This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
File:                     uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json)
Hash identifier:          ps+CiUQ0Aksl8019nx+9d7pHFEAHvF37nach5fQ3rpc=
Subject key identifier:   B7:32:96:58:39:AC:0F:74:18:5B:8B:C1:45:21:41:20:7B:4B:14:4B
Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62
Certificate issuer:       /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762
Certificate serial:       0ED3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
Manifest number:          0EC9
Signing time:             Sat 24 Jan 2026 17:20:27 +0000
Manifest this update:     Sat 24 Jan 2026 17:20:27 +0000
Manifest next update:     Sat 31 Jan 2026 17:20:27 +0000
Files and hashes:         1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: 8K0GwOhFNe9AIgDCiuSaCJ4YDJcq1kCyCmpuxvFQKUA=)
                          2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: Gdmjy4eOm23bZo0u+QNI+KYIouesOlIiUyP5E+hvG08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl
                          rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3795 (0xed3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762
        Validity
            Not Before: Jan 24 17:20:27 2026 GMT
            Not After : Jan 31 17:20:27 2026 GMT
        Subject: CN=6974ff5b-0674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:b1:d7:27:2e:a8:7a:8a:f4:f9:71:09:5c:
                    f1:bb:18:e1:d6:7e:d9:a4:07:50:e1:05:bb:95:3d:
                    54:50:c0:85:3c:db:80:96:18:22:ec:ca:a1:b0:11:
                    94:f5:96:3d:b4:77:e2:ac:91:e2:20:4b:fe:f6:b3:
                    d4:ff:48:3c:63:62:3e:be:a5:1d:43:c0:36:df:83:
                    44:f6:41:47:ac:5a:a8:c9:58:78:d0:5e:8f:55:54:
                    dc:d2:ca:00:fb:4e:ee:d4:3c:b1:db:eb:c6:e4:57:
                    ad:d8:5d:75:84:ec:ae:7c:2d:0f:ef:fc:92:10:3f:
                    7d:a5:60:57:5b:2e:29:7c:23:5d:8c:24:3c:06:99:
                    f1:b0:87:ab:54:2d:76:c1:fe:64:ae:a7:29:f2:10:
                    55:4b:e2:dd:fc:73:60:e7:7e:5f:a6:0c:aa:76:05:
                    01:63:4a:02:8a:4d:b5:2f:b8:2b:24:d2:11:06:2e:
                    16:f6:ce:d8:6c:a6:b2:ba:ea:81:64:84:b2:a3:4d:
                    d1:fd:7d:f0:f5:69:82:b3:0a:10:87:4f:e7:81:a4:
                    23:f5:00:43:95:84:a7:92:ea:f9:44:8b:da:86:32:
                    3e:43:41:15:eb:2a:90:91:29:4f:5c:8b:da:92:80:
                    39:fb:3f:c9:e3:bb:c2:2a:11:08:16:d8:18:c0:e8:
                    48:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:32:96:58:39:AC:0F:74:18:5B:8B:C1:45:21:41:20:7B:4B:14:4B
            X509v3 Authority Key Identifier:
                keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:86:1a:9c:59:3f:92:36:63:ee:5d:5d:87:c0:b8:75:06:98:
         89:75:89:a4:a1:b3:90:f0:eb:c0:de:db:47:c9:9d:3f:b6:8d:
         09:cf:1f:7f:1e:ea:69:6d:25:9c:be:5a:2e:9f:03:fb:70:8f:
         8e:6c:26:71:28:4a:b2:34:99:49:76:55:dc:0b:12:1d:3c:86:
         27:9a:2b:16:b7:ed:04:b7:b4:d1:23:5d:3d:ed:91:9d:18:96:
         7e:f9:5b:62:8a:b4:ae:49:4e:ef:54:76:aa:1f:26:ff:bb:1d:
         83:e7:f2:59:f7:72:9e:f8:3d:d0:ff:b2:9f:77:3c:47:c6:d6:
         e0:e7:33:e7:56:74:08:2f:cd:60:53:76:f6:39:4b:21:f5:f4:
         77:17:e1:f5:1d:a6:b7:ac:25:ec:24:76:79:f0:45:a6:b1:17:
         17:24:90:57:f1:a9:9d:5f:7d:bf:81:a1:32:ca:d1:c1:5c:80:
         bf:70:d0:26:04:ff:8e:02:98:55:ae:75:7b:7d:0a:1a:01:0f:
         18:9d:1c:5a:3b:13:13:c8:08:ad:40:64:5e:e7:48:0b:d9:32:
         35:6c:0a:5b:f3:6e:ab:68:7c:df:83:83:5a:ed:c0:eb:96:92:
         06:60:88:a6:ff:55:d0:ee:c1:93:4f:c1:3e:9f:ee:b3:6a:24:
         16:c8:4d:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3
QjFDRTI3NjIwHhcNMjYwMTI0MTcyMDI3WhcNMjYwMTMxMTcyMDI3WjAYMRYwFAYD
VQQDDA02OTc0ZmY1Yi0wNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtPux1ycuqHqK9PlxCVzxuxjh1n7ZpAdQ4QW7lT1UUMCFPNuAlhgi7MqhsBGU
9ZY9tHfirJHiIEv+9rPU/0g8Y2I+vqUdQ8A234NE9kFHrFqoyVh40F6PVVTc0soA
+07u1Dyx2+vG5Fet2F11hOyufC0P7/ySED99pWBXWy4pfCNdjCQ8BpnxsIerVC12
wf5krqcp8hBVS+Ld/HNg535fpgyqdgUBY0oCik21L7grJNIRBi4W9s7YbKayuuqB
ZISyo03R/X3w9WmCswoQh0/ngaQj9QBDlYSnkur5RIvahjI+Q0EV6yqQkSlPXIva
koA5+z/J47vCKhEIFtgYwOhI8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcyllg5
rA90GFuLwUUhQSB7SxRLMB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF
NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTE0OS8yNEJCMjRDRTlFNDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQ
dFNfYUQtdlVvQ3Q3SE9KMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnhhqcWT+SNmPuXV2HwLh1BpiJdYmkobOQ8OvA3ttHyZ0/to0Jzx9/
HuppbSWcvlounwP7cI+ObCZxKEqyNJlJdlXcCxIdPIYnmisWt+0Et7TRI1097ZGd
GJZ++VtiirSuSU7vVHaqHyb/ux2D5/JZ93Ke+D3Q/7KfdzxHxtbg5zPnVnQIL81g
U3b2OUsh9fR3F+H1Haa3rCXsJHZ58EWmsRcXJJBX8amdX32/gaEyytHBXIC/cNAm
BP+OAphVrnV7fQoaAQ8YnRxaOxMTyAitQGRe50gL2TI1bApb826raHzfg4Na7cDr
lpIGYIim/1XQ7sGTT8E+n+6zaiQWyE2B
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:10:55 2026 by rpki-client