This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
File:                     uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json)
Hash identifier:          ixV19aKXLEs/P1prtmrCM8tUrmo8CnKMAXu0sTfvw14=
Subject key identifier:   CC:C6:0D:E8:AF:B2:5E:D1:CD:14:E5:DF:89:2A:F3:D8:E6:0C:F9:4C
Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
Certificate issuer:       /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Certificate serial:       0C95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
Manifest number:          0C8C
Signing time:             Sat 24 Jan 2026 18:06:49 +0000
Manifest this update:     Sat 24 Jan 2026 18:06:48 +0000
Manifest next update:     Sat 31 Jan 2026 18:06:48 +0000
Files and hashes:         1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: sSUpI6pu9apPw34nYpn7mRCp/iCfWci3rJOWAvMKyHs=)
                          2: C4391160305611EABE7DF272C4F9AE02.roa (hash: ShWNoWlK1A1y7tJIOL2NddDhqDzgH2F/9l1o2jwcmL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl
                          rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3221 (0xc95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
        Validity
            Not Before: Jan 24 18:06:48 2026 GMT
            Not After : Jan 31 18:06:48 2026 GMT
        Subject: CN=69750a39-02f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:26:c9:29:fc:ad:9c:c1:b7:fd:17:29:1d:d3:
                    9c:6c:10:f0:56:fc:ae:ca:9a:26:85:66:24:f3:59:
                    5d:98:a3:c3:21:69:b1:c7:d3:b5:6b:13:87:b5:59:
                    5a:7a:57:98:88:dd:24:de:f5:39:a0:d0:d3:64:69:
                    e1:cc:7b:a6:23:fe:e0:83:9c:db:22:d7:fc:05:a0:
                    61:69:6d:ab:29:77:23:be:f5:9c:1c:d0:bc:95:5a:
                    b6:db:57:63:bc:bc:14:11:aa:b7:ee:6c:a2:0a:12:
                    5e:0d:60:83:75:81:a1:fc:4c:87:35:eb:de:62:e5:
                    4c:3c:1e:0c:b8:c3:3d:a5:69:60:de:a7:83:ea:1d:
                    ee:77:11:3a:01:dd:dc:4f:5c:4b:3e:95:9d:76:9b:
                    de:f9:b2:f8:e6:99:da:ec:57:0e:d7:df:d1:b0:e9:
                    2e:b8:71:fa:a8:11:8c:57:1b:44:70:d6:a2:f1:b9:
                    4a:87:fa:42:67:a1:83:72:d3:e3:b5:19:24:4e:09:
                    ba:d8:e5:50:39:ae:7c:4f:5a:96:40:9c:ba:5f:57:
                    11:90:9e:ed:56:10:82:de:e3:ab:03:26:17:90:00:
                    22:62:a2:5d:94:76:70:10:76:c6:81:59:09:b8:9a:
                    a1:75:82:f2:95:95:7d:0f:f7:9e:4f:3a:65:5c:75:
                    f2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C6:0D:E8:AF:B2:5E:D1:CD:14:E5:DF:89:2A:F3:D8:E6:0C:F9:4C
            X509v3 Authority Key Identifier:
                keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0c:c3:f2:00:80:d5:fe:cb:1b:25:9f:f5:54:fb:be:3f:7d:
         e7:56:b1:ff:03:1f:b5:a1:26:46:17:19:52:57:15:42:18:c2:
         81:cb:e6:c0:37:c7:3d:2d:5c:84:48:a0:4c:45:49:a0:c7:ea:
         ee:eb:82:30:ab:1b:16:5b:2f:61:64:02:3a:fa:1c:7c:61:98:
         0b:df:c6:86:1f:3d:90:16:b1:ee:f2:e0:f3:a7:ae:1a:f2:8b:
         81:89:a8:f7:12:5d:5f:06:28:bc:7e:ff:cc:66:b3:a0:8d:9a:
         69:f6:99:d4:c4:67:38:6c:fd:70:22:d4:68:60:66:ba:80:0c:
         b0:eb:ac:f8:51:5a:b1:47:39:23:90:36:67:09:20:31:36:ae:
         f9:c8:02:9f:1d:62:ee:ec:50:37:e9:9b:4f:e6:ef:5d:e5:6f:
         d7:0e:56:26:85:a5:ee:b8:b9:da:b2:e1:30:25:d2:6d:48:ce:
         e6:f0:5e:15:cb:54:16:c6:a1:e9:9e:be:94:a5:2b:7c:85:33:
         1e:a8:9d:1a:b4:90:2d:65:d9:f8:6b:7e:ea:6e:f2:de:fc:08:
         e7:f1:b0:b2:9c:f4:24:cd:8c:02:f1:54:69:bf:8b:1e:ec:fc:
         3c:c7:21:5f:b6:f2:e2:98:6d:62:a9:71:3e:96:55:6c:a0:b6:
         0f:51:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:10:35 2026 by rpki-client