This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
File:                     UyaKJzal_1VLlAcD83T8NXkijDA.mft (raw, json)
Hash identifier:          z12X9I8EFV58A/SWfDpsgy2wE5rMJbhv5WB6GCm0KGg=
Subject key identifier:   F4:78:92:31:B7:1D:8E:EF:5F:56:4A:09:1F:43:B2:28:19:19:BA:E9
Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30
Certificate issuer:       /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30
Certificate serial:       0AAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
Manifest number:          0AA1
Signing time:             Sat 24 Jan 2026 19:01:50 +0000
Manifest this update:     Sat 24 Jan 2026 19:01:49 +0000
Manifest next update:     Sat 31 Jan 2026 19:01:49 +0000
Files and hashes:         1: UyaKJzal_1VLlAcD83T8NXkijDA.crl (hash: gPmGLmEETrv64FMaixzZsDDOFV9dJZWS9f+49A2tE5E=)
                          2: CF072592709211EAB1D2FA0FC4F9AE02.roa (hash: qgPwBHuJNODFhkIhrJVb9VAEuenY+/fH1u9JlBx0mT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl
                          rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2730 (0xaaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCBAD, serialNumber=53268A2736A5FF554B940703F374FC3579228C30
        Validity
            Not Before: Jan 24 19:01:49 2026 GMT
            Not After : Jan 31 19:01:49 2026 GMT
        Subject: CN=6975171d-b257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:b6:fb:1a:cb:42:0c:a2:56:2e:f5:88:7a:
                    77:1a:27:0e:9d:cd:b3:7a:55:97:0f:e1:c2:d6:db:
                    bc:74:90:4f:fc:46:72:bd:14:76:0f:07:15:27:8d:
                    32:91:eb:f7:cc:19:3e:18:e8:1b:bd:9f:14:57:56:
                    b3:50:22:bf:99:cb:c0:fb:aa:29:07:9e:e6:cf:de:
                    83:54:05:d6:2c:d7:35:ca:2b:6f:da:2d:1c:2b:db:
                    72:59:da:14:cb:8d:0d:d4:24:0b:ad:ec:ae:28:c5:
                    e1:e1:9a:5c:9b:88:36:10:29:d4:f2:74:94:7f:4e:
                    fa:64:85:96:3e:86:04:7a:d9:f9:f0:a5:b0:0c:86:
                    40:b6:3d:c3:f6:a9:50:f7:bd:ad:74:86:e7:f2:55:
                    03:6a:73:48:12:a3:c6:b1:88:a7:de:1a:85:e0:01:
                    29:d9:d4:26:e4:fe:ec:93:e8:33:63:37:ac:0f:cb:
                    59:8b:8d:04:49:3d:0d:e3:d3:21:bf:a7:d2:3d:c6:
                    6f:ad:3b:da:1a:c1:f9:70:01:b0:42:f2:af:49:27:
                    0b:61:d2:f1:e2:5e:a8:89:ab:e5:56:e2:c5:dc:f1:
                    e0:88:25:06:72:33:1c:d3:be:cd:55:df:1c:36:c9:
                    da:cf:7f:84:a4:ca:90:f8:bc:40:8b:3a:35:ed:39:
                    c5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:78:92:31:B7:1D:8E:EF:5F:56:4A:09:1F:43:B2:28:19:19:BA:E9
            X509v3 Authority Key Identifier:
                keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:09:cc:7d:c3:0b:d7:43:39:c0:4d:cf:51:8a:d9:66:c8:19:
         f8:fd:1b:36:06:39:15:6f:24:e6:63:86:49:b7:cb:f8:f9:2e:
         4b:c3:e3:ea:31:d2:11:50:13:eb:6e:00:ed:70:1c:71:ab:fa:
         78:08:eb:61:58:41:d0:6f:5e:29:8e:1d:1c:5f:04:5e:16:19:
         ec:f7:68:80:68:79:5c:15:df:2b:cf:01:50:50:dc:58:3c:56:
         76:5f:20:82:ed:bd:04:d7:5f:b7:70:6e:7c:37:77:d1:1c:b0:
         40:24:a0:0b:82:83:10:75:84:24:c6:7f:f5:4f:9a:88:ad:d3:
         52:81:f4:fa:2c:2a:ae:77:71:9e:02:43:ef:4c:83:ce:61:bf:
         1f:a4:a5:b5:49:5f:9c:f8:35:bc:56:0e:79:bc:2c:43:81:e7:
         a8:26:29:3e:65:4b:43:f5:c9:30:1e:79:8d:97:88:1d:42:82:
         51:9a:85:0a:e1:3b:98:24:5e:b8:23:b9:c6:9b:f1:ae:4e:aa:
         3c:f4:39:71:71:ba:bb:28:e3:5f:41:d4:b2:de:ef:36:aa:5b:
         12:9b:54:0e:09:29:7c:db:33:ce:e5:09:e1:3a:72:63:cd:07:
         ce:e4:db:02:7e:64:17:fd:1d:97:ab:d2:70:81:ec:26:72:72:
         52:03:c1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:43:45 2026 by rpki-client