This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
File:                     uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json)
Hash identifier:          tk/tWTPpOSri8QqOXRoYcT2PFn/yOU2gFNLXl/1LcJE=
Subject key identifier:   EB:C0:69:E6:0F:2A:C4:E6:88:BA:4C:A4:0E:5E:52:1F:E0:A1:77:B0
Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
Certificate issuer:       /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
Manifest number:          0179
Signing time:             Sun 25 Jan 2026 03:04:07 +0000
Manifest this update:     Sun 25 Jan 2026 03:04:07 +0000
Manifest next update:     Sun 01 Feb 2026 03:04:07 +0000
Files and hashes:         1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: 1q5BJ6kFz/MvuHG2USyWlc9xI9N8wXl0mFZqf6VMvEI=)
                          2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: L0qfyKxG6EHzysnGwaUqdqXIinzIkFTO2ksscDrrvZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl
                          rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA851, serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
        Validity
            Not Before: Jan 25 03:04:07 2026 GMT
            Not After : Feb  1 03:04:07 2026 GMT
        Subject: CN=69758827-9fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:b1:6a:c6:25:aa:b0:6a:04:a2:59:ff:7a:
                    ef:ff:92:11:c3:06:3c:69:0d:09:86:ef:7c:83:78:
                    da:73:e4:f0:8b:87:2d:96:58:ad:76:3d:19:ce:30:
                    71:fd:eb:e6:f5:6f:15:71:89:49:87:1f:17:f6:4e:
                    76:32:c6:68:9c:62:c7:92:7d:94:fe:b3:ef:e9:db:
                    a6:f3:25:03:60:f6:b1:bd:71:1d:19:e5:e9:ca:17:
                    a0:fd:88:ee:33:ee:03:5b:53:8a:0d:ba:25:d4:ec:
                    53:cf:d3:23:62:91:83:8b:c5:ff:ac:59:12:55:91:
                    ed:84:56:e9:84:30:a1:ab:77:e9:9b:c1:99:a0:4e:
                    96:18:f9:21:fd:0d:e0:76:b3:3a:0b:ac:95:e6:a3:
                    2b:2a:fa:52:7d:11:f7:b9:15:5a:10:45:d3:a5:fd:
                    50:ed:4e:e4:05:be:ef:31:b6:12:47:d1:68:cb:d5:
                    c2:a8:85:b4:ed:29:77:16:0a:36:e0:b8:f5:2c:4d:
                    95:06:c2:aa:33:e4:d5:89:dd:da:14:89:e8:ed:f0:
                    5b:34:60:16:57:e2:e4:ae:4d:64:97:e1:20:a6:bb:
                    ba:db:9a:72:a5:9a:1f:6a:32:71:c9:a1:03:33:4c:
                    e0:49:69:d7:36:ff:03:41:29:a6:4c:11:c3:47:c7:
                    33:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C0:69:E6:0F:2A:C4:E6:88:BA:4C:A4:0E:5E:52:1F:E0:A1:77:B0
            X509v3 Authority Key Identifier:
                keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c8:b4:ef:75:7c:e0:4c:0b:1b:27:19:c0:c2:b1:2a:75:7e:
         a3:76:53:64:55:e8:21:c1:b9:c3:1a:72:4e:a5:31:d1:34:c6:
         8f:a4:f4:52:02:4c:37:b1:00:ea:34:44:a8:11:ff:5f:f9:2c:
         38:4f:ee:f3:ce:e1:b7:04:6d:2c:3a:f0:b8:e4:5f:24:88:2d:
         90:da:f3:36:4e:2a:9b:d9:8b:ad:8d:cb:42:42:48:84:4d:8e:
         7f:a9:2c:fa:c3:92:48:18:84:b3:d9:53:dd:02:64:b5:f6:55:
         3b:0d:ef:63:6c:a6:a0:22:47:f4:be:18:6b:f7:82:d5:bd:89:
         db:58:02:2b:af:81:97:b1:ae:fe:37:06:f5:c9:56:67:33:7c:
         b3:68:b9:b8:0a:a5:9d:47:0e:62:f2:c3:b5:4e:85:62:a3:dd:
         4c:d7:dc:3c:28:5e:f0:b2:52:44:6b:7c:c7:89:7d:55:fd:3f:
         4d:0c:c7:62:bd:54:f1:d0:a2:cb:2a:c1:f3:d1:72:d1:53:d9:
         ee:78:1a:d6:94:c0:eb:d0:2e:84:d8:78:60:eb:04:1a:7b:87:
         6e:c3:da:b6:1e:db:83:5d:42:d4:8e:f8:fc:d6:ad:85:eb:b5:
         ec:bb:90:16:37:04:72:b0:5e:de:6c:a0:f0:9e:84:bb:85:85:
         ca:19:86:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:54:11 2026 by rpki-client