This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
File:                     UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json)
Hash identifier:          gvgL9lt+Bj2Ognk1ydhufMd98Z8PgVH76bz4DX/vxkQ=
Subject key identifier:   B7:4A:F0:1F:F4:59:F7:71:A7:CA:1C:AA:72:31:B7:8E:57:A5:52:28
Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4
Certificate issuer:       /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
Manifest number:          0180
Signing time:             Sun 25 Jan 2026 03:04:05 +0000
Manifest this update:     Sun 25 Jan 2026 03:04:04 +0000
Manifest next update:     Sun 01 Feb 2026 03:04:04 +0000
Files and hashes:         1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: E8iJ1v5/jnGxSvg90NgTbGmd6kqTxb0Sl3Jfijpew8c=)
                          2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: Jk9RrR3gjgm3wbIBdhiQRBJ8z40sBgZjeZ2JGJJGKwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
        Validity
            Not Before: Jan 25 03:04:04 2026 GMT
            Not After : Feb  1 03:04:04 2026 GMT
        Subject: CN=69758825-d979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:9b:33:8a:4a:b3:e5:04:b7:54:3a:46:9f:
                    f9:0a:a5:d6:d6:51:39:22:df:23:f6:5f:32:ef:71:
                    03:1d:88:60:33:a6:be:59:3e:6e:d2:3c:b3:87:1b:
                    d3:d4:ae:f1:2a:75:f5:4b:89:92:db:19:bc:04:10:
                    0b:92:5a:18:dd:5d:d2:a1:b6:a3:aa:3c:3d:d5:6a:
                    73:a9:4c:59:a2:97:76:0c:e4:d7:1d:f8:05:b7:96:
                    4c:bb:08:23:9c:b5:95:5c:ac:c0:7e:8c:5f:02:5d:
                    36:27:08:e1:fb:63:dc:50:1e:1e:8e:86:a8:b6:23:
                    7d:e1:a8:89:4a:4a:f1:e0:33:ab:b7:63:e3:83:53:
                    ca:c1:bc:ae:bc:1c:c9:55:ed:e7:3b:fd:55:80:10:
                    03:28:0e:e5:ac:0d:f0:0b:81:78:bf:0f:48:ad:cd:
                    6f:48:b5:28:a9:3f:fe:0d:85:9d:25:8a:40:f8:df:
                    65:77:3e:72:0b:9d:32:a2:7e:32:c2:b2:f9:2d:0b:
                    79:3d:92:fa:77:a4:80:d2:65:ee:98:12:0d:90:00:
                    91:42:fb:aa:c6:b3:16:44:de:4b:38:2b:45:dd:86:
                    0a:48:78:2c:1f:6f:54:d0:83:05:46:d4:12:22:f2:
                    38:03:06:77:dd:fe:cf:db:c2:6c:48:5f:d9:c2:dd:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4A:F0:1F:F4:59:F7:71:A7:CA:1C:AA:72:31:B7:8E:57:A5:52:28
            X509v3 Authority Key Identifier:
                keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:04:e1:87:63:cd:f9:4c:f9:bb:3a:f2:a9:c9:06:fa:36:2b:
         74:cb:d4:e3:42:bf:02:cc:c7:36:6b:82:ae:b5:67:14:2e:fd:
         fa:a9:41:9c:e4:1f:3b:ba:f0:c8:dc:37:51:11:f8:c7:67:7c:
         b8:c3:09:6e:d0:0f:aa:62:2e:7c:ea:26:ef:46:13:00:a0:70:
         bf:1d:77:b9:06:cf:62:80:df:a4:a5:89:d2:18:16:2b:af:cf:
         47:75:3d:f2:23:39:45:6d:22:ef:eb:da:7e:c6:be:ff:13:a1:
         9e:19:7d:96:30:b6:b2:4b:37:dd:6e:85:4a:a2:b0:1c:7d:7c:
         fe:77:f9:f4:35:5d:ce:a2:c6:99:3a:45:df:f5:8a:cb:5d:c5:
         1f:1b:ce:d9:52:c3:b8:53:5d:1d:da:52:d1:d6:a5:23:03:41:
         19:29:83:f5:be:5c:66:dc:d8:4a:3e:8c:14:1f:6f:bd:07:d2:
         d0:0e:e4:35:03:34:aa:6c:cd:73:cb:f0:86:f5:55:d2:f6:a4:
         6f:68:f8:b5:be:44:31:90:8f:49:3c:da:2d:a3:57:61:9e:7b:
         40:52:3a:0e:7f:81:7b:af:63:fb:d0:29:09:b6:e8:40:ff:01:
         8b:17:09:91:ed:dc:a4:ca:0d:96:c7:d5:2a:51:b5:e0:56:f2:
         9b:7a:82:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE4NTExMTAvBgNVBAUTKDUwQTBEQzk1NThBNkM0MEREQ0Q1MzVGQjdCNUMwQkVF
QTY2RTA0RTQwHhcNMjYwMTI1MDMwNDA0WhcNMjYwMjAxMDMwNDA0WjAYMRYwFAYD
VQQDDA02OTc1ODgyNS1kOTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqGmbM4pKs+UEt1Q6Rp/5CqXW1lE5It8j9l8y73EDHYhgM6a+WT5u0jyzhxvT
1K7xKnX1S4mS2xm8BBALkloY3V3Sobajqjw91WpzqUxZopd2DOTXHfgFt5ZMuwgj
nLWVXKzAfoxfAl02Jwjh+2PcUB4ejoaotiN94aiJSkrx4DOrt2Pjg1PKwbyuvBzJ
Ve3nO/1VgBADKA7lrA3wC4F4vw9Irc1vSLUoqT/+DYWdJYpA+N9ldz5yC50yon4y
wrL5LQt5PZL6d6SA0mXumBINkACRQvuqxrMWRN5LOCtF3YYKSHgsH29U0IMFRtQS
IvI4AwZ33f7P28JsSF/Zwt327wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdK8B/0
Wfdxp8ocqnIxt45XpVIoMB8GA1UdIwQYMBaAFFCg3JVYpsQN3NU1+3tcC+6mbgTk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS84QkM1MTI3Q0I5
REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhBM2MxVFg3ZTF3TDdxWnVC
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTg1MS84QkM1MTI3Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhB
M2MxVFg3ZTF3TDdxWnVCT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrBOGHY835TPm7OvKpyQb6Nit0y9TjQr8CzMc2a4KutWcULv36qUGc
5B87uvDI3DdREfjHZ3y4wwlu0A+qYi586ibvRhMAoHC/HXe5Bs9igN+kpYnSGBYr
r89HdT3yIzlFbSLv69p+xr7/E6GeGX2WMLaySzfdboVKorAcfXz+d/n0NV3OosaZ
OkXf9YrLXcUfG87ZUsO4U10d2lLR1qUjA0EZKYP1vlxm3NhKPowUH2+9B9LQDuQ1
AzSqbM1zy/CG9VXS9qRvaPi1vkQxkI9JPNoto1dhnntAUjoOf4F7r2P70CkJtuhA
/wGLFwmR7dykyg2Wx9UqUbXgVvKbeoKP
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:38:31 2026 by rpki-client