:db:bc:0c:ef:05:54:ed:11:65:31:dc:bf:a8:
                    59:0d:e8:de:8f:30:5d:7d:e3:5e:cc:23:5a:5c:fe:
                    97:01:a2:25:90:08:57:1f:d0:b1:6d:8d:05:b7:20:
                    ef:31:a0:f7:3e:68:41:6c:87:d1:81:1f:e9:ad:7b:
                    ab:97:22:6d:10:59:a7:72:12:f9:33:cb:7b:8a:82:
                    bc:ce:08:1f:9b:80:16:1d:6f:08:37:db:30:1a:d2:
                    cd:14:80:69:8f:d7:0b:66:d0:40:bc:ce:45:e3:6c:
                    30:90:c9:70:fd:3b:66:8e:0e:42:42:f8:b3:48:4c:
                    b4:fd:d1:54:84:f2:11:a8:a6:b3:5e:63:a1:6a:e7:
                    34:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8C:92:C8:76:AB:B0:6B:8C:F5:C3:53:E8:0F:3B:EA:B6:39:48:AD
            X509v3 Authority Key Identifier:
                keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f2:57:ff:cc:ac:1e:9b:6d:76:3a:a2:b8:90:c5:8f:a2:1d:
         59:2c:d5:b2:40:31:4d:69:fd:5c:90:04:a1:4f:2f:1d:ba:81:
         9b:61:27:74:d1:fc:f3:cc:91:af:a1:f0:1c:1b:d5:ec:dc:a5:
         24:bd:00:e5:c8:29:a2:6e:18:d4:90:13:f2:32:4a:5a:b8:0f:
         d4:86:8c:76:09:f0:19:6e:fd:d1:de:7f:94:80:b8:3c:a7:94:
         9f:6a:57:c9:b8:a4:df:00:26:48:64:c8:86:79:81:c2:ac:78:
         2d:fd:86:8f:5e:3f:b4:cf:49:14:f3:d8:5b:fd:cc:70:92:ba:
         00:3b:dd:db:49:95:cc:a9:2f:86:8b:90:ce:fd:68:d9:51:51:
         41:2d:38:0b:25:c9:9f:f1:dc:e0:db:0b:f3:df:96:42:2f:22:
         9a:10:1c:5b:1c:10:f6:47:3e:7f:69:24:a7:f5:99:1c:5d:de:
         5f:69:65:d8:c2:39:84:16:6d:9d:01:a4:06:6d:64:57:ef:b3:
         2b:2e:13:e9:2c:86:93:14:01:c3:3a:c4:5e:01:9a:5a:a1:05:
         1b:2d:9c:26:cd:f2:9f:2c:93:aa:e3:32:b4:9a:15:f4:d4:ef:
         e6:22:25:59:e8:d5:df:89:c5:66:2f:f8:a6:90:b5:03:98:ee:
         a2:a1:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:42 2026 by rpki-client