This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
File:                     PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json)
Hash identifier:          GNRKBauohr3+nLk/EgODRtUIRmNPQApLAfPCvy7ZHgI=
Subject key identifier:   41:F1:01:A1:B9:73:CE:DD:38:02:9F:6C:CF:34:0E:BF:C7:AB:73:BC
Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
Certificate issuer:       /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Certificate serial:       072B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
Manifest number:          0724
Signing time:             Sat 24 Jan 2026 21:09:52 +0000
Manifest this update:     Sat 24 Jan 2026 21:09:52 +0000
Manifest next update:     Sat 31 Jan 2026 21:09:52 +0000
Files and hashes:         1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: gF+lqYLecn/NDuMrKTMBx2mlvfG92aflUh+Dnb6/rgs=)
                          2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: PSEZLzwnpVP0bMdPm9ss1klBUjjhwDdtS6Etm70E9UM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
                          rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
        Validity
            Not Before: Jan 24 21:09:52 2026 GMT
            Not After : Jan 31 21:09:52 2026 GMT
        Subject: CN=69753520-4a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:69:5e:06:19:1e:7b:db:24:ee:75:9e:4b:b4:
                    f4:57:f0:50:ba:8c:94:34:09:6e:0c:2f:9b:97:18:
                    05:0c:65:94:df:fd:1c:6d:15:5d:15:54:22:fe:db:
                    bc:68:52:5b:3a:4e:c1:e4:41:ec:9a:2a:53:fc:cf:
                    bb:f8:4e:11:ae:57:62:87:8a:2c:2f:ab:84:8a:a0:
                    ad:64:40:18:16:d9:bf:32:9b:c9:7a:3e:eb:0d:2f:
                    7b:b5:2b:70:3f:4b:01:55:42:8f:a5:f5:bd:cf:63:
                    15:fb:e1:36:53:d2:fa:0d:9e:2b:e0:af:85:b2:d7:
                    61:d8:7f:5c:05:e5:cc:ff:41:48:72:56:7e:0c:9a:
                    c7:79:4f:f8:d1:24:bc:10:45:99:5f:67:b4:7a:ba:
                    4b:af:d5:14:d1:df:5f:b7:8e:02:94:70:51:d7:c7:
                    1a:b9:3c:2c:e7:c7:3f:a7:27:69:29:88:96:db:a7:
                    95:64:8a:e6:96:a8:a6:4d:fb:72:49:7c:99:13:46:
                    9f:5f:63:b9:55:01:69:bb:37:a4:ea:7f:db:55:77:
                    c9:91:c1:bd:b8:21:24:6f:8e:99:84:66:88:83:a7:
                    87:c6:7e:54:05:c9:28:54:c7:a6:55:ed:5e:5d:be:
                    c5:df:f0:3f:f3:ec:64:8d:5f:58:78:99:4a:ef:87:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F1:01:A1:B9:73:CE:DD:38:02:9F:6C:CF:34:0E:BF:C7:AB:73:BC
            X509v3 Authority Key Identifier:
                keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:bb:a4:5c:f0:bc:df:98:48:9a:5a:ec:cc:1c:1c:2e:62:a2:
         1b:45:30:5b:ce:10:57:0a:97:65:c2:00:e6:6c:ef:25:8c:a3:
         05:bb:2a:8b:00:0d:36:8d:e2:88:f4:98:70:fb:5c:76:6e:53:
         3c:a7:7f:7c:a1:a0:f2:ef:df:a4:dd:7b:19:6f:98:67:5b:8c:
         00:62:cc:ea:ed:f8:fc:56:a9:31:f9:17:07:11:33:b0:01:5f:
         f7:3e:a4:db:5f:ff:82:94:71:e6:ec:28:fc:1e:3c:5d:52:8e:
         57:b9:37:9c:60:49:69:d0:36:64:33:61:a1:43:42:27:8c:c6:
         bb:eb:4e:b4:8d:8c:55:19:00:a3:a5:c2:3a:81:ed:7c:e9:68:
         25:c6:9e:98:a4:a7:43:03:f9:f7:0e:bd:03:05:cd:29:2f:91:
         10:6d:0b:65:cb:fa:86:3e:bb:02:67:0c:91:f7:aa:a0:2e:6c:
         61:26:d6:7d:14:d6:02:96:ad:17:de:d7:7f:63:17:59:0c:44:
         5e:97:b9:00:0d:66:67:e0:a1:19:ee:01:74:95:33:66:87:b7:
         5e:bd:94:5a:71:ae:3a:db:9f:73:cb:5e:40:00:67:d1:89:c7:
         ad:14:79:fa:af:87:a4:76:4a:3e:e1:d2:19:ab:8a:12:11:be:
         81:8b:0e:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI4QzIxMTAvBgNVBAUTKDNFRTUyMjk3NjEzMDZCOTdCREE3RkJFMUYyNENCNEIw
NEQ0OTI1OEYwHhcNMjYwMTI0MjEwOTUyWhcNMjYwMTMxMjEwOTUyWjAYMRYwFAYD
VQQDDA02OTc1MzUyMC00YTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz2leBhkee9sk7nWeS7T0V/BQuoyUNAluDC+blxgFDGWU3/0cbRVdFVQi/tu8
aFJbOk7B5EHsmipT/M+7+E4Rrldih4osL6uEiqCtZEAYFtm/MpvJej7rDS97tStw
P0sBVUKPpfW9z2MV++E2U9L6DZ4r4K+Fstdh2H9cBeXM/0FIclZ+DJrHeU/40SS8
EEWZX2e0erpLr9UU0d9ft44ClHBR18cauTws58c/pydpKYiW26eVZIrmlqimTfty
SXyZE0afX2O5VQFpuzek6n/bVXfJkcG9uCEkb46ZhGaIg6eHxn5UBckoVMemVe1e
Xb7F3/A/8+xkjV9YeJlK74cW8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHxAaG5
c87dOAKfbM80Dr/Hq3O8MB8GA1UdIwQYMBaAFD7lIpdhMGuXvaf74fJMtLBNSSWP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhDMi9GNjlDM0JBQzY2
OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1ZTlwX3ZoOGt5MHNFMUpK
WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B1VWlsMkV3YTVlOXBfdmg4a3kwc0UxSkpZOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjhDMi9GNjlDM0JBQzY2OTUxMUVCOEY0MjNGNTVDNEY5QUUwMi9QdVVpbDJFd2E1
ZTlwX3ZoOGt5MHNFMUpKWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5u6Rc8LzfmEiaWuzMHBwuYqIbRTBbzhBXCpdlwgDmbO8ljKMFuyqL
AA02jeKI9Jhw+1x2blM8p398oaDy79+k3XsZb5hnW4wAYszq7fj8Vqkx+RcHETOw
AV/3PqTbX/+ClHHm7Cj8HjxdUo5XuTecYElp0DZkM2GhQ0InjMa76060jYxVGQCj
pcI6ge186Wglxp6YpKdDA/n3Dr0DBc0pL5EQbQtly/qGPrsCZwyR96qgLmxhJtZ9
FNYClq0X3td/YxdZDERel7kADWZn4KEZ7gF0lTNmh7devZRaca46259zy15AAGfR
icetFHn6r4ekdko+4dIZq4oSEb6Biw7P
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:20 2026 by rpki-client