This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
File:                     U2uRsXtuG7FjjINYoPpepdDr77c.mft (raw, json)
Hash identifier:          onDu/hqs/0rEbG0NwEkLgG5OJwIPLF1lg3Jv/SC3PSQ=
Subject key identifier:   0B:20:F7:BC:C5:A8:13:A1:1B:4A:12:ED:24:FE:5F:62:61:9E:E3:13
Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7
Certificate issuer:       /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7
Certificate serial:       01F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
Manifest number:          01F3
Signing time:             Fri 16 Jan 2026 23:38:41 +0000
Manifest this update:     Fri 16 Jan 2026 23:38:40 +0000
Manifest next update:     Fri 23 Jan 2026 23:38:40 +0000
Files and hashes:         1: U2uRsXtuG7FjjINYoPpepdDr77c.crl (hash: uBA+WSSMseM3dJJCCqJJa3jFiygX8raLif4RDXxVnlE=)
                          2: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (hash: QkSv3Gc4gFnkTdv0FIFvYm4Nr0fb1nmO7PWxNtFWscE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl
                          rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 23:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125C3D, serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7
        Validity
            Not Before: Jan 16 23:38:40 2026 GMT
            Not After : Jan 23 23:38:40 2026 GMT
        Subject: CN=696acc00-5edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:07:26:10:67:cf:a7:30:f7:c1:6b:77:77:
                    44:88:b1:e3:61:61:2f:53:ce:d7:12:21:d1:8c:61:
                    b2:88:31:cb:02:90:20:2a:6e:aa:a0:6e:62:0b:51:
                    d0:51:70:fc:77:53:30:92:cc:04:92:88:e8:f7:fe:
                    f2:25:d7:fd:ab:81:eb:be:e6:5d:56:c4:a6:f3:eb:
                    6f:05:6a:1c:f8:4c:b0:eb:f6:61:3b:a7:b0:36:cd:
                    47:b6:eb:7b:0c:23:05:63:58:56:54:5e:58:fd:e8:
                    45:1a:b8:ea:25:b4:75:69:6c:12:16:1d:75:e7:67:
                    e6:18:ce:08:8a:ff:2b:c1:b7:b1:93:a0:10:f9:88:
                    ac:23:f0:c6:07:05:e1:7f:ff:03:4a:bd:8d:60:4b:
                    c4:bf:f8:81:64:5f:f7:f0:85:96:20:4c:70:0e:e3:
                    82:51:45:99:62:dd:38:10:32:3c:60:2d:0f:4f:5d:
                    30:e4:e6:2f:52:ce:02:cc:e6:b9:dd:45:de:1c:f1:
                    48:ee:6e:05:1a:68:f3:0f:f7:40:ce:6b:d8:c1:88:
                    19:74:8b:df:e6:67:94:9a:ae:31:a6:b1:c9:6d:ed:
                    54:2d:de:79:e5:d5:b2:6e:6e:63:83:47:8d:16:fe:
                    47:7e:61:ec:4f:6a:bc:0b:74:55:eb:83:19:91:7e:
                    3f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:F7:BC:C5:A8:13:A1:1B:4A:12:ED:24:FE:5F:62:61:9E:E3:13
            X509v3 Authority Key Identifier:
                keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ad:af:d7:4d:fe:b3:51:7f:3c:81:64:09:6b:c9:ec:85:a9:
         0b:a6:9f:24:7d:a0:1b:61:77:19:8d:f0:ba:bf:fe:ee:37:23:
         ff:f8:db:81:18:f5:3e:55:d5:62:d4:55:2a:e2:98:c7:01:f8:
         a6:f5:1d:62:37:4d:17:f7:73:0b:ae:4d:bf:29:6b:69:f8:c8:
         86:25:b6:ea:87:ab:4d:33:f0:e8:ca:5a:a7:7c:c4:f8:f1:20:
         f0:40:0c:ff:0b:f7:d4:01:44:ee:a6:89:bc:bd:a4:b3:01:f6:
         20:d5:2d:6e:d0:8a:a0:bb:de:29:01:87:b4:02:2e:5a:10:33:
         63:e9:6c:81:a6:2f:82:cc:3b:d2:88:3a:95:ca:1c:92:52:81:
         47:25:5e:4d:28:92:3a:e6:48:88:7d:6e:ee:c4:a9:15:95:43:
         5c:9c:5b:4a:f7:47:9e:69:18:27:17:8e:66:3a:66:6f:18:31:
         52:3e:e6:38:55:2a:53:b3:22:1e:d5:b7:51:24:e9:5a:95:87:
         f2:c1:70:e9:15:17:b6:4f:f9:86:0e:95:65:e7:8d:03:f9:1d:
         89:f8:ed:78:e4:43:99:ae:e5:39:51:1f:03:22:66:ea:77:09:
         4c:e7:63:fa:07:2b:f0:ad:e0:5e:f0:22:f0:1e:ef:23:98:10:
         b9:f3:86:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:22 2026 by rpki-client