This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
File:                     Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json)
Hash identifier:          TTlRDYMy3SIt8Bc1uz0qVd6LfeDfxNPCWzPsmqhiItY=
Subject key identifier:   59:F0:4D:35:D3:68:45:89:BD:14:16:7C:EF:F7:FB:8D:9F:5A:F1:F0
Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82
Certificate issuer:       /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
Certificate serial:       0834
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
Manifest number:          0826
Signing time:             Sat 24 Jan 2026 20:18:09 +0000
Manifest this update:     Sat 24 Jan 2026 20:18:08 +0000
Manifest next update:     Sat 31 Jan 2026 20:18:08 +0000
Files and hashes:         1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: EbH52fr7BSzUnYNhiJi4c+EkuZ9FP8H/HJ7LhB8LhN4=)
                          2: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: k76lBVsDkbC4/kvkdx6eL3+7hTUl8oC4n6OD1pUFm20=)
                          3: 3791632A030011EB909C3244C4F9AE02.roa (hash: +BcgzS+5Izg03p+xuu+KcWuOMCH0daH9Nk0D1duytuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl
                          rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2100 (0x834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
        Validity
            Not Before: Jan 24 20:18:08 2026 GMT
            Not After : Jan 31 20:18:08 2026 GMT
        Subject: CN=69752901-c8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:63:52:fa:7b:db:ea:65:1a:9f:a0:ca:82:
                    bd:02:d3:7c:f4:5a:b1:70:c3:fa:71:2f:96:74:39:
                    0b:43:f2:23:e9:ec:14:0b:09:14:f5:15:bf:ab:a9:
                    0f:ba:b3:57:26:f7:be:80:50:54:dd:4f:2d:94:8a:
                    85:b7:68:31:b0:8a:52:4f:21:0d:5e:46:3f:c3:ce:
                    27:45:de:f9:0e:1d:4c:c7:52:dc:45:17:2c:c4:76:
                    ea:a7:d6:d8:4e:ee:5a:a8:22:01:87:56:27:27:63:
                    ef:ac:89:2d:ea:de:11:ab:93:76:5d:38:55:4b:8a:
                    b3:5a:5a:94:74:f4:fb:e1:ad:92:95:9d:f1:0d:71:
                    f5:df:e1:54:ef:17:d3:4c:d4:1f:37:30:5c:72:48:
                    c4:bf:88:9c:3c:c3:c8:c7:98:73:11:a2:73:2e:41:
                    43:be:a2:7e:15:a3:4c:26:59:d3:3d:01:7c:d5:7a:
                    67:79:0e:88:96:2e:b3:ca:8f:f2:bc:54:9d:91:f1:
                    9f:a3:97:7f:74:8b:d1:56:a8:3b:75:d2:fe:a4:be:
                    6b:0c:21:8e:c4:3a:fe:58:d3:00:e8:36:ce:74:d9:
                    3d:9d:4b:66:5d:fc:f7:52:68:e9:c9:4a:87:39:76:
                    df:87:9f:8a:f0:3a:5b:3b:60:3f:0d:32:84:f6:03:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F0:4D:35:D3:68:45:89:BD:14:16:7C:EF:F7:FB:8D:9F:5A:F1:F0
            X509v3 Authority Key Identifier:
                keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:80:ec:52:e1:26:78:7d:1e:f9:bf:45:80:ba:ab:be:d9:10:
         d6:ed:4a:9d:ea:20:97:11:69:55:38:04:2a:0f:c2:87:51:6b:
         bf:0e:43:82:ed:22:1d:37:36:4d:b3:70:65:a9:68:a2:9d:6f:
         3c:76:73:0d:e2:71:82:41:d0:bc:98:9f:c7:7e:f6:0f:01:b9:
         90:25:6e:07:70:cc:3c:6b:49:84:fc:93:91:5b:a6:39:9f:ef:
         2b:7c:59:9c:9f:d4:6a:05:52:66:b6:de:4f:d3:f9:d0:aa:9c:
         5f:e5:2f:dd:2a:57:a9:ac:be:ec:f1:6e:11:1a:6e:11:64:a6:
         bf:f4:08:c1:a7:b8:1d:8e:95:7d:30:91:dd:b6:c3:b5:50:9b:
         fc:18:42:dc:cd:f8:6c:d5:0e:ca:d6:79:e6:07:dd:c4:65:a1:
         71:9b:1b:e5:a8:8c:7b:67:3c:66:1b:c0:fa:9c:f5:ba:8f:61:
         23:5d:e1:cd:22:54:0f:93:4e:10:33:f0:4b:c8:7e:23:d1:80:
         8f:ce:70:aa:98:7b:4c:56:40:fd:14:18:8f:13:48:d2:19:cd:
         52:33:4a:69:86:0e:e2:07:8b:08:95:d5:ed:4c:fc:ac:e9:4d:
         78:7e:fe:50:4a:63:8e:53:3d:61:be:75:b0:e6:3a:d5:a6:db:
         24:31:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:46:59 2026 by rpki-client